Back to Opa

KubeStellar Console

docs/src/data/ecosystem/entries/kubestellar-console.md

1.16.11.3 KB
Original Source

KubeStellar Console is a CNCF Sandbox multi-cluster Kubernetes dashboard that provides fleet-wide visibility into OPA Gatekeeper policies and violations. It connects to any number of clusters and aggregates constraint templates, constraints, and violations into a single pane of glass.

Key OPA integration features:

  • OPA Policies card — lists all Gatekeeper constraint templates per cluster with violation counts and enforcement mode (audit/warn/deny)
  • Fleet Compliance Heatmap — visualizes OPA Gatekeeper health across every cluster alongside other compliance tools
  • AI-assisted policy creation — describe a policy in plain English and the console generates the ConstraintTemplate and Constraint YAML, ready to apply
  • Per-cluster drill-down — inspect individual violations with full resource context, namespace, and remediation guidance
  • ACMM scoring — the AI Cloud Maturity Model evaluates each cluster's policy-as-code posture, checking for OPA/Gatekeeper artifacts as part of an 8-dimension maturity assessment (paper)
  • Guided install mission — a built-in AI mission walks operators through installing and configuring OPA Gatekeeper on any connected cluster, with preflight checks and cluster selection