Self Healing GitOps: Continuous, Secure GitOps Using Argo CD, Helm and OPA
summary
Shows a concrete pipeline that stops and remediates unsafe deployments: Argo CD uses a Argo CD pre-sync hook to run Terrascan (scans Helm charts, Kubernetes YAML, Docker, Terraform) and OPA/Rego policies, blocking a deployment that reports 1 High, 11 Medium findings while allowing a hardened app with 0 High, 5 Medium. Demo wires Terrascan into an admission controller, enforces 500+ built-in policies, and demonstrates automated rejection (and promise of Rego-based remediation) working end-to-end.
AI-written summary · about
chapters (5)
- 0:00Start
- 4:16WHAT MAKES KUBERNETES SECURITY DIFFICULT
- 7:494 TENETS OF K8 SECURITY
- 10:12SECURITY GUARDRAILS
- 14:51SECURE GITOPS CI/CD WORKFLOW
related talks
18mDevOps All the Things: Creating a Pipeline to Validate Your OPA Policies
34mSecure by Default with GitOps - A Guide to OPA with Argo CD
39mGitOps — How to Marry Git and Kubernetes for Deployment and Operations
27mImplementing GitOps with ArgoCD: A Practical Guide
29mDemystifying Gitops with ArgoCD
32mGitOps, an Elegant Tool for Hybrid Cloud Kubernetes
02h 38mStop using kubectl, and use Git instead! - Hands-on GitOps workshop using Argo CD and Helm
27mSecure by Design: Embedding DevSecOps into Your GitOps Workflows