https://github.com/anderseknert/opa-kasten-demo
OPA and Kasten Demo repository
https://github.com/anderseknert/opa-kasten-demo
Last synced: 2 months ago
JSON representation
OPA and Kasten Demo repository
- Host: GitHub
- URL: https://github.com/anderseknert/opa-kasten-demo
- Owner: anderseknert
- Created: 2022-04-15T18:41:38.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2022-04-15T18:41:52.000Z (over 4 years ago)
- Last Synced: 2025-03-14T20:50:41.765Z (over 1 year ago)
- Language: Shell
- Size: 2.93 KB
- Stars: 0
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# POC - OPA policy enforcement for Kasten
## Policies
In order to test policy against Kasten manifests without a kube cluster running,
the [kube-review](https://github.com/anderseknert/kube-review) tool may be used
to transform Kubernetes manifests into AdmissionReview objects, just like they would
be sent from the Kubernetes API server for admission control:
```shell
kube-review create manifests/policy.yaml \
| opa eval --format pretty --stdin-input --data policy/policy.rego data.policy.deny
```