Live data from Hacker News

Opa – An open-source, general-purpose policy engine

github.com

31–40 of 43 posts

Re: Opa – An open-source, general-purpose policy engine

#32

Co-author of OPA here. I’m happy to answer any questions about the project!

Is there an example of a simple service that uses OPA for authorization?

There are tutorials that show how to integrate OPA with different projects on the website. One of them is a simple Python-based HTTP service: https://www.openpolicyagent.org/docs/http-api-authorization....

Re: Opa – An open-source, general-purpose policy engine

#35

Co-author of OPA here. I’m happy to answer any questions about the project!

Before OPA existed, what policy engine did you use and why weren't you happy with what you had? If you didn't use a policy engine, why did you decide to create one rather than use an existing one?

Re: Opa – An open-source, general-purpose policy engine

#36
post #2

Unfortunate name conflict with http://opalang.org/

Get used to it. After 40+ years in this industry, every single 2,3 and 4 letter acronyms are already used by Something else.

And this needs to be 2, 3, or 4 letter acronym because?

Re: Opa – An open-source, general-purpose policy engine

#38

Earlier quoted context omitted.

"The Open Policy Agent (OPA) is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack." To someone who doesn't already know what a "policy engine" is, that intro is completely meaningless. Might want to at least move a tiny blurb from the later doc to that opening paragraph.

Thanks, this is helpful. We'll look at improving the opening paragraph for the wider audience.

Well, what is a policy engine?!

Re: Opa – An open-source, general-purpose policy engine

#39

Co-author of OPA here. I’m happy to answer any questions about the project!

hi again, just watched the youtube where you presented OPA on KubeCon 2018. i'm interested in it, but it appears most of your use case is around infrastructure. do you have use cases where it is applied in the application itself? for example, you mentioned Netflix used it for their infrastructure -- would Netflix use this to manage all the paying subscriber functions too? I imagine functions such as

1. what movies are available to my region 2. is this profile allowed to watch a certain movie? 3. can i view my account settings?

may be a good fit, but just wanted to be sure. another area may be in gaming, where new functions such as: 1. am i allowed to access this weapon 2. am i allowed to be on this terrain map 3. who my team members are

may pop up.

I have some application use cases that are very similar along these lines, so I'd like to know more about this before going in deeper to evaluate OPA.

that being said, all looks positive and i thank you for the good work you have done, specially open sourcing it to make it available.

Re: Opa – An open-source, general-purpose policy engine

#40

Earlier quoted context omitted.

Is one of you Greek?

There are no Greeks among the core contributors :-(

Was curious if the OPA acronym for the project is an allusion to a often used word among Greeks.. an exclamation during celebration or when lighting this deep fried goat cheese called saganaki after it's been sprayed with alcohol.

Technically asking a question about the authors is a project question, so I'm not sure why I got downvoted :/.

Post reply on HN