opa-gatekeeper
3 commands
3 shown
List templates and live constraints
Enumerate ConstraintTemplates and every instantiated constraint kind across namespaces
kubectl get constrainttemplates && kubectl get constraints -A
Audit constraint violations via status
Read offending resources from a constraint's audit status without re-scanning
kubectl get k8srequiredlabels <name> -o jsonpath='{.status.totalViolations} {range .status.violations[*]}{"\n"}{.kind}/{.name}: {.message}{end}'
Offline policy test with gator
Validate templates+constraints against fixtures with no cluster; modern: shift-left in CI
gator test -f policy/ && gator verify ./suite
no commands match