Questions
- Are OPA and Gatekeeper the same thing?
- Yes
- No
- How is Rego code stored in Gatekeeper?
- It is stored as
ConfigMap
objects that are watched - Rego has to be mounted to the Pod
- Rego needs to be stored as secret objects
- Rego is saved as a
ConstraintTemplate
- It is stored as
- How do you test Rego policies?
- In production
- Using an automated framework built directly into OPA
- By first compiling to WebAssembly
- In Rego, how do you write a
for
loop?- You don't need to; Rego will identify iterative steps.
- By using the
for all
syntax. - By initializing counters in a loop.
- There are no loops in Rego.
- What is the best way to debug Rego policies?
- Use an IDE to attach to the Gatekeeper container in a cluster
- In production
- Add trace functions to your code and...