Także: opa, opa gatekeeper, rego
Open-source, general-purpose policy engine from the CNCF that evaluates policies written in Rego. Used for Kubernetes admission control with Gatekeeper, API and service authorisation, and policy checks on infrastructure as code in CI.