Open Policy Agent (OPA), is an open source, general purpose policy engine. OPA decouples policy decisions from other responsibilities of an app, like those commonly referred to as business logic.
OPA works equally well making decisions for Kubernetes, Microservices, functional app authorization and more, thanks to its single unified policy language.
In a a nutshell, the OPA policy engine evaluates requests to determine whether they conform to configured policies.
OPA can integrate with Kubernetes easily: it expects a JSON input, is easy to containerize & supports dynamic configuration,
which makes it well-suited to provide policy evaluation for the Kubernetes API service.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Kubernetes Hacks and Tricks — #1 Immutable ConfigMaps & Secrets
#Kubernetes ConfigMap & Secret resources have a field called immutable which, if set to true, ensures that the data of ConfigMap/Secret cannot be updated after resource is created.
#Kubernetes Hacks and Tricks — #2 Optional ConfigMaps & Secrets in Pods
In some apps, app configs are set by default in the codebase (hard-coded) and if you want to override them, you can provide your override values via environment variables
Always keep this in mind when you're dealing with #Kubernetes:
Running a pod without a deployment can be done, however it is generally not recommended.
#Kubernetes now recommends running almost all of your Pods in Deployments instead of using custom ReplicaSets.
Without a deployment, Pods can still be created and run through unmanaged ReplicaSets. While you will still be able to scale your app you lose out on a lot of base functionality deployments provide and drastically increase your maintenance burden.#Kubernetes
Serverless 101: A series to help you understand what AWS serverless services do. It talks about how to use the services together to build highly scalable applications using event-driven architecture built on serverless.
▶️
👇
Serverless 101: Amazon SQS
A high-level overview of SQS. SQS is a fully managed message queuing service that makes it easy to decouple and scale microservices, distributed systems, and serverless apps.