OPA vs Gatekeeper: What Actually Runs Where in Kubernetes Admission Control?

Learn where Kubernetes, Gatekeeper, and OPA each run, how an admission request reaches policy code, and where audit fits into the design.