Nicholaos Mouzourakis, Staff Product Security Engineer at Gusto, breaks down the common deployment patterns for Open Policy Agent (OPA) in Kubernetes environments. He explains the tradeoffs between individual pods, auto-scaling groups, daemon sets, sidecars, and WASM modules.

He outlines critical considerations for selecting the right deployment option:

- Latency requirements
- Bandwidth constraints
- Development overhead
- Feature compatibility (noting WASM modules lack full standard library support)
- Cloud costs and policy size implications

He notes that co-located pods typically achieve a few milliseconds of latency, and suggests WASM modules for those requiring even better performance.

Watch the full episode: https://kube.fmhttps://ku.bz/S-2vQ_j-4