open-policy-agent/gatekeeper

View on GitHub

🐊 Policy Controller for Kubernetes

Stars: 4.3k
Forks: 883
Open beginner issues: 0
Indexed issues: 159
Avg merge: 3d 7h
Merged PRs (30d): 45

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 19, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted good first issue

Beginner friendly Everything

Open All

159 open issues indexed

Define safe orphan recovery for generated VAPs and VAPBindings Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

open-policy-agent/gatekeeper#4839 · Opened Sep 18, 2026
build: remove Kustomize and conversion-gen warnings from generation Open

enhancement

open-policy-agent/gatekeeper#4832 · 1 reaction · 2 assignees · Opened Sep 17, 2026
helm parse error in multiple templates: unclosed action Open

bug

open-policy-agent/gatekeeper#4822 · 4 comments · 1 assignee · Opened Sep 8, 2026
gator: define and enforce policy catalog version semantics Open

enhancement gator cmd Needs-design

Difficulty 5/5 Over a week Newbie friendliness 35/100

open-policy-agent/gatekeeper#4799 · Opened Aug 28, 2026
Add table-driven tests for operation-specific controller wiring Open

cleanup good first issue triaged

Difficulty 4/5 3-5 days Newbie friendliness 48/100

open-policy-agent/gatekeeper#4776 · 1 comment · Opened Aug 24, 2026
Separate Config process exclusions from validation data-sync dependencies Open

cleanup good first issue triaged

Difficulty 5/5 Over a week Newbie friendliness 42/100

open-policy-agent/gatekeeper#4775 · Opened Aug 24, 2026
Scope expansion controllers to operations that evaluate expanded resources Open

cleanup good first issue triaged

Difficulty 4/5 3-5 days Newbie friendliness 48/100

open-policy-agent/gatekeeper#4773 · Opened Aug 24, 2026
Initialize mutation dependencies only for mutation operations Open

cleanup good first issue triaged

Difficulty 4/5 3-5 days Newbie friendliness 68/100

open-policy-agent/gatekeeper#4772 · Opened Aug 24, 2026
Make the generate operation work without audit or webhook Open

bug good first issue triaged VAP

Difficulty 5/5 Over a week Newbie friendliness 45/100

open-policy-agent/gatekeeper#4771 · Opened Aug 24, 2026
Fix status-only startup without initializing the constraint client Open

bug good first issue triaged

Difficulty 4/5 3-5 days Newbie friendliness 55/100

open-policy-agent/gatekeeper#4770 · Opened Aug 24, 2026
docs: call out ConnectionPodStatus schema change in v3.24.0 release notes Open

open-policy-agent/gatekeeper#4724 · 1 assignee · Opened Aug 5, 2026
Tracking: cluster-connected policy evaluation for gator Open

enhancement gator cmd

Difficulty 5/5 Over a week Newbie friendliness 25/100

open-policy-agent/gatekeeper#4715 · Opened Jul 29, 2026
Add gator support for evaluating resources against in-cluster policies Open

enhancement gator cmd

Difficulty 5/5 Over a week Newbie friendliness 35/100

open-policy-agent/gatekeeper#4714 · 2 comments · Opened Jul 29, 2026
Revamp violation export configuration and architecture Open

enhancement pubsub

open-policy-agent/gatekeeper#4706 · 1 assignee · Opened Jul 25, 2026
CVE-2026-39821 / CVE-2026-33814 reported in Gatekeeper image – clarification on fix availability and release timeline Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

open-policy-agent/gatekeeper#4651 · 1 comment · Opened Jul 1, 2026
Improve remote-cluster E2E workflow Open

cleanup

open-policy-agent/gatekeeper#4629 · 1 comment · 1 assignee · Opened Jun 18, 2026
Conflict on ConstraintTemplatePodStatus update due to stale informer cache in ConstraintTemplate reconciler Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

open-policy-agent/gatekeeper#4595 · 1 comment · Opened May 26, 2026
Optionally use constraint as param resource Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

open-policy-agent/gatekeeper#4566 · 1 comment · Opened May 15, 2026
Support cert-manager for webhook and external data provider certificate lifecycle Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

open-policy-agent/gatekeeper#4564 · 1 comment · Opened May 15, 2026
gator: support multiple default constraints per template in generated catalogs/bundles Open

Difficulty 5/5 Over a week Newbie friendliness 38/100

open-policy-agent/gatekeeper#4546 · 1 comment · Opened May 7, 2026
Proposal: Violation-driven mutation policy recommendations (agentic remediation assistant) Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 28/100

open-policy-agent/gatekeeper#4545 · 1 comment · Opened May 5, 2026
Control plane deadlock via Gatekeeper-Generated ValidatingAdmissionPolicies Open

bug

open-policy-agent/gatekeeper#4530 · 27 comments · 1 reaction · 1 assignee · Opened Apr 22, 2026
Add `gator audit` command to scan live cluster resources for policy violations Open

enhancement gator cmd

Difficulty 5/5 Over a week Newbie friendliness 38/100

open-policy-agent/gatekeeper#4484 · 1 comment · 1 reaction · Opened Apr 2, 2026
Add recurring Copa patching workflow to produce vulnerability-patched container images Open

