Open Policy Agent
E699796
Open Policy Agent is an open source, general-purpose policy engine used to define and enforce fine-grained, declarative policies across cloud-native systems and applications.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Open Policy Agent canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T7938791 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Open Policy Agent Context triple: [Cloud Native Computing Foundation, hostsProject, Open Policy Agent]
-
A.
Istio
Istio is an open-source service mesh that provides traffic management, security, and observability for microservices running on platforms like Kubernetes.
-
B.
Argo CD
Argo CD is a declarative, GitOps-based continuous delivery tool that automates application deployment and lifecycle management on Kubernetes clusters.
-
C.
Open Container Initiative
The Open Container Initiative is an open governance structure that develops industry standards for container formats and runtimes to ensure interoperability across container technologies.
-
D.
Oracle Container Engine for Kubernetes
Oracle Container Engine for Kubernetes is a managed Kubernetes service on Oracle Cloud Infrastructure that simplifies deploying, managing, and scaling containerized applications.
-
E.
Red Hat CoreOS
Red Hat CoreOS is a container-optimized, minimal Linux operating system designed by Red Hat to provide an automated, secure, and scalable platform for running containerized workloads, particularly on OpenShift.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Open Policy Agent Target entity description: Open Policy Agent is an open source, general-purpose policy engine used to define and enforce fine-grained, declarative policies across cloud-native systems and applications.
-
A.
Istio
Istio is an open-source service mesh that provides traffic management, security, and observability for microservices running on platforms like Kubernetes.
-
B.
Binary Authorization
Binary Authorization is a Google Cloud security service that enforces deploy-time image verification and policy controls to ensure only trusted container images are run in your environments.
-
C.
Argo CD
Argo CD is a declarative, GitOps-based continuous delivery tool that automates application deployment and lifecycle management on Kubernetes clusters.
-
D.
Open Container Initiative
The Open Container Initiative is an open governance structure that develops industry standards for container formats and runtimes to ensure interoperability across container technologies.
-
E.
Oracle Container Engine for Kubernetes
Oracle Container Engine for Kubernetes is a managed Kubernetes service on Oracle Cloud Infrastructure that simplifies deploying, managing, and scaling containerized applications.
- F. None of above. chosen
Statements (52)
| Predicate | Object |
|---|---|
| instanceOf |
authorization framework
ⓘ
cloud-native security tool ⓘ open-source software ⓘ policy engine ⓘ |
| architecture | decoupled policy decision point ⓘ |
| CNCFStatus | graduated project ⓘ |
| deploymentModel |
centralized service
ⓘ
host-level daemon ⓘ library ⓘ sidecar ⓘ |
| designedFor |
Kubernetes environments
ⓘ
cloud-native environments ⓘ microservices architectures ⓘ |
| documentation | https://www.openpolicyagent.org/docs/ ⓘ |
| governedBy | Cloud Native Computing Foundation NERFINISHED ⓘ |
| hasAbbreviation | OPA NERFINISHED ⓘ |
| hostedOn | https://github.com/open-policy-agent/opa ⓘ |
| hostOrganization | Cloud Native Computing Foundation NERFINISHED ⓘ |
| initialReleaseYear | 2016 ⓘ |
| integratesWith |
CI/CD pipelines
ⓘ
Envoy NERFINISHED ⓘ Kubernetes NERFINISHED ⓘ Linux PAM NERFINISHED ⓘ Terraform NERFINISHED ⓘ service meshes ⓘ |
| license | Apache License 2.0 ⓘ |
| policyLanguage | Rego NERFINISHED ⓘ |
| programmingLanguage | Go NERFINISHED ⓘ |
| provides |
policy decision point
ⓘ
policy evaluation engine ⓘ |
| repositoryPlatform | GitHub NERFINISHED ⓘ |
| sourceModel | open source ⓘ |
| supports |
JSON input data
ⓘ
declarative policies ⓘ fine-grained policies ⓘ policy-as-code ⓘ structured data evaluation ⓘ |
| supportsDecisionAPI |
REST
NERFINISHED
ⓘ
gRPC NERFINISHED ⓘ |
| supportsFeature |
distributed policy deployment
ⓘ
partial evaluation ⓘ policy bundles ⓘ policy testing ⓘ policy versioning ⓘ |
| supportsPolicyLanguage | Rego NERFINISHED ⓘ |
| useCase |
API access control
ⓘ
admission control ⓘ authorization ⓘ compliance enforcement ⓘ data filtering ⓘ infrastructure policy enforcement ⓘ |
| website | https://www.openpolicyagent.org/ ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Open Policy Agent Description of subject: Open Policy Agent is an open source, general-purpose policy engine used to define and enforce fine-grained, declarative policies across cloud-native systems and applications.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.