OPA-Gatekeeper-Demo

These are basic rego rules for demo.
There are more useful rules from opa official: https://github.com/open-policy-agent/gatekeeper-library

Requirements

• install OPA-Gatekeeper for your Kubernetes Cluster.
  You can reference: https://open-policy-agent.github.io/gatekeeper/website/docs/install

Rules

1. denyallpod: deny any pods creation
2. image: accept specific container registry when pod creation
3. label: accept specific label when namespace creation
4. pod-security-context: deny root privileged container when pod creation

Run

• use kubectl apply -f xxx-rule.yaml
• use kubectl apply -f xxx-invalid.yaml to test rules.