conftest-kubernetes

Description

This provider automatically generates conftest modules for kubernetes and helm modules in your project. A conftest module is created for each of those module types.
Simply add this provider to your project configuration, and configure your policies. Check out the below reference for how to configure default policies, default namespaces, and test failure thresholds for the generated modules.
See the conftest example project for a simple usage example.
Below is the full schema reference for the provider configuration. For an introduction to configuring a Garden project with providers, please look at our configuration guide.
The reference is divided into two sections. The first section contains the complete YAML schema, and the second section describes each schema key.

Complete YAML Schema

The values in the schema below are the default values.
1
providers:
2
- # The name of the provider plugin to use.
3
name:
4
​
5
# List other providers that should be resolved before this one.
6
dependencies: []
7
​
8
# If specified, this provider will only be used in the listed environments. Note that an empty array effectively
9
# disables the provider. To use a provider in all environments, omit this field.
10
environments:
11
​
12
# Path to the default policy directory or rego file to use for `conftest` modules.
13
policyPath: ./policy
14
​
15
# Default policy namespace to use for `conftest` modules.
16
namespace:
17
​
18
# Set this to `"warn"` if you'd like tests to be marked as failed if one or more _warn_ rules are matched.
19
# Set to `"none"` to always mark the tests as successful.
20
testFailureThreshold: error
Copied!

Configuration Keys

providers[]

Type
Default
Required
array[object]
[]
No

providers[].name

​providers > name
The name of the provider plugin to use.
Type
Required
string
Yes
Example:
1
providers:
2
- name: "local-kubernetes"
Copied!

providers[].dependencies[]

​providers > dependencies
List other providers that should be resolved before this one.
Type
Default
Required
array[string]
[]
No
Example:
1
providers:
2
- dependencies:
3
- exec
Copied!

providers[].environments[]

​providers > environments
If specified, this provider will only be used in the listed environments. Note that an empty array effectively disables the provider. To use a provider in all environments, omit this field.
Type
Required
array[string]
No
Example:
1
providers:
2
- environments:
3
- dev
4
- stage
Copied!

providers[].policyPath

​providers > policyPath
Path to the default policy directory or rego file to use for conftest modules.
Type
Default
Required
posixPath
"./policy"
No

providers[].namespace

​providers > namespace
Default policy namespace to use for conftest modules.
Type
Required
string
No

providers[].testFailureThreshold

​providers > testFailureThreshold
Set this to "warn" if you'd like tests to be marked as failed if one or more warn rules are matched. Set to "none" to always mark the tests as successful.
Type
Default
Required
string
"error"
No
Last modified 12d ago