rego-policies

Rego policies collection.

Policies

For a full list of policies, see the auto-generated POLICIES.md

The naming of the policies follows the Gatekeeper format, as described here.

3rd Party Policies

A list of git repos that contain rego polices which can be combined with this repo:

• deprek8ion: Rego policies to monitor Kubernetes APIs deprecations

Tools

Conftest

conftest is a CLI to execute rego policies. It can be used to test locally before pushing to OPA.

• https://www.conftest.dev/install

OPA Playground

OPA provides a web based playground, which can highlight which lines have been activated. Having issues with your policy? check it out with "Coverage" enabled:

• https://play.openpolicyagent.org

Slack for all things

Stuck on a problem?

• https://slack.openpolicyagent.org/