Policy-driven Deployments in Spinnaker
summary
Argues that codified guard rails—linking provisioning, pipelines and policy engines—make automated delivery both faster and safer by shifting checks into deployable templates. Demonstrates using Terraform + Spinnaker + OPA (also Argo/Tekton/Jenkins, Ansible/Puppet) to build a reusable “stained glass” SDLC: infrastructure as code, pipelines-as-code, and policies-as-code that enforce least privilege and approval gates. Outcome is fewer manual security reviews, more dev autonomy, and ops able to step back while delivery frequency increases without obvious incidents.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:40Agenda
- 1:22What drives you
- 4:39What drives devs
- 6:02Open Source Vulnerability Management Process
- 7:45Security SecOps
- 11:41Collaboration
- 12:08Provisioning Management
- 14:22Pipeline as Code
- 15:52Policies as Code
- 17:04Single Pane of Glass
- 19:43Security Compliance
related talks
08mAutomated & Immutable Spinnaker Deployments with Security...
24mAutomating Enterprise/Industry Regulation Enforcements During Software Delivery
43mAll Aboard: Transforming Software Delivery Using Spinnaker
50mSpinnaker get control over your deployements
39mManaged Delivery: Bringing Infrastructure...
53mContinuous Deployment with Spinnaker — Automate All Your Deployments!
20mEmpowering Continuous Delivery with Spinnaker: A State of th...
08mSpinnaker as Code SIG Update