|
|
|
|
|
by charlesdaniels
728 days ago
|
|
Wow, didn’t realize it had enough legs for people to be hearing about it except via me! Awesome to hear that. Rego is “for” those authz cases like the ones you mentioned in the sense that it’s definitely designed with those in mind, and I do think it does a good job for those needs. OPA itself is definitely geared for use as a microservice or container sidecar, talking over the wire. That’s kinda hard to use in a shell script though. Once I learned it I found myself using opa eval for searching and transforming data, eventually so much so that I made a shell script called “rq” that was basically opa eval -I -f pretty… the rest is history. |
|