Modern Policy Management Putting responsibility where it belongs
summary
Argues that policy must be automated and moved into the CI/CD pipeline, showing three live demos: rejecting an out-of-region Terraform plan via JSON-ified Terraform plan output, enforcing namespaces with Kubernetes using Gatekeeper, and unit-testing policies with Open Policy Agent and Rego. Claims OPA runs decisions in ~20 ms, uses bundles/agents (data mostly in-memory), and warns Rego testing is immature; demonstrates actionable fast-feedback that blocks bad deployments rather than creating late-stage technical debt.
AI-written summary · about
chapters (10)
- 0:00Start
- 8:29Policy Adherence & Enforcement
- 15:14Modern Software Delivery
- 15:41Team Responsibilities Shifting
- 16:55Software Supply Chain
- 18:53Introduce Policy Mgmt in CI/CD Pipelines
- 26:35Other useful tools
- 28:07Unit Test Policies
- 31:01Validate Terraform Plan
- 33:50Kubernetes Admission
