🧰 OPA Gatekeeper

The items that name it 5

• Financially Motivated Threat Actor BREEZE COMET Targets Brazil
  article2026-09-01

  Dynamic admission controller to block privileged containers

• From Container Escape to Cloud Takeover
  writeup2026-07-26It is written here as OPA/Gatekeeper (admission-time policy enforcement).

  admission-time policy enforcement

• Policy-Driven Security and Governance in Kubernetes AI Platforms | HackerNoon
  article2026-06-28It is written here as OPA Gatekeeper (Open Policy Agent).

  Policy-as-code framework using Rego language for flexible, complex governance scenarios; e.g., preventing privileged containers via ConstraintTemplate.

• Orca: 8 Container Security Best Practices for 2026
  article2026-06-11It is written here as OPA Gatekeeper (Kubernetes admission policy enforcement using Rego).

  Kubernetes admission policy enforcement using Rego

• CVE-2025-62878 — Critical Path Traversal in Rancher Local Path Provisioner (CVSS 10.0)
  advisory2026-02-10

  Admission policy engine recommended to reject StorageClasses with pathPattern values containing ../ traversal sequences