3 ms·
Also notable that Rego (the language in Open Policy Agent) [1] is a Datalog (or heavily inspired by) It's used in various policy evaluators (unsurprisingly) ar
by pentaphobe 3y ago
Also notable that Rego (the language in Open Policy Agent) [1] is a Datalog (or heavily inspired by)
It's used in various policy evaluators (unsurprisingly) around access management, but also for gatekeeper [2] which allows security teams to define constraints around kubernetes resources, similarly conftest [3] can do the same for terraform
For a lot of simple cases it's a fair bit more complicated (and unfamiliar) than tailored query languages, but really shines for matching over a complex graph of interlinking resources and then evaluating Boolean logic against the matches.
[1]: https://www.openpolicyagent.org/docs/latest/policy-language/#:~:text=query%20language%20Rego.-,What%20is%20Rego%3F,on%20data%20stored%20in%20OPA https://www.openpolicyagent.org/docs/latest/policy-language/....
[2]: https://open-policy-agent.github.io/gatekeeper/website/ https://open-policy-agent.github.io/gatekeeper/website/
[3]: https://www.conftest.dev/ https://www.conftest.dev/