The Power of OPA Gatekeeper: Enforcing Kubernetes Access Control to secure your runtime
summary
Shows a working pipeline that enforces Kubernetes image provenance by combining OPA Gatekeeper constraint templates and ArgoCD-driven deploys, with Prometheus + Elasticsearch logging and Grafana dashboards to monitor admission latency. Starts with policies in warning across dev/stage/prod, collects ~49 distinct violations during a hygiene phase, then remediates and flips enforcement from warning to deny so clusters only pull from a private Docker registry. ArgoCD uses manual sync for CRD rollouts to control impact.
AI-written summary · about
related talks
18mDevOps All the Things: Creating a Pipeline to Validate Your OPA Policies
27mEmbracing change: Policy-as-code with OPA and Gatekeeper
28mEmbracing change: Policy-as-code for Kubernetes with OPA and Gatekeeper
32mSecuring our clusters with gatekeeper and OPA
34mEmbracing Change, Policy as code for Kubernetes with OPA and Gatekeeper
34mSecure by Default with GitOps - A Guide to OPA with Argo CD
30mSecuring the Kubernetes Empire with OpenPolicyAgent and Rego
14mPolicy-as-code for Kubernetes with Gatekeeper