Use of K8S resources data in Rego policies

[mikouaj]

Community Note

• Please vote on this issue by adding a 👍 reaction
  to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do
  not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.

Description

We want to go beyond the GCP container model in policy evaluations and use Kubernetes objects data as well.
This will allow us to build policies around GKE scalability limits, for example:

• maximum number of HPAs
• maximum number of secrets

By having data from two sources (GCP container API, k8s API) we can also build policies around correlated scalability limits.

• Create kubeconfig for kube-api client authentication #66
• Create kube-api client #67
• Integrate kube-api client into GKE client and extend cluster data model #73
• Introduce configuration driven filtering of kubernetes objects

References

N/A