~/talk

Enhancing Compliance and Safety with Argo CD Ephemeral Access

on YouTube 24m
Talkat ArgoCon NA 2024 · on Tuesday, 2024-11-12· at 11:15· Salt Palace | Level 2 | 251 AD· [security, devops-and-delivery]

speakers

name:Leonardo Luz Almeida
speakerdeck:leoluz
name:Vijay Agrawal
links:none on file

resources

video:https://youtu.be/DAjJk-oKAZk
slides:none on file

summary

Intuit builds an Argo CD extension called ephemeral access that issues time‑bound UI permissions via OIDC (GitHub or internal), creating AccessRequest CRD objects that a controller reconciles into dynamic AppProject roles from a role template policies template. The demo shows granted devops rights that auto‑revoke after one minute, and the system logs changes for auditing. A pluggable hook layer integrates change systems (example ServiceNow) before granting access, and Intuit reports operating 50+ Argo CD instances across 325 clusters managing ~331k applications.

AI-written summary · about

chapters (7)

  1. 0:00Introduction
  2. 13:14UI Extension
  3. 15:12Access Request
  4. 16:05Controller Responsibility
  5. 17:27Plugin
  6. 19:08Next steps
  7. 20:34Conclusion

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.