The gatekeeper KRM function runs gator test.
This function support the newer variants of the Rego language and GateKeeper expansions.
Example:
kpt fn source examples | kpt fn eval --truncate-output=false - --image ghcr.io/krm-functions/gatekeeper
which will produce:
[RUNNING] "github.com/krm-functions/gatekeeper:latest"
[PASS] "github.com/krm-functions/gatekeeper:latest" in 800ms
Results:
[info]: gatekeeper
[error] apps/v1/Deployment/foo: All pods must have an `owner` label violatedConstraint: must-have-owner
[error] apps/v1/Deployment/foo: [Implied by expand-deployments] All pods must have an `owner` label violatedConstraint: must-have-owner