Enforce Ingress Best Practices Using OPA

In this section of our OPA series, we define policies that ensure that no bad Ingress definitions will be deployed to our cluster. If you haven’t already done so, please go through our previous articl...

• Mohamed Ahmed
  Jul 15, 2020

Enforce Kubernetes Container Images To Have Label That is Not “Latest”

Welcome to a new article in our OPA series. This article is part of a series. To follow along, you should at least know what Open Policy Agent (OPA) is and how you can use Rego to describe policies. I...

• Mohamed Ahmed
  Jul 7, 2020

How To Force Kubernetes Namespaces To Have ResourceQuotas Using OPA

The Problem With Not Setting Container Requests And Limits In Kubernetes clusters, effective resource utilization should not be taken lightly. Even in the smallest environments, you need to ensure tha...

• Mohamed Ahmed
  Jun 30, 2020

How To Enforce Kubernetes Network Security Policies Using OPA

This article is part of our Open Policy Agent (OPA) series, and assumes that you are familiar with Kubernetes and OPA. If you haven’t already done so, or if you need a refresher, please have a look at...

• Mohamed Ahmed
  Jun 25, 2020

Enforce Pod Security Policies In Kubernetes Using OPA

In this article, we’re going to demonstrate how you can enforce the most fine-grained security policies using OPA. Notice that this article is part of a series in which we’re building upon the knowled...

• Mohamed Ahmed
  Jun 16, 2020

How To Integrate OPA Into Your Kubernetes Cluster Using Kube-mgmt

Earlier in this series, we explained what OPA is, then we demonstrated how easy it is to integrate OPA with your Kubernetes cluster through the OPA Gatekeeper project. In this article, we explore anot...

• Mohamed Ahmed
  Jun 9, 2020