Offline policy test with gator opa-gatekeeper

Validate templates+constraints against fixtures with no cluster; modern: shift-left in CI

gator test -f policy/ && gator verify ./suite

#opa-gatekeeper #ci #security #troubleshooting

more opa-gatekeeper all 3 commands →

List templates and live constraints kubectl get constrainttemplates && kubectl get constraints -A Audit constraint violations via status kubectl get k8srequiredlabels <name> -o jsonpath='{.status.totalViolations} {range .status.violations[*]}{"\n"}{.kind}/{.name}: {.message}{end}'