# Open Policy Agent utility

This folder contains the entry point for Open Policy Agent policies.

Since Open Policy Agent policies have to produce an `AdmissionReview`
object, this utility library contains the Rego entry point that
generates such `AdmissionReview`, based on whether the `deny` query
inside the package `kubernetes.admission` (defined by the policy
itself) is evaluated to `true`.

If `deny` evaluates to true, the produced `AdmissionReview` will
reject the request. Otherwise, it will be accepted.