Securing your Deployments using a Policy Driven Approach
summary
Shows a concrete pipeline that loads Rego policies into Open Policy Agent via ConfigMaps and a sidecar, then enforces them from Spinnaker using the Armory Policy Engine and Styra integration. Demo deploys a LoadBalancer with port 22 and the policy deny port 22 in production returns a hard fail while the same run gives a warning in non-production. Also demonstrates automatic tagging, passing provisioned resource variables into apps, and using server group defaults so deployments become consistent, auditable, and easier to debug.
AI-written summary · about
chapters (4)
- 0:00Introduction to policy driven deployments
- 4:59How the policy engine works
- 9:12Benefits of consistent deployments
- 14:49Closing and Q&A
related talks
39mApplying Policy Throughout The Application Lifecycle with Open Policy Agent
31mDeploying Policy-as-Code with Readable Rego Policies, and Open Policy Agent
24mAutomating Enterprise/Industry Regulation Enforcements During Software Delivery
56mCloud-native Policy Enforcement
27mSecurity-by-construction: How to weave authorization into modern app stacks using Open Policy Agent
43mEmpowering The Guardians Of Your Code Kingdom
20mUsing OPA to Ensure Compliant Software Delivery in a Highly Regulated Finance Envi...
25mMake Your Security Policy Auditable