Enforcing Standards in CI/CD Using Open Policy Agent

on YouTube ↗28m

" summary

Explains how Open Policy Agent (OPA) can enforce standards early in CI/CD by validating Kubernetes manifests and Terraform templates during the build phase, using policies that check things like labels and resource requirements. Demonstrates generating a Kubernetes admission controller from the same OPA policy to validate and enforce those policies after deployment in-cluster.

AI-written summary · about

" chapters (6)

1. 0:00Start
2. 0:41Kubernetes deployments
3. 3:55Open Policy Agent (OPA)
4. 7:35Rego Language
5. 26:40Admission Control
6. 26:51OPA : Management APIs

" related talks

• 39mEnforcing Standards in CI/CD Using Open Policy AgentGaurav Gajkumar Chaware · Kubernetes Forum Bengaluru 2020
• 40mIntro: Open Policy AgentRita Zhang, Max Smythe · KubeCon + CloudNativeCon Europe 2019
• 33mOpen Policy Agent Deep DiveAnders Eknert · KubeCon + CloudNativeCon + Open Source Summit China 2021
• 41mYou Shall Not Pass! Policy Compliance with OPA GatekeeperNiccolò Raspa · KCD Italy 2021
• 19mDynamic Authorization and Policy Control for Your Kubernetes ClusterAsh Narkar · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 29mIntroduction to Open Policy AgentRita Zhang, Ash Narkar · KubeCon + CloudNativeCon North America 2021
• 38mPolicy as Code with Open Policy AgentAnders Eknert · CloudOpen @ Open Source Summit Europe 2022
• 25mPolicing Your Kubernetes Clusters with Open Policy Agent (OPA) - Mark Puddick & Amith NambiarMark Puddick, Amith Nambiar · Kubernetes Forum Sydney 2019