{"id":5536,"date":"2020-05-18T08:00:30","date_gmt":"2020-05-18T02:30:30","guid":{"rendered":"https:\/\/www.upnxtblog.com\/?p=5536"},"modified":"2020-05-11T11:45:11","modified_gmt":"2020-05-11T06:15:11","slug":"how-to-author-and-enforce-policies-using-open-policy-agent-gatekeeper","status":"publish","type":"post","link":"https:\/\/www.upnxtblog.com\/index.php\/2020\/05\/18\/how-to-author-and-enforce-policies-using-open-policy-agent-gatekeeper\/","title":{"rendered":"How to author and enforce policies using Open Policy Agent Gatekeeper"},"content":{"rendered":"
<\/div>

As of this writing, there is NO single security configuration for Kubernetes. For example, to define what a specific user can do, the groups they belong to, the actions they can perform on various Kubernetes resources (pods, deployments, services, etc), the network and pod security policies that apply to the objects they create, etc. cannot be expressed as rules across different policy components.<\/p>\n

Due to the lack of a single-point security solution, ensuring compliance manually can be error-prone and frustrating. There is a need for a lightweight general-purpose policy engine that and allows developers to operate independently without sacrificing compliance and also ensures ease of policy enforcement, automated discovery of violations, conflicts. Policy Authors would be also able to author and deploy custom policies that control the behavior of the service\u2019s policy-enabled features.<\/p>\n

In this post, I\u2019ll explain how to use the Open Policy Agent Gatekeeper<\/a><\/strong> policy engine to manage, author the policies, it allows you to manage and secure the Kubernetes cluster.<\/p>\n

<\/span><\/p>\n

Introducing Open Policy Agent Gatekeeper<\/h2>\n

Open Policy Agent Gatekeeper<\/strong> enforces policies and strengthens governance on the Kubernetes cluster. Following are the key functionalities it provides:<\/p>\n