GitOps in a Federated and Regulated Environment at RBI
summary
RBI builds an internal platform called Cortex on okd to run >1,000 apps across about 20 clusters with ~18 engineers operating it, using an app-catalog per cluster and Argo app-of-apps to onboard apps in a demo that completes in under two minutes. Deployments are gated by audit-proof pull requests and mandatory JIRA ticket numbers, promoted only after a JIRA approval; compliance is enforced with CIS level 1/2 baselines plus runtime scanning and policies via caverno and St rocks, and orchestration with Argo CD. Real rollouts required 2–3 months per team to fix policy breakage.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 3:10RBI’s mission and challenges
- 7:42Building Cortex with OKD and Argo
- 12:57Demo: Onboarding app
- 18:48Demo: Policy enforcement and scanning
- 22:24Demo: Vulnerability detection with StackRox
- 26:04Key lessons learned
- 28:31Q&A
related talks
33mGitOps in Modern Security-Compliant Environments
27mSecure by Design: Embedding DevSecOps into Your GitOps Workflows
37mSecure Multi-Tenant GitOps Application & Infrastructure Rollouts At Adobe
22mGitOps - The Magic Key to Cloud Native Security
34mSecure by Default with GitOps - A Guide to OPA with Argo CD
20mUsing OPA to Ensure Compliant Software Delivery in a Highly Regulated Finance Envi...
18mDevOps All the Things: Creating a Pipeline to Validate Your OPA Policies
31mSelf Healing GitOps: Continuous, Secure GitOps Using Argo CD, Helm and OPA