Skip to main content

OPA Ecosystem

Showcase of OPA integrations, use-cases, and related projects.

Create With OPA

Integrate with OPA from your language

Rego Language

Rego is the policy language used by OPA and there are various integrations that make working with the language easier.

OPA at Scale

OPA has a number of features that are most useful when running OPA in production. These integrations make use of those features, and make it easier to use OPA at scale.

Tool Integrations

OPA plays nice with a range of existing tools too via some bespoke integrations.

Created with OPA

OPA's SDKs and APIs offer a solid foundation for all kinds of projects. See the integrations below for inspiration.

All Entries & Integrations

All integrations are ordered by the number of linked resources.

Kubernetes Admission Control

Kubernetes Admission Control

View Details
Terraform Policy

Terraform Policy

View Details
Styra Declarative Authorization Service

Styra Declarative Authorization Service

Policy as Code Control Plane

View Details
Container Network Authorization with Envoy

Container Network Authorization with Envoy

Official OPA Envoy Integration

View Details
Authorization for Spring Security

Authorization for Spring Security

View Details
Kafka Topic Authorization

Kafka Topic Authorization

View Details
Regal

Regal

The Linter of Rego Language

View Details
Conftest

Conftest

Rego policy for configuration files

View Details
Styra Enterprise OPA

Styra Enterprise OPA

View Details
Fairwinds Insights Configuration Validation Software

Fairwinds Insights Configuration Validation Software

View Details
OPA Gatekeeper

OPA Gatekeeper

Rego Policy Controller for Kubernetes

View Details
OPA Wasm Javascript Module

OPA Wasm Javascript Module

View Details
Permit.io

Permit.io

View Details
PHP OPA Library

PHP OPA Library

View Details
Strimzi (Apache Kafka on Kubernetes)

Strimzi (Apache Kafka on Kubernetes)

View Details
Authorization Integration with Apache APISIX

Authorization Integration with Apache APISIX

View Details
AWS CloudFormation Hook

AWS CloudFormation Hook

View Details
Ceph Object Storage Authorization

Ceph Object Storage Authorization

View Details
dependency-management-data

dependency-management-data

A set of tooling to get a better understanding of the use of dependencies across your organisation.

View Details
Flipt

Flipt

CloudNative Feature Flag Management

View Details
i2scim.io SCIM Restful User/Group Provisioning API

i2scim.io SCIM Restful User/Group Provisioning API

View Details
Kubernetes Authorization

Kubernetes Authorization

View Details
Kubescape

Kubescape

Kubernetes security posture scanner

View Details
Legitify

Legitify

Security policy for SCM

View Details
Nomad Admission Control Proxy

Nomad Admission Control Proxy

NACP

View Details
OPA ASP.NET Core SDK (Styra)

OPA ASP.NET Core SDK (Styra)

View Details
C# OPA SDK (Styra)

C# OPA SDK (Styra)

View Details
Wasm .NET Package (me-viper)

Wasm .NET Package (me-viper)

View Details
OPA Go SDK

OPA Go SDK

View Details
Java OPA Wasm SDK (Styra)

Java OPA Wasm SDK (Styra)

View Details
Java OPA SDK (Styra)

Java OPA SDK (Styra)

View Details
Typescript OPA SDK (Styra)

Typescript OPA SDK (Styra)

View Details
Wasm .NET Package (christophwille)

Wasm .NET Package (christophwille)

View Details
OPA Wasm Rust Crate

OPA Wasm Rust Crate

View Details
OPAL

OPAL

Open Policy Administration Layer

View Details
Open Policy Registry

Open Policy Registry

A Docker-inspired workflow for OPA policies

View Details
Principled Evolution (GOPAL & AICertify)

Principled Evolution (GOPAL & AICertify)

