search

datreeio / datree

Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our docs: https://hub.datree.io
https://datree.io
Apache License 2.0
6.39k stars 363 forks source link

How to installed all policies into our datacenter instead of GitHub on internet #149

Closed jainpratik163 closed 3 years ago

jainpratik163 commented 3 years ago

Is your feature request related to a problem? Please describe.

currently, we install date binary on Unix and if we want to change policy then we need to login to datree site and do changes and also we are not allowed to use the internet in that case how we can do. how we can do all setup on-prem hardware.

eyarz commented 3 years ago

The good news is that we are going to release Policy-as-Code soon, so you will not need to log in to change your policies setup, you will be able to do it via code.

The bad news is that datree can't work in an air-gapped environment, you need to have an internet connection because of the "centralized policy" concept. We have this on our roadmap but it will take some time (~3 months) until it will be ready.

jainpratik163 commented 3 years ago

some customers don't allow us to use the internet in that case how we can use it. is there any way that we can install this at the organizational level and use it?

eyarz commented 3 years ago

No, sorry, you need to have an internet connection for Datree to work. What are the key features that Datree has and you need? Based on your answer, I will be able to recommend alternative tools that are also compatible with an air-gapped environment.

jainpratik163 commented 3 years ago

during CI we want to check all k8s YAML files and helm charts also if they are proper and correct or not.

eyarz commented 3 years ago

From my experience, Conftest is also a great project and can help you with that. They also have a Helm plugin (like ours).

jainpratik163 commented 3 years ago

Thanks for the suggestion I will check that one. But if we can this feature that will also great.