Nada Bashar·2d agoMigrating from Oracle PCS to OPA — Part 4In this part, I won’t focus on one specific topic. Instead, I’ll go through different points and observations I faced during the migration…
Nada Bashar·Nov 2Migrating from Oracle PCS to OPA — Part 3 (Gateways)While migrating one of our processes from Oracle Process Cloud Service (PCS) to Oracle Process Automation (OPA), I came across an…
Mary Becken·Oct 17Forbidden ConfigurationForbidden Configuration: Operationalizing Policy as Code to guard against misconfigurations, vulnerabilities, and more on an evolving…
Robert Broeckelmann·Oct 5OPA and Rego — Because Apparently Everything Needs a PolicyIn the last couple of articles, we’ve been wandering through the increasingly complicated world of authorization.A response icon1A response icon1
InDevOps.devbySuranga Jayalath·Oct 1Master Open Policy Agent (OPA)If you’ve ever had to hardcode authorization logic inside a microservice or manually check whether your Kubernetes deployment YAMLs meet…
When It Runs·Sep 24When OPA’s `semver.is_valid` Runs on What SemVer RejectsOn OPA v1.20.2, semver.is_valid returns true for leading-zero versions (01.2.3, 1.02.3) and empty pre-release/build sections (1.2.3…
When It Runs·Sep 22When OPA’s Bundle Loader Runs Past a `.manifest` TypoIn bundle mode, a one-character .manifest key typo (rego_verison for rego_version) draws no diagnostic that names the key; the failure can…
Biman Dey Sarkar·Sep 12Four Questions, One Screen: Building a Process Automation Admin Console on Oracle’s OPA REST APIHow a Monday-morning Teams message turned into a weekend MVP and a roadmap that touches half the OPA REST API catalog.
More On That·Sep 12The Architecture Netflix Built Around OPAPart 4 of a series on distributed authorization, inspired by Netflix’s engineering approach to access control.
More On That·Sep 11Inside Open Policy Agent: How Rego Actually WorksPart 3 of a series on distributed authorization, inspired by Netflix’s engineering approach to access control.