https://open-policy-agent.github.io/gatekeeper/

🐊 Gatekeeper - Policy Controller for Kubernetes
https://open-policy-agent.github.io/gatekeeper/

admission cncf gatekeeper hacktoberfest kubernetes mutation opa policy policy-engine security validation

Last synced: about 3 hours ago
JSON representation

🐊 Gatekeeper - Policy Controller for Kubernetes

• Host: GitHub
• URL: https://open-policy-agent.github.io/gatekeeper/
• Owner: open-policy-agent
• License: apache-2.0
• Created: 2018-10-26T21:05:57.000Z (about 6 years ago)
• Default Branch: master
• Last Pushed: 2024-10-29T02:17:23.000Z (3 months ago)
• Last Synced: 2024-10-29T16:58:41.525Z (3 months ago)
• Topics: admission, cncf, gatekeeper, hacktoberfest, kubernetes, mutation, opa, policy, policy-engine, security, validation
• Language: Go
• Homepage: https://open-policy-agent.github.io/gatekeeper/
• Size: 154 MB
• Stars: 3,679
• Watchers: 69
• Forks: 755
• Open Issues: 162
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT.md
  • Codeowners: .github/CODEOWNERS
  • Security: SECURITY.md

Awesome Lists containing this project

README

        
# Gatekeeper

![Static Badge](https://img.shields.io/badge/OPA%20Version-v0.60.0-blue)

## How is Gatekeeper different from OPA?

Compared to using [OPA with its sidecar kube-mgmt](https://www.openpolicyagent.org/docs/kubernetes-admission-control.html) (aka Gatekeeper v1.0), Gatekeeper introduces the following functionality:

   * An extensible, parameterized [policy library](https://open-policy-agent.github.io/gatekeeper-library/website/)

   * Native Kubernetes CRDs for instantiating the policy library (aka "constraints")

   * Native Kubernetes CRDs for extending the policy library (aka "constraint templates")

   * Native Kubernetes CRDs for [mutation](https://open-policy-agent.github.io/gatekeeper/website/docs/mutation/) support

   * Audit functionality

   * External data support

## Getting started

Check out the [installation instructions](https://open-policy-agent.github.io/gatekeeper/website/docs/install) to deploy Gatekeeper components to your Kubernetes cluster.

## Documentation

Please see the [Gatekeeper website](https://open-policy-agent.github.io/gatekeeper/website/docs/howto) for more in-depth information.

## Policy Library

See the [Gatekeeper policy library](https://open-policy-agent.github.io/gatekeeper-library/website/) for a collection of constraint templates and sample constraints that you can use with Gatekeeper.

## Community & Contributing

Please refer to [Gatekeeper's contribution guide](https://open-policy-agent.github.io/gatekeeper/website/docs/help) to find out how you can help.

## Code of conduct

This project is governed by the [CNCF Code of conduct](https://github.com/cncf/foundation/blob/master/code-of-conduct.md).

## Security

For details on how to report vulnerabilities and security release process, please refer to [Gatekeeper Security](https://open-policy-agent.github.io/gatekeeper/website/docs/security) for more information.