Using OPA to Ensure Compliant Software Delivery in a Highly Regulated Finance Envi...
summary
JPMorgan Chase runs Spinnaker at scale — now over 400,000 deployments per month across 6,000+ apps and 50,000+ pipelines — and enforces delivery rules with Open Policy Agent using Rego. Examples include Highlander banned in prod (must use blue/green), images by sha256 digest (deny tags), and calling an external API to require test evidence before production. Platform hosts about 100+ policies with typical decision times <50ms responses, supports team-scoped, self-service policies and aims for multi-CD-tool interoperability.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:04Deployment landscape at JPMorgan Chase
- 3:10Regulatory challenges
- 3:51Open Policy Agent and Rego
- 5:14Enforcing policies with OPA
- 8:04Image digests over tags
- 10:30Test evidence for production
- 12:19Future policy plans
- 15:29Q&A
related talks
24mAutomating Enterprise/Industry Regulation Enforcements During Software Delivery
32mUsing Open Policy Agent to Meet Evolving Policy Requirements
15mSecuring your Deployments using a Policy Driven Approach
33mAutomating Industry Regulation (SoX, SoC 2) Enforcement...
29mHardening Spinnaker Pipelines
39mApplying Policy Throughout The Application Lifecycle with Open Policy Agent
39mOPA
29mIntroduction to Open Policy Agent