Questions
- Are OPA and Gatekeeper the same thing?
- Yes
- No
- How is Rego code stored in Gatekeeper?
- It is stored as
ConfigMap
objects that are watched. - Rego has to be mounted to the pod.
- Rego needs to be stored as secret objects.
- Rego is saved as a
ConstraintTemplate
.
- It is stored as
- How do you test Rego policies?
- In production
- Using an automated framework built directly into OPA
- By first compiling to WebAssembly
- In Rego, how do you write a
for
loop?- You don’t need to; Rego will identify iterative steps.
- By using the
for all
syntax. - By initializing counters in a loop.
- There are no loops in Rego.
- What is the best way to debug Rego policies?
- Use an IDE to attach to the Gatekeeper container in a cluster.
- In production.
- Add trace functions to your...