~/talk

Cloud-native Policy Enforcement

on YouTube 56m
Talkat All Things Open 2020 · 2020-10-19..10-20· [security]

speaker

name:Tim Hinrichs
links:none on file

resources

video:https://youtu.be/pu6PoH-7Hcs
slides:none on file

summary

Claims that policy becomes code with Rego policy files and a single engine (opa) that is logically centralized and physically distributed; concrete integrations include kubernetes admission control (gatekeeper), envoy/linkerd proxies for microservices, CI checks, terraform and kafka, and pagerduty-driven context data. Demo shows a playground pushing bundles via the bundle API to cluster-local opa instances (sidecar or daemon) and actually rejects pod creations missing a cost-center label or using untrusted images, proving enforcement works end to end.

AI-written summary · about

chapters (8)

  1. 0:00Start
  2. 7:05Yesterday: Train people || Hardcode policy Many config languages
  3. 9:14Open Policy Agent: Unified Authorization for Cloud-Native
  4. 11:41Open Policy Agent: A CNCF Project
  5. 17:03Open Policy Agent Distributed Authorization for Availability and Perf
  6. 20:31OPA: General-purpose Policy Engine
  7. 36:45Policy Development Life Cycle and OPA Tooling
  8. 40:16Design Principles of Rego, OPA's Policy Language Mirror declarative real world policies

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.