UNCLASSIFIED - NO CUI

Velero installs before OPA gatekeeper

If OPA Gatekeeper is enabled, all packaged should be installed AFTER OPA Gatekeeper. The policy checks will only work on packages created after the gatekeeper is running. Most packages rely on istio, monitoring, or logging and get deployed after by default. It looks like velero has none of those dependencies, so it should have one on OPA Gatekeeper.

Right now, it is deployed in parallel with OPA Gatekeeper