kubewarden / policy-evaluator

Crate used by Kubewarden that is able to evaluate policies with a given input, request to evaluate and settings.
Apache License 2.0
15 stars 9 forks source link

Allow evaluation of Rego based policies #14

Closed flavio closed 3 years ago

flavio commented 3 years ago

Rego policies can be built into WebAssembly modules that can then be evaluated. We have proved this to be possible using this POC

The goal of this issues is to integrate the code of the POC into this crate.

Admission criteria

Linked cards

flavio commented 3 years ago

I think this can be closed right now, at least for Opa policies.

We will create new cards to handle Gatekeeper ones