Centralized Policy Management

on YouTube ↗36m

" summary

Claims that centralized policy management prevents common Kubernetes misconfigurations (after reading over 100 failure stories), and shows how to enforce policies both in CI and at admission. Uses OPA as the policy engine, conftest for CI/local checks, Gatekeeper as the admission-layer enforcer, and Argo CD to make Git the single source of truth. Describes building a CLI plus dashboard (TheTree) that scans YAML, runs schema and policy checks, and reports violations for fixes.

AI-written summary · about

" chapters (6)

1. 0:00Start
2. 15:22Conf Test
3. 20:26How Do You Use Gatekeeper
4. 22:02Challenges
5. 29:47Cd Workflow
6. 31:05Centralized Policy Management

" related talks

• 37mDeep-dive into Open Policy Agent + Conftest + GateKeeper: Kubernetes Policy in ActionNoaa Barki, Shimon Tolts · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 37mDeep-dive into Open Policy Agent + Conftest + GateKeeperNoaa Barki · Conf42 Cloud Native 2022
• 28mDeep-dive into Open Policy Agent + Conftest + GateKeeperNoaa Barki, Shimon Tolts · Yalla DevOps 2021
• 57mStable, Safer, Faster: AKA How to Avoid K8s Misconfig with AutomationNoaa Barki · OWASP 2022 Global AppSec Europe Virtual Event
• 10mThe Power of OPA Gatekeeper: Enforcing Kubernetes Access Control to secure your runtimeBatel Zohar Tova, Dana Rozen · KCD Israel 2023
• 31mAccess Policies for Hybrid Cloud EnvironmentsRuiyi Wang · KubeCon + CloudNativeCon China 2018
• 28mEmbracing change: Policy-as-code for Kubernetes with OPA and GatekeeperAra Pulido · stackconf online 2021
• 40mIntro: Open Policy AgentRita Zhang, Max Smythe · KubeCon + CloudNativeCon Europe 2019