OPA & Rego

Name: OPA & Rego
Availability: InStock

A standalone path through Open Policy Agent, the general-purpose policy engine, and its language Rego. Beginner covers the decoupled-policy model, installing OPA, Rego basics (rules, queries), and testing policies. Intermediate builds real guardrails: deny/allow patterns, data and inputs, Conftest for config/IaC, and policy testing/coverage. Advanced goes deep: OPA Gatekeeper for Kubernetes admission, the decision API and bundles, performance and safety, and secure policy delivery. Real Rego and CLI output throughout; each level ends with a self-test feeding a rotating final exam.

Advanced3 sections · 12 lessons · ~6h total · 14-question self-test

Start course

OPA fundamentals

4 lessons

01What OPA is: decoupled policyOne engine for all your rules.12 min 02Install, eval & the REPLRun your first query.10 min 03Rego basics: rules & queriesHow Rego actually evaluates.14 min 04Testing policiesopa test and table-driven tests.12 min

Rego patterns, data & Conftest

4 lessons

01Deny/allow patternsThe idioms real policies use.14 min 02Input, data & document modelFeeding facts to policy.12 min 03Conftest for config & IaCPolicy on YAML, Terraform, Dockerfiles.14 min 04Policy testing & coverageTrust your policies before shipping.12 min

Gatekeeper, bundles & delivery

4 lessons

01Gatekeeper: Kubernetes admissionConstraints and templates in-cluster.14 min 02The decision API & bundlesOPA as a service; distributing policy.12 min 03Performance, safety & the landscapeFast, safe Rego; Sentinel & Kyverno.12 min 04Delivering policy securelyVersion, test, and enforce guardrails.12 min

Progress is saved in this browser only — no account required.

Final exam

Test yourself on everything

14 questions drawn from all 3 sections — every answer explained as you pick.

Start final exam