OPA Policy Engine

Open Policy Agent (OPA) is a general-purpose policy engine that decouples policy decisions from application logic. You write policies in Rego (a declarative query language), and OPA evaluates them against structured data (JSON). Common uses: Kubernetes admission control (allow/deny/mutate pod specs), CI/CD compliance (enforce standards), API gateway authorization (allow/deny API calls), and infrastructure-as-code policy (Terraform, Helm linting).