Evaluate

Enterprise Edition Talk to us

id: check_policy
namespace: company.team

tasks:
  - id: check_policy
    type: io.kestra.plugin.ee.opa.policy.Evaluate
    url: "{{ secret('OPA_URL') }}"
    token: "{{ secret('OPA_TOKEN') }}"
    policyPath: "kubernetes/admission"
    input:
      request:
        operation: "CREATE"
        kind: "Deployment"
        object:
          metadata:
            name: "nginx-deployment"
            namespace: "production"
          spec:
            replicas: 3
            template:
              spec:
                containers:
                  - name: "nginx"
                    image: "nginx:1.21"
                    securityContext:
                      runAsNonRoot: true
                      readOnlyRootFilesystem: true
    metrics: true
    explain: "notes"