https://github.com/osinfra-io/opentofu-kubernetes-opa-gatekeeper
OpenTofu example module for Kubernetes Open Policy Agent (OPA) Gatekeeper.
https://github.com/osinfra-io/opentofu-kubernetes-opa-gatekeeper
gatekeeper helm infrastructure-as-code kubernetes opa opentofu opentofu-child-module osinfra
Last synced: 8 months ago
JSON representation
OpenTofu example module for Kubernetes Open Policy Agent (OPA) Gatekeeper.
- Host: GitHub
- URL: https://github.com/osinfra-io/opentofu-kubernetes-opa-gatekeeper
- Owner: osinfra-io
- License: gpl-2.0
- Created: 2024-10-05T20:58:01.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2025-08-19T20:28:07.000Z (about 1 year ago)
- Last Synced: 2025-08-25T17:01:52.647Z (about 1 year ago)
- Topics: gatekeeper, helm, infrastructure-as-code, kubernetes, opa, opentofu, opentofu-child-module, osinfra
- Language: HCL
- Homepage: https://www.osinfra.io
- Size: 55.7 KB
- Stars: 1
- Watchers: 0
- Forks: 0
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
- Security: SECURITY.md
Awesome Lists containing this project
README
# 
Kubernetes - Open Policy Agent Gatekeeper OpenTofu Module
[](https://github.com/osinfra-io/opentofu-kubernetes-opa-gatekeeper/actions/workflows/test.yml) [](https://github.com/osinfra-io/opentofu-kubernetes-opa-gatekeeper/actions/workflows/dependabot.yml)
## Repository Description
OpenTofu **example** module for Open Policy Agent Gatekeeper on Google Kubernetes Engine (GKE).
> [!NOTE]
> We do not recommend consuming this module like you might a [public module](https://search.opentofu.org). It is a baseline, something you can fork, potentially maintain, and modify to fit your organization's needs. Using public modules vs. writing your own has various [drivers and trade-offs](https://docs.osinfra.io/fundamentals/architecture-decision-records/adr-0003) that your organization should evaluate.
## 🔩 Usage
> [!TIP]
> You can check the [tests/fixtures](tests/fixtures) directory for example configurations. These fixtures set up the system for testing by providing all the necessary initial code, thus creating good examples on which to base your configurations.
## 
Development
Our focus is on the core fundamental practice of platform engineering, Infrastructure as Code.
>Open Source Infrastructure (as Code) is a development model for infrastructure that focuses on open collaboration and applying relative lessons learned from software development practices that organizations can use internally at scale. - [Open Source Infrastructure (as Code)](https://www.osinfra.io)
To avoid slowing down stream-aligned teams, we want to open up the possibility for contributions. The Open Source Infrastructure (as Code) model allows team members external to the platform team to contribute with only a slight increase in cognitive load. This section is for developers who want to contribute to this repository, describing the tools used, the skills, and the knowledge required, along with OpenTofu documentation.
See the [documentation](https://docs.osinfra.io/fundamentals/development-setup) for setting up a local development environment.
### 🛠️ Tools
- [helm](https://github.com/helm/helm)
- [osinfra-pre-commit-hooks](https://github.com/osinfra-io/pre-commit-hooks)
- [pre-commit](https://github.com/pre-commit/pre-commit)
### 📋 Skills and Knowledge
Links to documentation and other resources required to develop and iterate in this repository successfully.
- [open-policy-agent](https://www.openpolicyagent.org/docs/latest/)
- [gatekeeper](https://open-policy-agent.github.io/gatekeeper/website)
### 🔍 Tests
All tests are [mocked](https://opentofu.org/docs/cli/commands/test/#the-mock_provider-blocks) allowing us to test the module without creating infrastructure or requiring credentials. The trade-offs are acceptable in favor of speed and simplicity. In an OpenTofu test, a mocked provider or resource will generate fake data for all computed attributes that would normally be provided by the underlying provider APIs.
```none
tofu init
```
```none
tofu test
```
### 📦 Release
To release a new version, simply push a new tag to the repository. The tag should be in the format `vX.Y.Z` where `X`, `Y`, and `Z` are integers.
```none
git tag vX.Y.Z
git push origin vX.Y.Z
```