What problem does it solve?
Helps teams reliably deploy and operate services on the BC Government Emerald OpenShift platform by consolidating platform conventions, preventing policy violations, and reducing deployment failures caused by missing labels, unsafe network policies, or incorrect Helm/chart configuration.
Core Features & Use Cases
- Helm and chart standards: Enforces required chart layout, values keys, and ag-helm library usage for OpenShift compatibility.
- Policy-as-code gate: Guides rendering Helm to a single YAML and running Datree, Polaris, kube-linter, and Conftest to block unsafe deployments.
- Networking and security: Provides NetworkPolicy patterns, required pod labels (DataClass, owner, environment), PriorityClass guidance, and ArgoCD Application CRD examples for GitOps sync.
- Secrets and registry: Describes Artifactory setup and secure secret usage in OpenShift and CI workflows.
Quick Start
Render your Helm chart into a single YAML file and run the policy-as-code checks (Datree, Polaris, kube-linter, Conftest) to validate before attempting ArgoCD sync.