Gatekeeper basic ruleset

My basic Gatekeeper ruleset and example pods. Mostly copypaste from gatekeeper-library repo.

Check install.sh for instructions.

About the ruleset

• kube-system is very forcibly excluded to prevent any mishaps
• gatekeeper-system namespace is also excluded in the 1_config.yaml
• future development: investigate kube-system and gatekeeper-system exclusion needs to create more fine-grained exclusions

Customization

• gatekeeper-library repo has Kustomize templates ready.
• Each policy has the constraint section in the end => make changes there, as it currently includes sane secure defaults or in few cases example values