OPA and Gatekeeper
Workshop
Platform and security teams usually know their requirements: approved registries only, mandatory labels, or clearly bounded resources. The difficult part is expressing them so that a team can understand and test the rule, introduce it in stages, and reverse it when something goes wrong. OPA is the policy engine, Rego is its declarative language, and Gatekeeper is the Kubernetes integration for admission validation, mutation, and audit. A ConstraintTemplate contains reusable validation logic and its parameter schema. A constraint applies that logic to the cluster with concrete values and a defi
Workshop overview
Duration, per-participant price and logistics for OPA and Gatekeeper.
OPA and Gatekeeper
Duration: 3 days (09:00 – 16:00 CET/CEST)
Participants: Max. 8 people
Format: Online or on-site
Language: German (English on request)
Certificate: ayedo certificate of attendance
On-site options
Live online or on-site at your location
In-house: content, duration and focus can be tailored
Flexible dates, from 1 participant
German; English on request
Preconfigured cloud lab (also on-site)
Open groups: max. 8 people
Seat price same as online: €721.50 × days, excl. VAT
On-site in-house: individual quote (travel/logistics as incurred)
No published flat on-site surcharge
You provide the training room and internet
Open sessions: 09:00–16:00 (CET/CEST)
Curriculum
Topics by day at a glance.
Day 1: Understand Rego and build a first Gatekeeper policy
Day 2: Test policies, review violations, and roll out in stages
Day 3: Secure Gatekeeper mutation and recover from failures
Workshop schedule
Published daily rhythm. Topics are listed in the curriculum.
09:00–16:00 (CET/CEST)
Official window for open sessions.
09:00 – Introductions
On day 1: meet the instructor and participants, plus the agenda and workshop structure.
09:00 – Q&A
On later days, resolve open questions from the previous day before the day’s topics (usually 09:00–09:30 or 09:00–10:00).
Content blocks follow the curriculum
Theory and hands-on in the morning and afternoon blocks. The topic list is in the curriculum above.
12:00–13:00 – Lunch
A shared break before the afternoon.
16:00–16:30 – Q&A
End of the day: questions, exchange and wrap-up.
Prerequisites
What participants should bring.
Hardware
Your own notebook (Linux, macOS or Windows) with permission to install software. Devices available at extra cost.
Environment
Each participant works in a provided cloud lab. Local installation of the training stack is not required.
Prerequisites
Basic Linux/terminal skills are helpful.
Related workshops
Suggested follow-on courses from the catalog.
Introduction to Kyverno
Duration: 3 days
CKS Preparation
Duration: 4 days