https://github.com/deislabs/kubernetes-opa-vscode
A VS Code extension for working with Open Policy Agent in Kubernetes
https://github.com/deislabs/kubernetes-opa-vscode
Last synced: about 1 year ago
JSON representation
A VS Code extension for working with Open Policy Agent in Kubernetes
- Host: GitHub
- URL: https://github.com/deislabs/kubernetes-opa-vscode
- Owner: deislabs
- License: mit
- Created: 2019-11-28T03:13:34.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2022-12-10T10:25:17.000Z (over 3 years ago)
- Last Synced: 2023-03-02T10:03:09.068Z (over 3 years ago)
- Language: TypeScript
- Size: 118 KB
- Stars: 9
- Watchers: 10
- Forks: 5
- Open Issues: 11
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
README
# Open Policy Agent for Kubernetes for VS Code
This snappily-titled extension helps you to test your Open Policy Agent policies
(`.rego` files) in a Kubernetes development cluster. It provides the following features:
* One-click install of Open Policy Agent as an admission controller, together
with supporting configuration such as the standard 'system main' policy hook
and having it read from Kubernetes configmaps in the `opa` namespace
* While editing a `.rego` file, deploy it as a configmap in the `opa` namespace
where the Open Policy Agent will pick it up and start enforcing it
* View policies without needing to switch to the `opa` namespace and with visual
feedback on their status.
## Notes
**This is a very early iteration - expect some fit and finish to be missing!** For
example, you can currently see that a policy has errors but you can't see what they
are. It's all very much work in progress!
**The deployment configuration is designed for convenience of development, not for secure deployment.**
If you're putting Open Policy Agent into production, _design deployment strategies for production_.
For example, you may want to deploy policies using bundles and servers rather than config maps.
And you certainly want to be conscious about permissions and roles. **Don't use this extension
to deploy OPA to production.**