~/talk

Automating Enterprise/Industry Regulation Enforcements During Software Delivery

on YouTube 24m
Talkat Spinnaker Summit 2023 · on Tuesday, 2023-05-09· at 14:50· Meeting Room 223-224· [devops-and-delivery, security]

speakers

name:Gopinath Rebala
links:none on file
name:Balaji Sivasubramanian
github:balajisiva

resources

video:https://youtu.be/K5lPVPB8UsU
slides:none on file

summary

Shows a working integration of OPA policies with Spinnaker that enforces real compliance checks: pipeline stages require two-person approvals for production, block deploys if image scans show critical or high vulnerabilities, and prevent pipeline edits unless changes come from an approved GitOps flow. Uses an OPA server plus a small provenance database for artifact origin checks and a Clouddriver plugin for admission control; demoed pipelines enforce and audit the policies though full provenance workflows run outside Spinnaker.

AI-written summary · about

chapters (9)

  1. 0:00Automating regulation enforcement
  2. 2:07Drivers for security compliance
  3. 5:15Challenges in automation
  4. 7:22Security in delivery pipelines
  5. 13:02Admission control for security
  6. 16:34Defining compliance policies
  7. 17:57Policy pipeline examples
  8. 21:22Summary and demo
  9. 22:04Q&A

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.