Show HN: Datree (YC W20): Prevent K8s misconfigurations from reaching production

Re:Show HN: Datree (YC W20): Prevent K8s misconfigurations f... by bobbiechen on Tuesday October 19, 2021 @06:29PM (#28924571)

Looks like this is a policy-as-code tool in the vein of Terraform Cloud's Sentinel Policies, or more generally Open Policy Agent, but specifically targeted at k8s use cases.

From the custom rules overview https://hub.datree.io/custom-rules-overview , though it is docs WIP, I noticed these are defined as YAML/JSON somehow. That's a contrast to HashiCorp's Sentinel https://docs.hashicorp.com/sentinel/concepts/language and OPA's Rego https://www.openpolicyagent.org/docs/latest/policy-language/ . Is this an intentional design decision?

[ Parent | on HN ]

Re:Show HN: Datree (YC W20): Prevent K8s misconfigurations f... by shimont on Wednesday October 20, 2021 @05:46AM (#28928736)

We just released support for custom rules :) from interviewing our users, we decided to start with [0] JSON Schema as it is very easy to write rules using it and you do not have to learn rego.

Having said that, we might add OPA .rego support in the near future :)

What is the desired way for you to write custom policy rules?

[0] - https://json-schema.org/

[ Parent | on HN ]