Permit

Hi <@U05D7BDCL5Q> :hugging_face:

Yes, of course it's possible, and yes it would work with gatekeeper.
You can either have the OPAL-client as the sidecar k8s talks to, or run OPA standalone, and have the OPAL client in a separate container <https://docs.opal.ac/getting-started/running-opal/run-opal-client/standalone-opa-uri#step-6-client-config---standalone-opa-uri-optional|configured to talk to OPA>.

<@U02U9JYLJQK> can you give pointers for the helm chart

Hey <@U05D7BDCL5Q>,
You can set the helm chart to deploy only the OPAL client by setting `.Values.server.enabled` to `false` .
Unfortunately currently the chart doesn’t support the standalone client.