├── README.md ├── authorization └── ocp-policy-controller.kubeconfig ├── charts └── open-policy-agent │ ├── Chart.yaml │ ├── README.md │ ├── templates │ ├── _helpers.tpl │ ├── opa.yaml │ ├── rbac.yaml │ ├── rules.yaml │ └── webhook.yaml │ └── values.yaml └── examples ├── authorization-webhooks ├── unreadable_secret_test.rego └── unreadable_secrets.rego ├── kubernetes ├── matches.rego └── policymatches.rego ├── mutating-admission-webhooks ├── no_serviceaccount_secret.rego ├── no_serviceaccount_secret_test.rego └── no_serviceaccount_secret_test.yaml └── validating-admission-webhook ├── cmdb_integration.rego ├── cmdb_integration_test.rego ├── cmdb_integration_test.yaml ├── latest_and_IfNotPresent.rego ├── latest_and_IfNotPresent_test.rego ├── latest_and_IfNotPresent_test.yaml ├── loadbalancer_quota.rego ├── loadbalancer_quota_test.rego ├── loadbalancer_quota_test1.yaml ├── loadbalancer_quota_test2.yaml ├── software_license.rego ├── software_license_test.rego ├── software_license_test1.yaml └── software_license_test2.yaml /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/README.md -------------------------------------------------------------------------------- /authorization/ocp-policy-controller.kubeconfig: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/authorization/ocp-policy-controller.kubeconfig -------------------------------------------------------------------------------- /charts/open-policy-agent/Chart.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/charts/open-policy-agent/Chart.yaml -------------------------------------------------------------------------------- /charts/open-policy-agent/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/charts/open-policy-agent/README.md -------------------------------------------------------------------------------- /charts/open-policy-agent/templates/_helpers.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/charts/open-policy-agent/templates/_helpers.tpl -------------------------------------------------------------------------------- /charts/open-policy-agent/templates/opa.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/charts/open-policy-agent/templates/opa.yaml -------------------------------------------------------------------------------- /charts/open-policy-agent/templates/rbac.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/charts/open-policy-agent/templates/rbac.yaml -------------------------------------------------------------------------------- /charts/open-policy-agent/templates/rules.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/charts/open-policy-agent/templates/rules.yaml -------------------------------------------------------------------------------- /charts/open-policy-agent/templates/webhook.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/charts/open-policy-agent/templates/webhook.yaml -------------------------------------------------------------------------------- /charts/open-policy-agent/values.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/charts/open-policy-agent/values.yaml -------------------------------------------------------------------------------- /examples/authorization-webhooks/unreadable_secret_test.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/authorization-webhooks/unreadable_secret_test.rego -------------------------------------------------------------------------------- /examples/authorization-webhooks/unreadable_secrets.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/authorization-webhooks/unreadable_secrets.rego -------------------------------------------------------------------------------- /examples/kubernetes/matches.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/kubernetes/matches.rego -------------------------------------------------------------------------------- /examples/kubernetes/policymatches.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/kubernetes/policymatches.rego -------------------------------------------------------------------------------- /examples/mutating-admission-webhooks/no_serviceaccount_secret.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/mutating-admission-webhooks/no_serviceaccount_secret.rego -------------------------------------------------------------------------------- /examples/mutating-admission-webhooks/no_serviceaccount_secret_test.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/mutating-admission-webhooks/no_serviceaccount_secret_test.rego -------------------------------------------------------------------------------- /examples/mutating-admission-webhooks/no_serviceaccount_secret_test.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/mutating-admission-webhooks/no_serviceaccount_secret_test.yaml -------------------------------------------------------------------------------- /examples/validating-admission-webhook/cmdb_integration.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/cmdb_integration.rego -------------------------------------------------------------------------------- /examples/validating-admission-webhook/cmdb_integration_test.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/cmdb_integration_test.rego -------------------------------------------------------------------------------- /examples/validating-admission-webhook/cmdb_integration_test.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/cmdb_integration_test.yaml -------------------------------------------------------------------------------- /examples/validating-admission-webhook/latest_and_IfNotPresent.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/latest_and_IfNotPresent.rego -------------------------------------------------------------------------------- /examples/validating-admission-webhook/latest_and_IfNotPresent_test.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/latest_and_IfNotPresent_test.rego -------------------------------------------------------------------------------- /examples/validating-admission-webhook/latest_and_IfNotPresent_test.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/latest_and_IfNotPresent_test.yaml -------------------------------------------------------------------------------- /examples/validating-admission-webhook/loadbalancer_quota.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/loadbalancer_quota.rego -------------------------------------------------------------------------------- /examples/validating-admission-webhook/loadbalancer_quota_test.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/loadbalancer_quota_test.rego -------------------------------------------------------------------------------- /examples/validating-admission-webhook/loadbalancer_quota_test1.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/loadbalancer_quota_test1.yaml -------------------------------------------------------------------------------- /examples/validating-admission-webhook/loadbalancer_quota_test2.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/loadbalancer_quota_test2.yaml -------------------------------------------------------------------------------- /examples/validating-admission-webhook/software_license.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/software_license.rego -------------------------------------------------------------------------------- /examples/validating-admission-webhook/software_license_test.rego: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/software_license_test.rego -------------------------------------------------------------------------------- /examples/validating-admission-webhook/software_license_test1.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/software_license_test1.yaml -------------------------------------------------------------------------------- /examples/validating-admission-webhook/software_license_test2.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/raffaelespazzoli/openshift-opa/HEAD/examples/validating-admission-webhook/software_license_test2.yaml --------------------------------------------------------------------------------