Centralize Navigator web route authorization decisions in Open Policy Agent.
npx skills add https://github.com/neon-law-foundation/navigator --skill opa-policy
Please help me install this Agent Skill. Skill: opa-policy Source: https://github.com/neon-law-foundation/navigator/tree/main/.claude/skills/opa-policy Command: npx skills add https://github.com/neon-law-foundation/navigator --skill opa-policy
This Skill removes scattered authorization logic by centralizing access-control decisions for Navigator web routes in Open Policy Agent.
Use this Skill to update Navigator authorization policy in OPA, verify the route rules, and keep enforcement fail-closed for protected web paths.
High-intent search queries and answers about installing and using this skill.
Centralizing authorization in OPA moves access-control decisions for web routes into Rego policies, enforced via a middleware and sidecar pattern. This lets you update rules without redeploying the application.
You update Navigator authorization policy by writing default-deny Rego rules, bundling them into a hot-reloadable ConfigMap, and verifying route enforcement through the OPA sidecar.
Yes, OPA middleware returns 403 responses when access is denied for protected portal routes. The sidecar enforcement also operates with fail-closed behavior on transport errors to maintain security.
Yes, you can hot-reload Rego policies in OPA without redeploying by bundling policy updates into a ConfigMap. This allows policy changes to take effect immediately in production.
When OPA encounters a transport error, Navigator web enforcement defaults to fail-closed behavior, blocking access to protected routes rather than allowing unverified requests through.
Yes, default-deny rules are required when configuring OPA authorization for Navigator. This ensures all access requests are explicitly rejected unless a Rego policy rule grants permission.
rohitg00Audit Kubernetes RBAC configurations and enforce security policies across clusters.
Void3110Generate, review, and test OPA Rego policies with default deny and test suites.
dhofheinzRoute performance optimization tasks across database, backend, frontend, and infrastructure layers.
drdave-flexnetosCombine Keycloak authentication, OPA policy evaluation, and Vault secret handling for controlled access.
