gatekeeper

gatekeeper

The gatekeeper KRM function runs gator test.

This function support the newer variants of the Rego language and GateKeeper expansions.

Example:

kpt fn source test | kpt fn eval - --image ghcr.io/krm-functions/gatekeeper:latest | kpt fn sink tmp

which will produce:

[RUNNING] "github.com/krm-functions/gatekeeper:latest"
[PASS] "github.com/krm-functions/gatekeeper:latest" in 800ms
  Results:
    [info]: gatekeeper
    [error] apps/v1/Deployment/foo: All pods must have an `owner` label violatedConstraint: must-have-owner
    [error] apps/v1/Deployment/foo: [Implied by expand-deployments] All pods must have an `owner` label violatedConstraint: must-have-owner