konstraint
A policy management tool for interacting with Gatekeeper (by plexsystems)
library
The Open Policy Agent project standard library. (by open-policy-agent)
| konstraint | library | |
|---|---|---|
| 3 | 2 | |
| 373 | 92 | |
| -0.8% | - | |
| 8.1 | 3.0 | |
| 6 days ago | 7 months ago | |
| Go | Open Policy Agent | |
| MIT License | Apache License 2.0 |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
konstraint
Posts with mentions or reviews of konstraint.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-11-10.
- Is OPA Gatekeeper the best solution for writing policies for k8s clusters?
- OPA Rego is ridiculously confusing - best way to learn it?
-
How would you write policies in .rego file and use them in OPA-Gatekeeper?
The konstraint tool is quite popular for this use case: https://github.com/plexsystems/konstraint
library
Posts with mentions or reviews of library.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-08-03.
-
Annotating pods via namesapces
There are examples for mutating webhooks in the OPA library. These don't do exactly what you want, but should give you a starting point.
-
How would you write policies in .rego file and use them in OPA-Gatekeeper?
The idea is to keep all rego policies in one place like in the example library repo: https://github.com/open-policy-agent/library
What are some alternatives?
When comparing konstraint and library you can also consider the following projects:
k-rail - Kubernetes security tool for policy enforcement
jspolicy - jsPolicy - Easier & Faster Kubernetes Policies using JavaScript or TypeScript
bridgekeeper - Kubernetes policy enforcement using python
docker-security-checker - Dockerfile Security Checker using OPA Rego policies with Conftest
policy-as-code-war - OPA Gatekeeper vs Kyverno
regal - Regal is a linter for Rego, with the goal of making your Rego magnificent!
admission-webhook-datree - Datree offers cluster integration that allows you to validate your resources against your configured policy upon pushing them into a cluster, by using an admission webhook.
neuvector-helm - HELM chart to install NeuVector container cluster
rego-style-guide - Style guide for Rego