Open Policy Agent Gatekeeper
7.2#3 in kubernetes security softwareFree planFree planAPILinuxSelf-hosted
VisitOpen Policy Agent Gatekeeper vs terraform-compliance
terraform-compliance
5.9#17 in infrastructure policy as code toolsFree planFree planLinuxSelf-hosted
VisitWhat both publish
| Fact | Open Policy Agent Gatekeeper | terraform-compliance |
|---|---|---|
| Install options | The documentation describes deployment using a prebuilt image, a development image, a locally built image, or Helm. | The documentation provides installation through pip and Docker; pip installation requires Python 3.x. |
| Purpose | Gatekeeper is a validating and mutating Kubernetes webhook that enforces CRD-based policies evaluated by Open Policy Agent. | terraform-compliance is a lightweight, security- and compliance-focused test framework for negative testing of infrastructure as code written with Terraform. |
Open Policy Agent Gatekeeper plans
- GatekeeperFree
- Open-source GatekeeperFree
terraform-compliance plans
- terraform-complianceFree
Pick Open Policy Agent Gatekeeper if…
Gatekeeper suits teams managing Kubernetes clusters that need policy enforcement, mutation or recurring audits of existing resources. It is self-hosted and requires cluster-admin permissions to install.
Pick terraform-compliance if…
It suits developers and security teams who want readable policy tests for Terraform plans and can supply plan or state output. Teams can also keep the feature files in a separate repository owned by another group.