-
we are ready to upgrade to 0.30.0 k8s libs, but will need [open-policy-agent/gatekeeper](https://github.com/open-policy-agent/gatekeeper) to upgrade, which depends on the OPA frameworks package.
th…
-
-
As part of prototype-2, we'd like to validate the [e2e scenario](https://github.com/notaryproject/notaryproject/blob/main/scenarios.md) for validating a deployment based on the existence of a valid ke…
-
Currently the Gatekeeper deployment happens in the `user-cluster-controller` and its deployed through code, meaning we have coded-in Deployments, SA and so on.
This makes the Gatekeeper deployment ve…
-
The name for this core module is not correct.
The features that this module provides are policy definition and enforcement. OPA is just an implementation detail, and it is not used directly (Gateke…
-
**Is your feature request related to a problem? Please describe.**
Currently the OPA gatekeeper guac provider is located at: https://github.com/dejanb/guac-provider
The repo needs to be cleaned up…
-
Submitted on behalf of Nanzi Yang, a PostDoc of UMN
Ref: https://lists.nephio.org/g/sig-security/message/107
**Detailed analysis:**
The porch has a deployment called porch-server, which is bound …
-
**What steps did you take and what happened:**
I'm using expansionTemplates for the gatekeeper-library policies i'm importing. I'm explicitly setting `spec.match.source: "Generated"` on the constrain…
-
**Describe the solution you'd like**
[A clear and concise description of what you want to happen.]
It would be good if we develop a _kubectl plugin_ for OPA Gatekeeper, maybe with this plugin we can…
-
## Background
OPA Gatekeeper is one of the critical component in the system and it is important to monitor gatekeeper availability, constraints and mutations count. For any reason, one of the mutat…