gatekeeper
FIPS 140-3Integration & deliveryPolicy Controller for Kubernetes, built on Open Policy Agent.
Policy Controller for Kubernetes, built on Open Policy Agent.
Gatekeeper is a policy controller for Kubernetes, built on top of the Open Policy Agent (OPA) Constraint Framework. Gatekeeper integrates with the Kubernetes admission controller API to enforce policies that govern which resources can be created on a cluster, and it can audit existing resources against those same policies.
Policies are expressed as ConstraintTemplate and Constraint custom resources written in
Rego, OPA's declarative policy language. Common uses
include enforcing required labels, restricting container images to approved registries, blocking privileged workloads,
and ensuring resource quotas and security contexts.
Gatekeeper is an official sub-project of Open Policy Agent (OPA), which is a Cloud Native Computing Foundation graduated project.