July 2024
Intermediate to advanced
556 pages
13h 27m
English
Content preview from Policy as Code
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Chapter 6. MagTape and Kubernetes
In this chapter, I am going to focus on MagTape, an OSS PaC project, originally from T-Mobile, that is underpinned by OPA and Rego. MagTape wraps and extends OPA. In the context of design patterns, MagTape applies the Decorator design pattern to give additional functionality to OPA without changing the underlying OPA implementation.
The purpose of MagTape’s extensions is to add business workflows, including a notification layer that integrates to Slack via webhooks. As a decorator or a wrapper of OPA, MagTape operates between the Kubernetes API server and the OPA service, like a proxy. MagTape configures a layer of indirection using init containers for OPA service integration.
According to the project insights, most of the contributions to the MagTape project were made in 2020. There were also some in 2021 and 2022, but the project doesn’t seem to be too active. This is further evidenced by the relatively older versions of OPA and kube-mgmt that the MagTape install is currently set to use. That being said, I included MagTape in this book to expose some interesting ideas and best practices for using OPA in Kubernetes. So let’s get started by exploring how MagTape is installed and configured.
Installing and Uninstalling MagTape
MagTape is easy to install and uninstall via the following install YAML file:
# Download install YAML $ curl -O \ https://raw.githubusercontent.com/tmobile/magtape/v2.4.0/deploy/install.yaml
Although instructions for ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.