feat(charts): add kube-gatekeeper Helm chart with initial configuration and documentation

charts/kube-gatekeeper/.helmignore

@@ -0,0 +1,16 @@
+# Dependencies (run helm dependency update to fetch)
+charts/
+*.tgz
+Chart.lock
+# Ignore files
+.git/
+.gitignore
+.helmignore
+.DS_Store
+*.swp
+*.bak
+*.tmp
+*~
+.idea/
+.vscode/
+*.md

charts/kube-gatekeeper/Chart.yaml

@@ -0,0 +1,24 @@
+apiVersion: v2
+name: kube-gatekeeper
+description: A Helm chart for OPA Gatekeeper policy enforcement in Kubernetes
+type: application
+version: 3.22.0-beta.0
+appVersion: v3.22.0-beta.0
+icon: https://open-policy-agent.github.io/gatekeeper/website/img/logo.svg
+home: https://github.com/open-policy-agent/gatekeeper
+annotations:
+  category: Infrastructure
+keywords:
+  - jetbrains
+  - gatekeeper
+  - open-policy-agent
+  - opa
+  - policy
+maintainers:
+  - name: JetBrains
+    url: https://www.jetbrains.com/support
+dependencies:
+  - name: gatekeeper
+    alias: spec
+    repository: https://open-policy-agent.github.io/gatekeeper/charts
+    version: 3.22.0-beta.0

charts/kube-gatekeeper/Makefile

@@ -0,0 +1 @@
+include ../../lib/Makefiles/Helm.mk

charts/kube-gatekeeper/README.md

@@ -0,0 +1,43 @@
+# kube-gatekeeper
+
+This chart wraps the official [Gatekeeper](https://github.com/open-policy-agent/gatekeeper) Helm chart from the Open Policy Agent project.
+
+_Gatekeeper is a policy controller for Kubernetes that enforces custom resource-based policies (Constraint Templates and Constraints) and validates admission requests._
+
+## Source
+
+- **Upstream chart:** [open-policy-agent/gatekeeper](https://github.com/open-policy-agent/gatekeeper) — `charts/gatekeeper`
+- **Helm repository:** https://open-policy-agent.github.io/gatekeeper/charts
+
+## Prerequisites
+
+- Kubernetes 1.21+
+- Helm 3+
+
+## Install
+
+Add the JetBrains Helm repo (or use the chart from this repo), then:
+
+```bash
+helm dependency update
+helm install gatekeeper . -n gatekeeper-system --create-namespace
+```
+
+## Documentation
+
+- [Gatekeeper docs](https://open-policy-agent.github.io/gatekeeper/website/docs/)
+- [Upstream chart README](https://github.com/open-policy-agent/gatekeeper/tree/master/charts/gatekeeper)
+
+## Configuration
+
+All upstream Gatekeeper options are supported under the `spec` key in [values.yaml](./values.yaml). See the [upstream values](https://github.com/open-policy-agent/gatekeeper/blob/master/charts/gatekeeper/values.yaml) for the full list.
+
+Common overrides:
+
+- `spec.replicas` — number of Gatekeeper controller replicas
+- `spec.image.repository` / `spec.image.tag` — controller image
+- `spec.controllerManager.resources` — resource requests/limits
+- `spec.pdb.controllerManager.minAvailable` — PodDisruptionBudget
+
+## Parameters
+

charts/kube-gatekeeper/release.json

@@ -0,0 +1 @@
+{"metadata":{"name":"kube-gatekeeper","description":"Find more details about this chart in its Chart.yaml file."},"spec":{"repositories":[{"name":"library","description":"Repository for Kubernetes charts","url":"registry.jetbrains.team/p/helm/library","type":"oci","env":{"nameSelector":"HELM_CHARTS_REGISTRY_2"}}]}}

charts/kube-gatekeeper/values.schema.json

@@ -0,0 +1,5 @@
+{
+    "title": "Chart Values",
+    "type": "object",
+    "properties": {}
+}