Gitops with Policy As Code and OPA

on YouTube ↗30m

" summary

Explains using Open Policy Agent with GitOps to make policy a versioned, testable product: Rego policies stored in Git, compiled by Styra DAS or GitHub Actions, shipped as bundles to Kubernetes admission controllers or sidecars, and logged via OPA decision logs. Demonstrates default-deny enforcement plus a watch/advisory mode for gradual rollout. Demo shows real CI/CD and Kubernetes integration work but the live demo fails to roll out rules, illustrating practical deployment friction.

AI-written summary · about

" chapters (4)

1. 0:00Start
2. 3:18POLICY IMPLEMENTATION STAGES OF IMPROVEMENT FOR AN ORGANIZATION
3. 12:03CHOOSING THE RIGHT TOOL FOR THE JOB
4. 15:25DECOUPLED POLICY ENGINE

" related talks

• 17mOpen Policy Agent IntroAsh Narkar, Oren Shomron · KubeCon + CloudNativeCon Europe 2021
• 39mApplying Policy Throughout The Application Lifecycle with Open Policy AgentGareth Rushgrove · KubeCon + CloudNativeCon North America 2019
• 38mPolicy as Code with Open Policy AgentAnders Eknert · CloudOpen @ Open Source Summit Europe 2022
• 29mIntroduction to Open Policy AgentRita Zhang, Ash Narkar · KubeCon + CloudNativeCon North America 2021
• 40mOPA Introduction & Community UpdateRita Zhang, Patrick East · KubeCon + CloudNativeCon North America 2019
• 39mOPAPeter O'Neill · KubeCon + CloudNativeCon North America 2022
• 31mDeploying Policy-as-Code with Readable Rego Policies, and Open Policy AgentPeter O'Neill · KubeDay Israel 2023
• 33mOpen Policy Agent Deep DiveAnders Eknert · KubeCon + CloudNativeCon + Open Source Summit China 2021