Deep-dive into Open Policy Agent + Conftest + GateKeeper

on YouTube ↗37m

" summary

Shows concrete workflows and results: uses Open Policy Agent, Conftest, Gatekeeper and Argo CD plus a CLI called thetree to stop real misconfigs (Target Zalando Bluematador incidents cited) by shifting policy checks into CI and cluster admission. Demonstrates Conftest as a local/CI test harness, Gatekeeper as an admission webhook using constraint templates with Rego, and Argo CD to make git the single source of truth. Calls out policy distribution, Rego complexity, update/permission challenges and built‑in rules.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 11:52What is OPA?
3. 13:14How to use OPA?
4. 27:00What is Argo CD?
5. 28:40CD workflow with Argo CD

" related talks

• 37mDeep-dive into Open Policy Agent + Conftest + GateKeeper: Kubernetes Policy in ActionNoaa Barki, Shimon Tolts · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 28mDeep-dive into Open Policy Agent + Conftest + GateKeeperNoaa Barki, Shimon Tolts · Yalla DevOps 2021
• 36mCentralized Policy ManagementNoaa Barki · NDC Security 2022
• 30mOpen Policy Agent IntroMax Smythe, Patrick East · KubeCon + CloudNativeCon North America 2020 Virtual
• 18mDevOps All the Things: Creating a Pipeline to Validate Your OPA PoliciesGoran Osim · KubeCon + CloudNativeCon North America 2020 Virtual
• 39mApplying Policy Throughout The Application Lifecycle with Open Policy AgentGareth Rushgrove · KubeCon + CloudNativeCon North America 2019
• 30mEnhance your Compliance with Policy-Based CI/CDNico Meisenzahl, Philiipe Lafoucrière · GitLab Commit Virtual 2021
• 29mIntroduction to Open Policy AgentRita Zhang, Ash Narkar · KubeCon + CloudNativeCon North America 2021