Policy as Code in 2026: OPA, Kyverno, Cedar and What’s Next | Harness Blog

Policy as Code (PaC) has become central to automated security and compliance governance by making rules version-controlled, testable, machine-readable artifacts separate from application logic, but policy authoring complexity remains a major adoption challenge. Open Policy Agent (OPA) is the leading general-purpose framework because it can govern infrastructure, CI/CD pipelines, Kubernetes, and other systems using Rego, though its declarative syntax, evolving data schemas, and specialized knowledge requirements create a “Rego Tax” for platform teams. In Kubernetes, Kyverno has gained adoption by using familiar YAML-based policies, while Kubernetes’ native Common Expression Language support increasingly handles simple validations and pushes external engines toward more complex functions. For application authorization, AWS Cedar emphasizes typed schemas, performance, and formal verification, while its Dogwood extension adds temporal reasoning intended to govern sequences of AI agent actions; however, Cedar remains more limited than OPA for broad infrastructure use. The article predicts that organizations will increasingly use multiple policy engines for different contexts and presents Harness’s natural-language-to-Rego generation, testing tools, and policy libraries as ways to reduce the effort of implementing OPA-based governance.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.