Adopting GitOps and the Cloud in a Regulated Industry
summary
BOK Financial adopts a GitOps "as‑code" model using Terraform, Packer and Terraform Cloud, building 76 Terraform modules with ~800 versions, 33 contributors, and ~8,000 provisioned resources to standardize multi‑cloud. Controls are merge policies + code owners + Sentinel rules; pipelines use short‑lived STS tokens to remove persistent keys. Result: faster, auditable deployments, fewer manual console changes, tightened security and repeatable immutable images—proof of concept moved into production with measurable resilience and efficiency gains.
AI-written summary · about
chapters (11)
- 0:00Introduction and speakers
- 1:45About BOK Financial
- 3:31Regulated industry challenges
- 5:54Cloud security risks
- 8:01GitOps and devsecops approach
- 10:25Multi-cloud with Terraform
- 13:15Guardrails and merge policies
- 16:22Short-lived credentials
- 18:05Immutable infrastructure
- 20:14Managing Git with Terraform
- 21:40Future plans with HashiCorp
related talks
49mPublic cloud in regulated industry, not just swipe of a cred
33mThe Role of GitOps in IT Strategy
05mGitOps Cloud Resource Management
09mLightning Talk: The GitOps Armada: Set Sail With Kubernetes Fleet Automation
31mAutomating Kubernetes Resource Management Over GitOps for the Telco Cloud RAN Prime Time
49mExponential Organizational Growth with Infrastructure as Code
09mInfra-like-apps - GitOpsifying Cloud Natively Managed Infrastructure with...
36mGitOps for Infrastructure on AWS