Gatekeeper (Kubernetes)

Gatekeeper policy library for Kubernetes

• https://github.com/open-policy-agent/gatekeeper
• helm install gatekeeper

Errors

Internal error occurred: failed calling webhook "xxxxx.sh": failed to call webhook: Post "https://gatekeeper-webhook-service.gatekeeper-system.svc:443/v1/admitlabel?timeout=3s": no endpoints available for service "gatekeeper-webhook-service"

Error: waiting for EKS Add-On (yourcluster:coredns) create: unexpected state 'CREATE_FAILED', wanted target 'ACTIVE'. last error: : 
AdmissionRequestDenied: Internal error occurred: failed calling webhook "check-ignore-label.gatekeeper.sh": failed to call webhook: 
Post 
"https://gatekeeper-webhook-service.gatekeeper-system.svc:443/v1/admitlabel?timeout=3s": no endpoints available for service 
"gatekeeper-webhook-service"
│ 
│   with module.downstream-clusters-EKS.module.eks.aws_eks_addon.this["coredns"],
│   on .terraform/modules/EKS.eks/main.tf line 390, in resource "aws_eks_addon" "this":
│  390: resource "aws_eks_addon" "this" {

Related

• CustomResourceDefinition (CRD)
• Open Policy Agent (OPA)
• Helm: ResourceQuota, MutatingWebhookConfiguration, ValidatingWebhookConfiguration
• Gatekeeper

See also

• gatekeeper.sh, config.gatekeeper.sh, mutation.gatekeeper.sh, validate.gatekeeper.sh, gatekeeper-webhook-service
• Gatekeeper, installation, XProtect, OPA, gatekeeper.sh, config.gatekeeper.sh, gatekeeper-webhook-service
• Kubernetes policies, policy libraries, OPA, Gatekeeper (Kubernetes)