DevOps · Flashcard
What is a ConstraintTemplate in Gatekeeper?
- AA reusable policy definition — the Rego plus a schema that creates a new Constraint CRD kind
- BA configured policy instance — the object that says which namespaces a rule applies to
- CA record of past violations — the audit report Gatekeeper writes after scanning the cluster
- DA webhook configuration — the object that registers Gatekeeper with the Kubernetes API server
Why this is the answer
A ConstraintTemplate holds the policy's Rego and a parameter schema, and creates a new Constraint kind you can then instantiate. The configured instance is a Constraint (not the template), it is not a violations report, and it is not the webhook registration.
Official docs