open-policy-agent/gatekeeper#4480 · 3 comments · 1 assignee · Opened Apr 1, 2026
gator policy as controller Open

enhancement

open-policy-agent/gatekeeper#4399 · 1 comment · 1 assignee · Opened Feb 18, 2026
Add k8s version metadata in catalog api for gator Open

enhancement

open-policy-agent/gatekeeper#4383 · 3 comments · 1 assignee · Opened Feb 12, 2026
1:N Gatekeeper deployment evaluation Open

enhancement

open-policy-agent/gatekeeper#4382 · 2 comments · 1 assignee · Opened Feb 11, 2026
Graduate --enable-remote-cluster to beta Open

enhancement

open-policy-agent/gatekeeper#4380 · 1 comment · 1 assignee · Opened Feb 11, 2026
Show inactive status on constraints Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 68/100

open-policy-agent/gatekeeper#4305 · 3 comments · 1 reaction · Opened Dec 11, 2025
Remove sync-vap-enforcement-scope flag Open

triaged

Difficulty 4/5 3-5 days Newbie friendliness 38/100

open-policy-agent/gatekeeper#4302 · 2 comments · Opened Dec 10, 2025
cri-o v1.34: changed default: failed to pull images Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

open-policy-agent/gatekeeper#4288 · 5 comments · Opened Dec 5, 2025
Add MutatingAdmissionPolicy management feature Open

enhancement mutation triaged

Difficulty 5/5 Over a week Newbie friendliness 35/100

open-policy-agent/gatekeeper#4261 · 3 comments · 2 reactions · Opened Nov 21, 2025
Allow referencing on-cluster resources for mutation Open

enhancement mutation

Difficulty 5/5 Over a week Newbie friendliness 25/100

open-policy-agent/gatekeeper#4260 · 3 comments · Opened Nov 21, 2025
How do we reduce learning curve in writing constraint templates? Open

docs

Difficulty 5/5 Over a week Newbie friendliness 35/100

open-policy-agent/gatekeeper#4253 · 3 comments · Opened Nov 20, 2025
POC to use eopa to be used in Gatekeeper Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

open-policy-agent/gatekeeper#4252 · 3 comments · Opened Nov 20, 2025
How do we raise awareness about Gatekeeper as policy engine for Kubernetes? Open

Difficulty 5/5 Over a week Newbie friendliness 32/100

open-policy-agent/gatekeeper#4251 · 2 comments · Opened Nov 20, 2025
gator compile to compile constrainttemplates from template.yaml and rego file Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

open-policy-agent/gatekeeper#4250 · 5 comments · Opened Nov 20, 2025
ci: add kube-api-linter to linters Open

enhancement good first issue

open-policy-agent/gatekeeper#4219 · 10 comments · 1 assignee · Opened Nov 5, 2025
Add validation for rego to exists only in one palce in CT Open

bug

open-policy-agent/gatekeeper#4218 · 3 comments · 1 assignee · Opened Nov 5, 2025
Support multiple connections for exporting violations Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

open-policy-agent/gatekeeper#4206 · 4 comments · Opened Oct 30, 2025
Improve error reporting for conneciton status Open

triaged

Difficulty 5/5 Over a week Newbie friendliness 25/100

open-policy-agent/gatekeeper#4205 · 2 comments · Opened Oct 30, 2025
Depricate Dapr driver Open

Difficulty 3/5 1-2 days Newbie friendliness 58/100

open-policy-agent/gatekeeper#4204 · 4 comments · Opened Oct 30, 2025
Support ConfigMaps as paramKind for ValidatingAdmissionPolicy to avoid failure during discovery delays with CRDs Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 28/100

open-policy-agent/gatekeeper#4166 · 4 comments · 1 reaction · Opened Sep 22, 2025
Graduate syncset to beta Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

open-policy-agent/gatekeeper#4116 · 7 comments · Opened Aug 18, 2025
Graduate Config to beta Open

enhancement triaged

Difficulty 5/5 Over a week Newbie friendliness 15/100

open-policy-agent/gatekeeper#4100 · 4 comments · Opened Aug 11, 2025
Graduate syncset to beta Open

enhancement triaged

Difficulty 5/5 Over a week Newbie friendliness 20/100

open-policy-agent/gatekeeper#4099 · 3 comments · Opened Aug 11, 2025
Additional useful metrics for external data Open

enhancement external data

Difficulty 3/5 1-2 days Newbie friendliness 64/100

open-policy-agent/gatekeeper#4089 · 6 comments · Opened Aug 7, 2025
External data health signal Open

enhancement external data

Difficulty 4/5 3-5 days Newbie friendliness 48/100

open-policy-agent/gatekeeper#4088 · 6 comments · Opened Aug 7, 2025
Store confighash of provider in status for debugging Open

enhancement external data

Difficulty 4/5 3-5 days Newbie friendliness 50/100

open-policy-agent/gatekeeper#4087 · 6 comments · Opened Aug 7, 2025
Update CI/Build Tooling Versions (Kubernetes, Node, controller-gen, kustomize, etc.) Open

good first issue help wanted

open-policy-agent/gatekeeper#4082 · 8 comments · 1 reaction · 1 assignee · Opened Aug 5, 2025

open-policy-agent/gatekeeper

Get new issues in your inbox