Secure DevSecOps: Evaluating OPA Policies Local to Your Data

Harness introduces the capability to evaluate Open Policy Agent (OPA) policies on local infrastructure, specifically on Kubernetes clusters, to enhance security and compliance for enterprises with strict data residency and firewall rules. This approach allows policy evaluations to occur within the corporate trust boundary, safeguarding sensitive credentials and data without sacrificing the speed and efficiency of continuous delivery pipelines. By enabling local OPA evaluation, Harness addresses challenges such as accessing secure internal systems, managing large or sensitive payloads, and maintaining pipeline integrity without exposing critical information to external environments. This development ensures that enterprises can adhere to compliance requirements while maintaining developer productivity and toolchain efficiency.