Answers

1. b – No, Gatekeeper is a Kubernetes-native policy engine built on OPA.
2. d – Rego is saved as a ConstraintTemplate
3. b – Please don’t test in production!
4. a – Everything is built on policy, not iterative control loops.
5. c – Add trace functions to your code and run the opa test command with -v to see execution traces
6. b – False. You can have variable constraints.
7. a – True, and we’ll cover that in the next chapter!