Managing the Unmanageable
summary
Claims: endpoints get bootstrapped to a working state with Chef plus an MDM and verified with InSpec. Tools actually used: microMDM, depnotify, Monkey for app installs, encryptserver to capture FileVault keys, Chef client pulling every ~30 minutes to force convergence. Concrete results: a demo run shows 14 successes 22 failures then another shows 36 successful tests zero failures. Cookbooks are being open sourced and a compliance profile audits screensaver, password and encryption settings.
AI-written summary · about
chapters (11)
- 0:00Start
- 0:45Managing the Unmanageable
- 6:27Base Settings
- 15:32The Boot Process
- 18:49Ryan Moon
- 23:23Monkey
- 28:00Using Chef or Inspec for Ongoing Compliance Checks on Endpoints
- 31:35How Do We Manage People Contributing to Chef
- 32:56Compliance Profiles
- 38:21How Do You Manage Clients That Are Internet Based
- 38:48Remote Clients
related talks
38mKick Starting our DevOps Transition with Chef Compliance
41mA Year with Chef and InSpec: A Retrospective with Optum
45mCooking Up Security for the Modern macOS Fleet
33mScaling Chef Emotionally
38mAn Approach to Air-Gapped Deployment
34m"Acing" Infrastructure Testing with Chef
28mFrom Monitoring to Automated Testing of Your Infrastructure Code
17mEnhancing cloud security with continuous compliance