ci: testing with cel policies

open-policy-agent / gatekeeper-library

📚 The OPA Gatekeeper policy library

https://open-policy-agent.github.io/gatekeeper-library

Apache License 2.0

617 stars 316 forks source link

ci: testing with cel policies #519

Closed JaydipGabani closed 1 month ago

JaydipGabani commented 2 months ago

What this PR does / why we need it:

Modifies the testing workflow to run gator verify with cel and rego engines
Tests cel and rego policies with gatekeeper
Adds cel source for requiredLables and allow-priviledge-escalation

Which issue(s) does this PR fix (optional, using fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when the PR gets merged): Fixes #

Special notes for your reviewer:

JaydipGabani commented 2 months ago

@maxsmythe I added CEL source from your draft PR #503 here as well, that leaves you with 3 other policies to write CEL source for.

maxsmythe commented 1 month ago

Can you drop the CEL from my draft PR? I'd rather only have one SOT for that, and just rebase/merge once the build system is ready, otherwise feedback will get clobbered.

ritazh commented 1 month ago

Can you drop the CEL from my draft PR? I'd rather only have one SOT for that, and just rebase/merge once the build system is ready, otherwise feedback will get clobbered.

Per this https://github.com/open-policy-agent/gatekeeper-library/pull/519#discussion_r1594796796 all updates for "Allow Privilege Escalation" policy have been removed

ritazh commented 1 month ago

@JaydipGabani ptal conflicts