How open-policy-agent/library works
This repository is a community Rego policy library for analyzing infrastructure and Kubernetes-related JSON, not a running service. Its user workflow is to find reusable policy logic, adapt it into policies for a target domain, and evaluate those policies with OPA. The tree shows Terraform and AWS libraries, Docker examples, Kubernetes admission, mutation, and audit policies, and Istio audits. README-level relationships describe reuse and OPA library consumption; source excerpts were unavailable, so internal calls and data flow are not inferred.
Main entry points: terraform/library.rego Terraform helpers · aws/library.rego AWS helpers · terraform/example.rego Terraform examples · aws/example.rego AWS examples
Components 15
Cloud policies
- Terraform policies
terraform - AWS policies
aws - Docker policies
docker
Kubernetes policies
- Admission policies
kubernetes/admission - Admission mutation
kubernetes/mutating-admission - Cluster audits
kubernetes/audit - Kubernetes inputs
kubernetes/inputs
Mesh auditing
- Istio audits
istio/audit
Policy library
- Terraform helpers
terraform/library.rego - AWS helpers
aws/library.rego - Terraform examples
terraform/example.rego - AWS examples
aws/example.rego - Docker examples
docker/example.rego
Other components
- Policy author
- Open Policy Agent
Connections 13
- Policy author → Terraform helpers: reuses helpers
- Policy author → AWS helpers: reuses helpers
- Open Policy Agent → Terraform helpers: pulls library
- Open Policy Agent → AWS helpers: pulls library
- Terraform examples → Terraform helpers: demonstrates use
- AWS examples → AWS helpers: demonstrates use
- Policy author → Terraform policies: adapts policies
- Policy author → AWS policies: adapts policies
- Policy author → Docker policies: adapts policies
- Policy author → Admission policies: adapts policies
- Policy author → Admission mutation: adapts policies
- Policy author → Cluster audits: adapts policies
- Policy author → Istio audits: adapts policies