List templates and live constraints opa-gatekeeper

Enumerate ConstraintTemplates and every instantiated constraint kind across namespaces

kubectl get constrainttemplates && kubectl get constraints -A

#opa-gatekeeper #security #k8s #gitops

more opa-gatekeeper all 3 commands →

Audit constraint violations via status kubectl get k8srequiredlabels <name> -o jsonpath='{.status.totalViolations} {range .status.violations[*]}{"\n"}{.kind}/{.name}: {.message}{end}' Offline policy test with gator gator test -f policy/ && gator verify ./suite