rego-policies

Rego policies collection.

Policies

For a full list of policies, see the auto-generated POLICIES.md

The naming of the policies follows the Gatekeeper format, as described here.

Want to run the policies on a k8s/OCP cluster? See TESTING.md

Tools

Conftest

conftest is a CLI to execute rego policies. It can be used to test locally before pushing to OPA.

• https://www.conftest.dev/install

OPA Playground

OPA provides a web based playground, which can highlight which lines have been activated. Having issues with your policy? check it out with "Coverage" enabled:

• https://play.openpolicyagent.org

Slack for all things

Stuck on a problem?

• https://slack.openpolicyagent.org/