Policy as [versioned] Code

on YouTube ↗23m

" summary

Argument: store policy in git, publish it as a versioned artifact, and treat it like any other dependency so apps and infra declare which policy version they use. Prototype uses Terraform and Kubernetes manifests, semantic versions (1.0.0 → 2.0.0 → 2.1.0), signed releases, tests that run locally and in CI, renovate creating automatic pull requests, and an admission-controller-style evaluator that accepts multiple policy versions so org-wide compliance is measurable and updatable. policy as a dependency semantic versioning renovate auto-PRs

AI-written summary · about

" chapters (7)

1. 0:00Introduction with lift analogy
2. 5:35Meet the speaker Chris Nesbitt Smith
3. 7:20Policy problems in real life
4. 11:16Policy as versioned code
5. 15:47Demo with Terraform and Kubernetes
6. 20:46Culture change and next steps
7. 21:51Q&A and closing remarks

" related talks

• 25mPolicy as [versioned] CodeChris Nesbitt-Smith · Open Source Summit Latin America 2022
• 34mPolicy As [Versioned] CodeChris Nesbitt-Smith · Critical Software Summit @ Open Source Summit Europe 2022
• 10mLightning Talk: Policy as [Versioned] Code - You're Doing It Wrong.Chris Nesbitt-Smith · GitOpsCon North America 2022
• 41mModern Policy Management Putting responsibility where it belongsMike Ensor · Build Stuff 2019
• 30mEnhance your Compliance with Policy-Based CI/CDNico Meisenzahl, Philiipe Lafoucrière · GitLab Commit Virtual 2021
• 41mPolicy as Code with Sentinel LanguageArmon Dadgar · Strange Loop 2017
• 23mPolicy-driven Deployments in SpinnakerBeth Fuller · cdCon 2020
• 45mCatching Commits to Secure Infrastructure as CodeRosemary Wang · GOTO Chicago 2023