Part 2: Apply

This is Part 2 of a multi-part, self-paced quick start exercise.

What Will You Do¶

In part 2, you will create a custom blueprint that contains one of the turnkey OPA Gatekeeper policies and apply the blueprint to a cluster.

Step 1: Create Blueprint¶

First, we will create a custom cluster blueprint which will enable OPA Gatekeeper and contain one of the newly created custom OPA policies.

Navigate to Infrastructure -> Blueprints
Click "New Blueprint"
Provide a name for the blueprint
Click "Save"

Next, we will need to create a version for the blueprint.

Provide a name for the blueprint version
Select "Enable OPA Gatekeeper for this Blueprint"
Select the "bp-operational-efficiency" policy
Select "v1" for the OPA policy version

Create Blueprint

Click "Save Changes"

Step 2: Apply Blueprint¶

We will now apply the custom blueprint to the cluster to enable OPA Gatekeeper and the "bp-operational-efficiency" policy

Navigate to Infrastructure -> Clusters
Click the gear icon for the cluster and select "Update Blueprint"
Select the previously created blueprint and blueprint version
Click "Save and Publish"

Apply Blueprint

You will now see the blueprint being applied to the cluster

¶

Step 3: Verify OPA Gatekeeper Resources¶

Now, we will verify that OPA Gatekeeper is running on the cluster with the constraints in our OPA policy

Navigate to Infrastructure -> Clusters
Click on "KUBECTL" for your cluster
Type the below command

kubectl get pods -n rafay-system

You will see the "gatekeeper" pods running

Gatekeeper Pods

Type the below command

kubectl get constraints

You will see all of the OPA contraints currently being enforced on the cluster. This list will contain the contraints in the applied OPA policy.

Gatekeeper Constraints

Recap¶

In this part, you applied a turnkey OPA policy to a cluster using a custom cluster blueprint. You then validated OPA gatekeeper was running and the OPA policy contraints were active on the cluster using Kubectl.