Files
Charlie Egan 9bf54788f5 [docs] Move OPA ecosystem pages to site top-level (#6198)
* We are having trouble managing the complexity of having ecosystem pages shown in the versioned area of the OPA docs site (see website: link ecosystem from edge #6170)
* We have invested in the OPA ecosystem data recently and it makes sense to make it more prominent.
* The data in the OPA Ecosystem is harder to use when nested in docs as some Hugo functions are unavailable to nested sections.

This PR implements a solution by:

* Pages that were under /docs/version/ecosystem, /docs/version/integrations etc have been moved to /ecosystem and /integrations.
* Redirects have been created for the old pages in the netlify config.

Signed-off-by: Charlie Egan <charlie@styra.com>
2023-08-31 09:36:51 +01:00

1.0 KiB

title, software, labels, code, tutorials, docs_features
title software labels code tutorials docs_features
Kubernetes Admission Control using Vulnerability Scanning
kubernetes
clair
layer category datasource
orchestration containers clair
https://github.com/open-policy-agent/contrib/tree/master/image_enforcer
https://github.com/open-policy-agent/contrib/blob/master/image_enforcer/README.md
rest-api-integration kubernetes
note
This example project in [OPA contrib](https://github.com/open-policy-agent/contrib/tree/main/image_enforcer) uses OPA over the REST API to enforce admission policy based on vulnerability scanning results.
note
This example project in [OPA contrib](https://github.com/open-policy-agent/contrib/tree/main/image_enforcer) uses OPA to enforce admission policy in Kubernetes.

Admission control policies in Kubernetes can be augmented with vulnerability scanning results to make more informed decisions. This integration demonstrates how to integrate CoreOS Clair with OPA and run it as an admission controller.