Apply OPA Gatekeeper Policies

Control Your Deployments with Gatekeeper Policies

The Kubernetes Operator offers a list of Gatekeeper policies that you can customize and apply to your deployments.

Each Gatekeeper policy consists of:

• <policy_name>.yaml file

• constraints.yaml file that is based on the constraint template

You can use binary and configurable Gatekeeper policies:

• Binary policies allow or prevent specific configurations, such as preventing deployments that don't use TLS, or deploying only specific MongoDB or Ops Manager versions.

• Configurable policies allow you to specify configurations, such as the total number of replica sets that will be deployed for a specific MongoDB or Ops Manager custom resource.

To use and apply Gatekeeper sample policies with the Kubernetes Operator:

1. Install the OPA Gatekeeper on your Kubernetes cluster.

2. Review the list of available constraint templates and constraints:

   kubectl get constrainttemplates
   kubectl get constraints

3. Navigate to the policy directory, select a policy from the list and apply it and its constraints file:

   cd <policy_directory>
   kubectl apply -f <policy_name>.yaml
   kubectl apply -f constraints.yaml

4. Review the Gatekeeper policies that are currently applied:

   kubectl get constrainttemplates
   kubectl get contstraints