For several rules, we need to define the same set of variables. In the example, these are "ns", "externaldns", "svc", "nssvc". How could we take these definitio...

I have 3 roles and I am trying to return what actions a user can do based on the assigned roles. Playground: https://play.openpolicyagent.org/p/5gN7ObojXh The first part should check if the object bei...

I am trying to write a policy that blocks permission for specific users to a list of specific kubernetes namespaces. This is what I have so far, it works for singular user/namespace but I need one tha...

I'm using Open Policy Agent as an authorization component together with OIDC enabled apps. I have input from the apps in the format: { "token": { "scopes": [ ...