Top 23 Policy Open-Source Projects
An open source, general-purpose policy engine.Project mention: Cloud Native Java Microservices with JHipster and Istio | dev.to | 2022-06-28
Note: Currently, the JHipster OIDC setup does not work with Istio and there is an open issue in JHipster issue tracker for this. Alternative solutions would be to use an external authorization server with something like Open Policy Agent. We will cover this in a later blog post.
Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to production, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.ioProject mention: datreeio/datree: Prevent Kubernetes misconfigurations from reaching production (again 😤 )! Datree is a CLI tool to ensure K8s configs follow stability & security best practices as well as your organization’s policies. See our docs: https://hub.datree.io | reddit.com/r/devopsish | 2022-06-07
Less time debugging, more time building. Scout APM allows you to find and fix performance issues with no hassle. Now with error monitoring and external services monitoring, Scout is a developer's best friend when it comes to application development.
The corrective bash syntax highlighterProject mention: similar to shellcheck? | reddit.com/r/bash | 2022-04-21
Also worth mentioning shellharden
GitHub's employee intellectual property agreement, open sourced and reusableProject mention: Company Wants Ownership of *All* Prior Inventions and Ideas | news.ycombinator.com | 2021-12-15
I worked for a company and they wanted to do something similar, I think they went with something boilerplate or from an attorney. I suggested a compromise and we use something similar to the [GitHub Balanced Employee Intellectual Property Agreement (BEIPA)](https://github.com/github/balanced-employee-ip-agreement/blo...).
I'm not sure if in your circumstance they would go for it, but it worked out for me. Here is the github blog post - https://github.blog/2017-03-21-work-life-balance-in-employee...
FreeRADIUS - A multi-protocol policy server.Project mention: Radius solution that can easily integrate with LDAP (for wifi) | reddit.com/r/networking | 2022-05-19
I wonder why your sys admins didn't try FreeRADIUS. It ships with detailed config examples also for using LDAP for authentication.
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.
Developer Ecosystem Survey 2022. Take part in the Developer Ecosystem Survey 2022 by JetBrains and get a chance to win a Macbook, a Nvidia graphics card, or other prizes. We’ll create an infographic full of stats, and you’ll get personalized results so you can compare yourself with other developers.
Collaborative development on GitHub's site policies, procedures, and guidelines
Repository for Azure Resource Policy built-in definitions and samplesProject mention: Architecture on Decommission huge list of old Azure servers | reddit.com/r/AZURE | 2022-06-07
Found a 2018 Github article - https://github.com/Azure/azure-policy/issues/102
Project Calico's per-host agent Felix, responsible for programming routes and security policy.Project mention: Pod-to-pod encryption with Calico and Wireguard - where can I read up on this? | reddit.com/r/WireGuard | 2021-10-05
Yes, inter-node–the definitive source is in the felix repo, e.g., https://github.com/projectcalico/felix/blob/master/wireguard/wireguard.go
Mirror of FreeIPA, an integrated security information management solutionProject mention: FreeIPA client on Debian 11 | reddit.com/r/linuxadmin | 2022-05-24
FreeIPA1 is not written in PHP. I believe you are confusing it with another project, maybe FreePBX which is written in PHP?
Systematic dataset of Covid-19 policy, from Oxford UniversityProject mention: Statistical demography | reddit.com/r/AskStatistics | 2022-02-25
Policy and data administration, distribution, and real-time updates on top of Open Policy Agent (by permitio)Project mention: Using OPA (Open Policy Agent)? Check out OPAL: an open-source project that adds real-time updates to OPA, saving you lots of time and effort when building access control. | reddit.com/r/u_Permit_io | 2022-06-26
A GitHub App that enforces approval policies on pull requestsProject mention: How to automatically merge dependabot pull requests with Github Actions ? | reddit.com/r/github | 2022-05-11
My team has used a combination of bulldozer and policy-bot to do this as well. Though we only target a select set of things to auto-bump.
Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.Project mention: GitHub’s inconsistent access control | dev.to | 2022-05-19
I was recently working on publishing JSON schemas to a Google Cloud Storage bucket, and I needed to create a secret containing the bucket name for our GitHub Actions workflow. I’m a maintainer on our repository (not an admin), so although I can access some of the repository settings, I’m not allowed to see the secrets page - I get “404 Not Found” if I try.
Kubernetes security tool for policy enforcement
The OPA Gatekeeper policy library.Project mention: Container security best practices: Comprehensive guide | dev.to | 2021-11-16
Many more examples are available in the OPA Gatekeeper library project!
Cloud-native Runtime Security Enforcement System
A curated list of blogs, videos, tutorials, code, tools, scripts, and anything useful to help you learn Azure Policy - by @JesseLoudonProject mention: Azure policy, Any good tutorials | reddit.com/r/AZURE | 2022-01-12
https://github.com/globalbao/awesome-azure-policy is the best aggregated list of resources.
A plugin to enforce OPA policies with EnvoyProject mention: Authorization for synchronous communication between services | reddit.com/r/microservices | 2022-05-07
Collaborate on privacy-preserving policy for data science projects in Pandas and Apache SparkProject mention: Anonymize your Data with a single line! | reddit.com/r/Python | 2021-12-26
Well, many of the features in this project are simply wrappers around other libraries like this one. Therefore, the value proposition of this project would either have to be the automation aspect or the idea that you can shield the user from the details of how the implemented techniques work. I think both approaches are risky in this setting.
MagTape Policy-as-Code for KubernetesProject mention: Is it possible to set a per pod min and max request for CPU and memory? | reddit.com/r/kubernetes | 2021-07-15
Anyway, just to point out, there is a technical solution for this that you suggested. We are in the process of deploying Magtape which is a policy as code engine based off of OPA. I wasn't even thinking that route, but I'm sure we can write a policy to check requests and make sure they do not cross a certain boundary.
A policy framework for implementing thread-safe rack middleware.
Policy related posts
Using OPA (Open Policy Agent)? Check out OPAL: an open-source project that adds real-time updates to OPA, saving you lots of time and effort when building access control.
1 project | reddit.com/r/u_Permit_io | 26 Jun 2022
Building permissions? Check out OPAL: an open-source project that adds real-time updates to OPA (Open Policy Agent), making building access control for your products much easier.
1 project | reddit.com/r/u_Permit_io | 26 Jun 2022
Alternative to Terraform Sentinel
3 projects | reddit.com/r/Terraform | 24 Jun 2022
Opa - An open source, general-purpose policy engine.
1 project | reddit.com/r/github_trends | 19 Jun 2022
Checklist for Platform Engineers
6 projects | dev.to | 16 Jun 2022
Kubernetes Policy Enforcement: OPA vs jsPolicy
5 projects | dev.to | 16 Jun 2022
Kubescape: a Kind Insurance Inspector for Your Kubernetes Investments
4 projects | dev.to | 13 Jun 2022
What are some of the best open-source Policy projects? This list will help you:
|1||OPA (Open Policy Agent)||6,755|
Are you hiring? Post a new remote job listing for free.