Overview
policy-gate is a sidecar-compatible policy enforcement layer that evaluates declarative YAML rules using Open Policy Agent. It intercepts API requests at the gateway or sidecar level, enforcing access control, rate limits, and data governance without modifying application code.
Quick Start
# policies/api-access.yaml
rules:
- path: /api/admin/*
require:
role: admin
mfa: true
- path: /api/users/*
rateLimit:
requests: 100
window: 60s
Features
- Declarative YAML policy definitions compiled to Rego
- Sidecar and API gateway deployment modes
- Role-based and attribute-based access control
- Rate limiting and quota enforcement
- Audit log with policy decision context
- Hot-reload policies without restart