View Details
raygun

raygun

Black-box Automated Testing for Rego

View Details
Scalr

Scalr

Policy enforcement for Terraform

View Details
Spacelift

Spacelift

View Details
Traefik API Gateway

Traefik API Gateway

View Details
VS Code Extension

VS Code Extension

OPA Integration for the VS Code editor

View Details
walt.id SSI Kit

walt.id SSI Kit

Self-Sovereign Identity toolkit with OPA policy support

View Details
Backstage

Backstage

View Details
Boomerang Bosun Policy Gating

Boomerang Bosun Policy Gating

View Details
Bottle Application Authorization

Bottle Application Authorization

View Details
Chef Automate

Chef Automate

Operational Visibility Dashboard

View Details
Kubernetes Admission Control using Vulnerability Scanning

Kubernetes Admission Control using Vulnerability Scanning

View Details
Cloudflare Worker Enforcement of OPA Policies Using Wasm

Cloudflare Worker Enforcement of OPA Policies Using Wasm

View Details
Container Signing, Verification and Storage in an OCI registry

Container Signing, Verification and Storage in an OCI registry

View Details
HTTP API Authorization in Dart

HTTP API Authorization in Dart

View Details
Digger

Digger

GitOps for Terraform

View Details
Docker controls via OPA Policies

Docker controls via OPA Policies

View Details
Elasticsearch Data Filtering

Elasticsearch Data Filtering

View Details
Enterprise Contract

Enterprise Contract

View Details
Flask-OPA

Flask-OPA

View Details
GCP audit with Forseti

GCP audit with Forseti

View Details
GitHub Action for OPA Rego Test

GitHub Action for OPA Rego Test

GitHub Action to automate testing OPA Rego policies

View Details
Gloo API Gateway

Gloo API Gateway

View Details
Google Calendar

Google Calendar

View Details
GKE Policy Automation

GKE Policy Automation

View Details
Gradle Build Plugin (Bisnode)

Gradle Build Plugin (Bisnode)

View Details
IPTables

IPTables

View Details
Container Network Authorization with Istio (as part of Mixer)

Container Network Authorization with Istio (as part of Mixer)

View Details
API Gateway Authorization with Kong

API Gateway Authorization with Kong

View Details
KubeShield

KubeShield

Secure Kubernetes using eBPF & Open Policy Agent

View Details
SSH and Sudo Authorization with Linux

SSH and Sudo Authorization with Linux

View Details
Lula

Lula

The Cloud-Native Compliance Engine

View Details
OpenID Connect (OIDC)

OpenID Connect (OIDC)

View Details
.NET Package (me-viper)

.NET Package (me-viper)

View Details
OPA Errors

OPA Errors

OPA error message reference

View Details
OPA Playground

OPA Playground

Online Rego Playground

View Details
OPA Spring Boot SDK (Styra)

OPA Spring Boot SDK (Styra)

View Details
Wasm Java Gradle SDK (sangkeon)

Wasm Java Gradle SDK (sangkeon)

View Details
OpenFaaS Serverless Function Authorization

OpenFaaS Serverless Function Authorization

View Details
OPToggles (Open Policy Toggles)

OPToggles (Open Policy Toggles)

View Details
Pomerium Access Proxy

Pomerium Access Proxy

View Details
Pre-commit hooks

Pre-commit hooks

View Details
Rego Cheat Sheet

Rego Cheat Sheet

Quick reference for learning Rego

View Details
rego-test-assertions

rego-test-assertions

Helper functions for unit testing Rego

View Details
Rekor transparency log monitoring and alerting

Rekor transparency log monitoring and alerting

View Details
Reposaur

Reposaur

View Details
Sansshell

Sansshell

View Details
Armory Policy Engine for Spinnaker

Armory Policy Engine for Spinnaker

View Details
SQL Database Data Filtering

SQL Database Data Filtering

View Details
Styra Academy

Styra Academy

OPA Learning Portal

View Details
Terraform Cloud

Terraform Cloud

View Details
Alfred

Alfred

Self-hosted OPA playground

View Details
ANTLR Grammar

ANTLR Grammar

View Details
.NET Core Middleware (build-security)

.NET Core Middleware (build-security)

View Details
Awesome OPA List

Awesome OPA List

View Details
AWS API Gateway

AWS API Gateway

View Details
Carbonetes - BrainIAC

Carbonetes - BrainIAC

View Details
CircleCI

CircleCI

View Details
App authorization for Clojure

App authorization for Clojure

View Details
CoreDNS Authorization

CoreDNS Authorization

View Details
Library-based Microservice Authorization

Library-based Microservice Authorization

View Details
Easegress

Easegress

View Details
Emissary-Ingress

Emissary-Ingress

View Details
Express OR in Rego

Express OR in Rego

Idiomatic Rego Examples

View Details
Gluu Gateway Authorization

Gluu Gateway Authorization

View Details
Custom Application with Field-level Authorization in Graphene GraphQL

Custom Application with Field-level Authorization in Graphene GraphQL

View Details
Jenkins Job Trigger Policy Enforcement

Jenkins Job Trigger Policy Enforcement

View Details
Kubernetes Provisioning

Kubernetes Provisioning

View Details
Minio API Authorization

Minio API Authorization

View Details
NodeJS Express (build-security)

NodeJS Express (build-security)

View Details
Java Client (Bisnode)

Java Client (Bisnode)

View Details
Python Client (Turall)

Python Client (Turall)

View Details
Open Service Mesh (OSM)

Open Service Mesh (OSM)

View Details
Rego Language Comparisons

Rego Language Comparisons

Learn Rego by comparison

View Details
Automatically document Rego policies

Automatically document Rego policies

View Details
Sysdig Image Scanner Admission Controller

Sysdig Image Scanner Admission Controller

View Details
Zed Extension

Zed Extension

OPA Integration for the Zed editor

View Details