A load-testing harness — measuring how many decisions per second an OPA server can serve

A Kubernetes operator — deploying and reconciling OPA instances across a fleet of clusters

A migration tool — converting legacy YAML policies into equivalent Rego automatically

DevOps · Flashcard

What is Conftest?

Why this is the answer

Conftest evaluates structured config files (YAML, JSON, HCL, Dockerfiles) against Rego policies, making it a natural CI gate. It is not a load tester, not an operator for deploying OPA, and not a policy-migration converter.

More OPA / Gatekeeper — Policy as Code flashcards

What is the Open Policy Agent (OPA)?
What is a ConstraintTemplate in Gatekeeper?
How does Gatekeeper complement Kubernetes' built-in admission controllers?

Back to the OPA / Gatekeeper — Policy as Code deck (48 flashcards)