If you are starting out with OPA Gatekeeper to enforce policy on Kubernetes resources, you might run into this gotcha: resources created by controllers are rejected (i.e. Service Accounts, Endpoints, etc.).
Find the workarounds in this article.
More: https://blog.skouf.com/posts/opa-gatekeeper-gotcha
Post #439
1.01K