Signed-off-by: Michael Fornaro [email protected]

Description

Gatekeeper runs as an admission controller into the cluster but can also run in audit mode to allow for fast feedback on violations against policies of kubernetes resources that are not in compliance with the CIS Benchmark REGO policies defined in the git submodule used within this repository.

This PR is to deploy Gatekeeper into Kubernetes, and to deploy the REGO policies in the git submodule and be able to monitor any violations that occur in the cluster.

Currently, REGO policies are checked using conftest during the CI process, however, helm charts that are rendered in-cluster with the helm-controller component deployed via Flux do not get scanned.

Checklist

• All commits are signed off. See the section Developer’s Certificate of Origin
• Provide a title or release-note blurb suitable for the release notes.
• All commits contain a well written commit description including a title, description and a Fixes: #XXX line if the commit addresses a particular GitHub issue.
• All workflow validation and compliance checks are passing.

Issue Ref (Optional)

Which issue(s) this PR fixes (optional, using fixes #(, fixes #<issue_number>, ...) format, will close the issue(s) when the PR gets merged): Fixes #106

Notes

Add special notes for your reviewer here.