Gatekeeper

How is Gatekeeper different from OPA?

Compared to using OPA with its sidecar kube-mgmt (aka Gatekeeper v1.0), Gatekeeper introduces the following functionality:

An extensible, parameterized policy library
Native Kubernetes CRDs for instantiating the policy library (aka "constraints")
Native Kubernetes CRDs for extending the policy library (aka "constraint templates")
Audit functionality

Check out the installation instructions to deploy Gatekeeper components to your Kubernetes cluster.

Please see the Gatekeeper website for more in-depth information.

See the Gatekeeper policy library for a collection of constraint templates and sample constraints that you can use with Gatekeeper.

Please refer to Gatekeeper's contribution guide to find out how you can help.

This project is governed by the CNCF Code of conduct.

For details on how to report vulnerabilities and security release process, please refer to Gatekeeper Security for more information.

Name		Name	Last commit message	Last commit date
Latest commit History 952 Commits
.github		.github
apis		apis
build		build
charts/gatekeeper		charts/gatekeeper
cmd		cmd
config		config
demo		demo
deploy		deploy
deprecated		deprecated
docs		docs
example		example
hack		hack
library		library
manifest_staging		manifest_staging
pkg		pkg
test		test
third_party		third_party
vendor		vendor
website		website
.dockerignore		.dockerignore
.gitattributes		.gitattributes
.gitignore		.gitignore
.go-version		.go-version
.golangci.yaml		.golangci.yaml
CODE_OF_CONDUCT.md		CODE_OF_CONDUCT.md
CONTRIBUTING.md		CONTRIBUTING.md
Dockerfile		Dockerfile
LICENSE		LICENSE
Makefile		Makefile
NOTICE		NOTICE
PROJECT		PROJECT
README.md		README.md
SECURITY.md		SECURITY.md
SECURITY_AUDIT.pdf		SECURITY_AUDIT.pdf
Tiltfile		Tiltfile
crd.Dockerfile		crd.Dockerfile
go.mod		go.mod
go.sum		go.sum
helm_migrate.sh		helm_migrate.sh
main.go		main.go