policy-opa

# Policy-as-Code with Open Policy Agent ## Overview This skill enables policy-as-code enforcement using Open Policy Agent (OPA) for compliance validation, security policy enforcement, and configuration auditing. OPA provides a unified framework for policy evaluation across cloud-native environments, Kubernetes, CI/CD pipelines, and infrastructure-as-code. Use OPA to codify security requirements, compliance controls, and organizational standards as executable policies written in Rego. Automatically validate configurations, prevent misconfigurations, and maintain continuous compliance. ## Quick Start ### Install OPA ```bash # macOS brew install opa # Linux curl -L -o opa https://openpolicyagent.org/downloads/latest/opa_linux_amd64 chmod +x opa # Verify installation opa version ``` ### Basic Policy Evaluation ```bash # Evaluate a policy against input data opa eval --data policy.rego --input input.json 'data.example.allow' # Test policies with unit tests opa test policy.rego policy_test.rego --verbose # Run OPA server for live policy evaluation opa run --server --addr localhost:8181 ``` ## Core Workflow ### Step 1: Define Policy Requirements Identify compliance requirements and security controls to enforce: - Compliance frameworks (SOC2, PCI-DSS, GDPR, HIPAA, NIST) - Kubernetes security policies (pod security, RBAC, network policies) - Infrastructure-as-code policies (Terraform, CloudFormation) - Application security policies (API authorization, data access) - Orga...