Gatekeeper is a validating (mutating TBA) webhook that enforces CRD-based policies executed by Open Policy Agent - View it on GitHub