Lightning Talk: Policy as [Versioned] Code - You're Doing It Wrong.

on YouTube ↗10m

" summary

Claim: treat policy as versioned code with signed releases, tests and release notes so multiple policy versions coexist and update several times a day. Implementation uses terraform and cuetes for admission, policy repos tagged v1.0 v2.0 v2.10 v2.11, apps depend on specific policy versions, and renov opens PRs to show noncompliance. Result: automated per-repo evaluation in CI or runtime, measurable org-wide compliance, and the ability to roll a policy forward without breaking clusters that accept older versions.

AI-written summary · about

" related talks

• 34mPolicy As [Versioned] CodeChris Nesbitt-Smith · Critical Software Summit @ Open Source Summit Europe 2022
• 23mPolicy as [versioned] CodeChris Nesbitt-Smith · SREday London 2022
• 25mPolicy as [versioned] CodeChris Nesbitt-Smith · Open Source Summit Latin America 2022
• 41mModern Policy Management Putting responsibility where it belongsMike Ensor · Build Stuff 2019
• 22mRethinking Risk, Governance, and Compliance Applying AutomationMichael Edenzon · Open Source in Finance Forum New York 2022
• 11mLightning Talk: Automating Industry Regulation (SoX, SoC...Gopinath Rebala, Balaji Sivasubramanian · Spinnaker Summit 2022
• 32mCompliance As Code: Shift-Left and Shift-Right Approaches in a Cloud WorldPaolo Latella · Incontro DevOps Italia 2024
• 45mCatching Commits to Secure Infrastructure as CodeRosemary Wang · GOTO Chicago 2023