{"id":15516213,"url":"https://github.com/dippynark/gatekeeper-constraints","last_synced_at":"2026-03-19T20:27:34.805Z","repository":{"id":54579703,"uuid":"314300996","full_name":"dippynark/gatekeeper-constraints","owner":"dippynark","description":null,"archived":false,"fork":false,"pushed_at":"2022-06-05T00:06:06.000Z","size":391,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-01-23T12:11:36.771Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Open Policy Agent","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dippynark.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-11-19T16:11:32.000Z","updated_at":"2022-06-05T00:06:37.000Z","dependencies_parsed_at":"2022-08-13T20:20:44.137Z","dependency_job_id":null,"html_url":"https://github.com/dippynark/gatekeeper-constraints","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dippynark%2Fgatekeeper-constraints","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dippynark%2Fgatekeeper-constraints/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dippynark%2Fgatekeeper-constraints/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dippynark%2Fgatekeeper-constraints/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dippynark","download_url":"https://codeload.github.com/dippynark/gatekeeper-constraints/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243960667,"owners_count":20375105,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-02T10:06:07.104Z","updated_at":"2026-01-02T18:49:55.568Z","avatar_url":"https://github.com/dippynark.png","language":"Open Policy Agent","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Gatekeeper\n\nThis repository is an example of how to manage\n[Gatekeeper](https://github.com/open-policy-agent/gatekeeper) constraints.\n\n## Repository Structure\n\nHere we give an overview of the repository structure -- some directories contain more specific\ninformation.\n\n```sh\n# Helm charts (or any configuration to be hydrated)\ncharts/\n# Hydrated configs in a structured format to be synced to a Kubernetes cluster\nconfigs/\n  # Non-namespaced resources separated into directories per resource kind\n  cluster/\n    cluster-roles/\n    ...\n  # Namespaced resources separated into directories per Namespace\n  namespaces/\n    kube-system/\n    ...\n# Docker images used for config generation and validation\ndocker/\n# Rego files and unit tests\nopa/\n# Configs to be copied into the `configs` directory without hydration\nraw/\n# Scripts for config generation and validation\nscripts/\n# Ignored files\n.gitignore\n# Cached API Server discovery information used by kfmt\napi-resources.txt\n# ACM configuration\nconfig-management.yaml\n# Jenkinsfile for running generation and validation as part of CI\nJenkinsfile\n# Orchestrates config generation and validation\nMakefile\n# Patch to invalidate Rego policy for demo purposes\npatch.yaml\n# This file\nREADME.md\n```\n\n## Quickstart\n\nEnsure Docker and make are installed.\n\n```sh\n# Build dependent Docker images\nmake docker_build\n# Run Rego unit tests\nmake test\n# Generate configs and Gatekeeper constraints and output them to the configs directory\nmake generate\n# Validate configs against constraints\nmake validate\n# Now try invalidating a constraint...\nmake patch\n# ...and rerunning everything to show violations\nmake all\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdippynark%2Fgatekeeper-constraints","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdippynark%2Fgatekeeper-constraints","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdippynark%2Fgatekeeper-constraints/lists"}