DevOps All the Things: Creating a Pipeline to Validate Your OPA Policies
Talkat KubeCon + CloudNativeCon North America 2020 Virtual · on Thursday, 2020-11-19· at 16:50· Intrado Virtual Event Platform,·
summary
Pipeline generates Gatekeeper constraint templates from plain Rego, runs Rego unit tests and static checks with confTest, and blocks bad commits via git pre-commit hooks; Argo CD then deploys validated constraint CRs and manifests. Demo shows Gatekeeper immediately denying pods using latest images, missing resource limits, and containers running as root; pre-commit rejects the same manifest until fixed, then Argo CD deploys it. The pipeline supports Terratest-driven ephemeral-cluster integration tests before GitOps merge.
AI-written summary · about
chapters (6)
related talks
10mThe Power of OPA Gatekeeper: Enforcing Kubernetes Access Control to secure your runtime
34mSecure by Default with GitOps - A Guide to OPA with Argo CD
31mSelf Healing GitOps: Continuous, Secure GitOps Using Argo CD, Helm and OPA
39mApplying Policy Throughout The Application Lifecycle with Open Policy Agent
37mDeep-dive into Open Policy Agent + Conftest + GateKeeper
30mGitops with Policy As Code and OPA
43mEmpowering The Guardians Of Your Code Kingdom
30mEnhance your Compliance with Policy-Based CI/CD