Datree (YC W20)

Dev tools

kubernetes policy checks

SHOW HN2021

144points
26comments
#345of 2,533 in 2021
Top 14%of 2021 by points

How HN took it

QuietFewer than 5 comments about the project

1 positive, 2 neutral or asking, 0 mixed, 1 critical, out of 4 comments about the project.

Idea: 1 for, 1 against

The thread, comment by comment

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

What HN said

What people liked

  • Shift-left approach catches issues earlier in development.

    From 1 comment
    • Hey, this is a great question. We are big believers in "shift-left" and trying to fix/avoid issues as early as possible. We started with a CLI tool as it is agnostic and can be…
      shimont on HN

Objections

  • Dev-centric CLI rather than platform-enforced policy at the cluster.

    From 1 comment
    • As someone who works in a similar space (K8s configuration management and IaC), I'm curious what drove you to develop a CLI tool for enforcing policies as opposed to something…
      mr_moose on HN
  • Dashboard seemed limited to paying customers.

    From 1 comment
    • Is it me, or is the dashboard only for paying customers? What does this add compared to Polaris by fairwinds ?
      sbkg0002 on HN

Requests

  • Support for OPA Rego policies.

    From 1 comment
    • Looks like this is a policy-as-code tool in the vein of Terraform Cloud's Sentinel Policies, or more generally Open Policy Agent, but specifically targeted at k8s use cases. From…
      bobbiechen on HN

Questions

  • Why a CLI rather than cluster-level enforcement like Gatekeeper or Kyverno?

    From 1 comment
    • As someone who works in a similar space (K8s configuration management and IaC), I'm curious what drove you to develop a CLI tool for enforcing policies as opposed to something…
      mr_moose on HN
  • Why custom rules are YAML/JSON rather than Rego or Sentinel.

    From 1 comment
    • Looks like this is a policy-as-code tool in the vein of Terraform Cloud's Sentinel Policies, or more generally Open Policy Agent, but specifically targeted at k8s use cases. From…
      bobbiechen on HN

Alternatives named

  • Polaris by Fairwinds.

    From 1 comment
    • Is it me, or is the dashboard only for paying customers? What does this add compared to Polaris by fairwinds ?
      sbkg0002 on HN
  • OPA Gatekeeper and Kyverno.

    From 1 comment
    • As someone who works in a similar space (K8s configuration management and IaC), I'm curious what drove you to develop a CLI tool for enforcing policies as opposed to something…
      mr_moose on HN

Category, keywords, summaries and labels on this page were made by AI (Thread Reader v2) and not checked by hand. Each point links to the comments it came from.

Add a badge to your READMEShown on HackerShow
[![Shown on HackerShow](https://hackershow.org/badge.svg)](https://hackershow.org/show/28918850)