DevOps · Flashcard
What is Conftest?
- AA tool to test configuration files against Rego policies — commonly run in CI pipelines
- BA load-testing harness — measuring how many decisions per second an OPA server can serve
- CA Kubernetes operator — deploying and reconciling OPA instances across a fleet of clusters
- DA migration tool — converting legacy YAML policies into equivalent Rego automatically
Why this is the answer
Conftest evaluates structured config files (YAML, JSON, HCL, Dockerfiles) against Rego policies, making it a natural CI gate. It is not a load tester, not an operator for deploying OPA, and not a policy-migration converter.
Official docs