This project is an experiment to ensure the Linkerd mTLS by using the OPA Gatekeeper to enforce certain workload admission policies.
To install Linkerd and OPA Gatekeeper,
make opa
make linkerd-install | kubectl apply -f -
Install the OPA constraint template and constraints:
kubectl apply -f opa-linkerd-mtls.yaml
To remove both Linkerd and OPA Gatekeeper,
make clean
To test the mTLS rules, run:
make test