opa-gatekeeper commands

3 commands, each with a one-line explanation. Click a command to copy it, or its title for details.

Commands 3 shown

  • List templates and live constraints
    kubectl get constrainttemplates && kubectl get constraints -A

    Enumerate ConstraintTemplates and every instantiated constraint kind across namespaces

    security · k8s · gitops

  • Audit constraint violations via status
    kubectl get k8srequiredlabels <name> -o jsonpath='{.status.totalViolations} {range .status.violations[*]}{"\n"}{.kind}/{.name}: {.message}{end}'

    Read offending resources from a constraint's audit status without re-scanning

    security · observability · troubleshooting

  • Offline policy test with gator
    gator test -f policy/ && gator verify ./suite

    Validate templates+constraints against fixtures with no cluster; modern: shift-left in CI

    ci · security · troubleshooting