Audit constraint violations via status opa-gatekeeper

Read offending resources from a constraint's audit status without re-scanning

kubectl get k8srequiredlabels <name> -o jsonpath='{.status.totalViolations} {range .status.violations[*]}{"\n"}{.kind}/{.name}: {.message}{end}'
#opa-gatekeeper #security #observability #troubleshooting
more opa-gatekeeper all 3 commands →
Offline policy test with gator gator test -f policy/ && gator verify ./suite List templates and live constraints kubectl get constrainttemplates && kubectl get constraints -A