Questions
- Are OPA and GateKeeper the same thing?
A. Yes.
B. NO.
- How is Rego code stored in GateKeeper?
A. It is stored as
ConfigMap
objects that are watched.B. Rego has to be mounted to the Pod.
C. Rego needs to be stored as secret objects.
D. Rego is saved as a
ConstraintTemplate
. - How do you test Rego policies?
A. In production
B. Using an automated framework built directly into OPA
C. By first compiling to Web Assembly
- In Rego, how do you write a
for
loop?A. You don't need to; Rego will identify iterative steps.
B. By using the
for all
syntax.C. By initializing counters in a loop.
D. There are no loops in Rego.
- What is the best way to debug Rego policies?
A. Use an IDE to attach to the GateKeeper container in a cluster.
B. In production.
C. Add trace functions to your code and run the
opa test
command with-v
to see execution traces.D. Include
System.out
statements. - Constraints all need to be hardcoded.
A. True.
B. False.
- GateKeeper can replace Pod security policies...