open-policy-agent/gatekeeper

Health v2 · maintenance only

Adoption not part of the score

4269 stars · 881 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Gatekeeper is a CNCF policy controller for Kubernetes built on Open Policy Agent (OPA). It enforces admission policies via customizable constraint templates and constraints, supports mutation, and provides audit functionality.

Use cases

• enforce kubernetes admission policies
• block privileged containers in cluster
• validate kubernetes manifests against org rules
• mutate kubernetes resources on admission
• audit cluster resources for policy violations
• write custom policy as code for k8s

When to choose

• you need declarative, CRD-based policy enforcement on Kubernetes admission
• you want a curated policy library with parameterized constraints
• you need mutation and audit alongside validation

When to avoid

• you need policy enforcement outside Kubernetes
• you want a lightweight sidecar OPA setup without admission webhooks
• you only need simple RBAC rather than admission policies

Facets

service · maturity stable

security authorization middleware configuration-management security cloud-computing infrastructure-as-code go cloud self-hosted kubernetes-admission-controller opa policy-engine cncf mutation validation constraint-templates containers devops kubernetes docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="open-policy-agent/gatekeeper")