Collection of OPA Gatekeeper policies that can be used in your Kubernetes cluster.

ACM/ASM Workshop

AI-Powered DevSecOps Monitoring Platform — FastAPI · Docker · Kubernetes · AWS EKS · Terraform · Prometheus · Grafana · React · GitHub Actions · OPA Gatekeeper · Z-score Anomaly Detection

Demoing OPA Gatekeeper Policies with Kubernetes

This repository is a collection of open policy agent(OPA) policies

Sign, attest, and enforce: a supply chain security pipeline that blocks unsigned images at Kubernetes admission time

OpenTofu example module for Open Policy Agent Gatekeeper on Google Kubernetes Engine.

Production-like air-gapped K8s cluster with local registry, dual git mirroring, and security monitoring

Kubernetes platform reference: GitOps, policy-as-code, observability, and public-safe telemetry.

Implement admission controllers in Kubernetes clusters

Azure Cloud-Native Platform Engineering — AKS, Terraform IaC, Helm Charts, Kustomize, GitHub Actions CI/CD, Azure DevOps Pipelines, Workload Identity, Key Vault CSI, Azure Monitor, OPA Gatekeeper

Opa-Gatekeeper Terraform Module for Kubernetes by Kubestack

OPA Gatekeeper governance for multi-cluster Kubernetes — 12 templates with audit-to-enforce promotion

Production-ready Internal Developer Platform: Backstage portal, Crossplane infra-as-CRDs, ArgoCD GitOps with sync waves, vCluster multi-tenancy, OPA Gatekeeper policy enforcement, OpenCost chargeback, and golden-path CI/CD with ephemeral PR environments.

Enforce & evidence Kubernetes data-residency (EU/DE/CH/UK/FR) with Kyverno or OPA/Gatekeeper and a signed, article-mapped audit report.

Eight locally-verified microsegmentation patterns (K8s NetworkPolicy, Cilium L7, Calico, Istio mTLS, SPIFFE/SPIRE, nftables, OPA Gatekeeper, LocalStack AWS SG)

Kubernetes hardening baseline: Pod Security Standards, NetworkPolicies, OPA Gatekeeper, Falco rules, Cosign verification. CIS-aligned.

End to end cloud security case study with threat detection, incident response, and automated remediation across AWS and Kubernetes

Enterprise AI-safe GitOps platform — Kubernetes, Istio mTLS, ArgoCD, Jenkins, Vault, OPA Gatekeeper, Prometheus, Grafana, Jaeger, scikit-learn, Evidently AI, MCP Agent. MLOps portfolio for Lloyds, Barclays, Goldman Sachs & NVIDIA roles.