Large-Scale Financial-Grade Platform Engineering Practice in China Merchants Bank
探索中国招商银行如何利用云原生技术和平台工程实践实现数字化转型，平衡安全合规与创新，优化开发流程，提高效率并确保风险控制。
The Bang! - When Bad Things Happen to Your Data - Preventing and Remediating Data Security Breaches
探索数据安全策略：通过90年代风格游戏场景，学习使用Kanister、OPA和Prometheus来预防和应对数据安全事件，构建更强大的基础设施。
Policy Compliance with Sigstore - From Signing Software to Validating the Whole Software Supply Chain
Explore sigstore for software signing and verification, and learn how to implement policy compliance in cloud-native software build and deployment processes using automation and tools.
Policy-Driven Supply Chain Security with Enterprise Contract
Explore Enterprise Contract for enforcing software supply chain security and compliance. Learn to verify container images, signatures, and attestations using customizable policies.
Open Policy Agent (OPA) Introduction and Deep Dive
Explore Open Policy Agent (OPA): a versatile policy engine for Kubernetes, microservices, CI/CD, and cloud. Learn about its features, updates, and practical applications in cloud-native technology.
Managing Your Policies and Standards
Explore implementing a governance framework using Rego and OPA, focusing on policy lifecycle and application in Kubernetes environments.
Running Policy in Hard-to-Reach Places with WASM and OPA
Explore how WebAssembly and Open Policy Agent enable standardized business rule enforcement across diverse environments, from servers to smartphones, with centralized management and instant user feedback.
Introduction to Open Policy Agent - Rego Language and Kubernetes Policies
Explore Open Policy Agent (OPA) with co-creator Torin Sandall. Learn Rego language basics, write policies for Kubernetes, and run OPA locally using CLI and VSCode.
Calling OPA from eBPF Through WASM in the Kernel - Exploring Unconventional Technology Integration
Explore the integration of eBPF, WASM, and OPA in kernel space, showcasing innovative approaches to cloud-native technologies and their potential impact on system performance and security.
Self Healing GitOps - Continuous, Secure GitOps Using Argo CD, Helm and OPA
Explore continuous, secure GitOps using Argo CD, Helm, and OPA. Learn to automate secure deployments, ensure compliance, and implement self-healing GitOps for Kubernetes clusters.
The Difference Between Screwing Around (DevOps) and Science (GitOps) - Writing It Down
Explore GitOps principles and their implementation at The New York Times, showcasing how writing down configurations enhances DevOps practices, improves deployment velocity, and ensures standardization.
Deploying Policy-as-Code with Readable Rego Policies and Open Policy Agent
Learn to implement Policy-as-Code using Open Policy Agent and Rego language. Explore deployment strategies, centralized management, and best practices for writing clear, effective policies in cloud-native environments.
Application Code of Conduct - Full-Stack Policy as Code
Explore full-stack policy as code implementation using open-source tools like Rego and Open Policy Agent. Learn to build comprehensive authorization solutions across backend, frontend, and business functions.
Securing the Kubernetes Empire with OpenPolicyAgent and Rego
Explore OpenPolicyAgent and Rego for robust Kubernetes security. Learn to create, implement, and manage policies efficiently, ensuring compliance and fortifying your cloud-native infrastructure.
Securing 900 Kubernetes Clusters - Journey to ValidatingAdmissionPolicies
Explore Mercedes-Benz's journey in securing 900+ Kubernetes clusters, transitioning from Pod Security Policies to ValidatingAdmissionPolicies, and learn about challenges and advantages of native solutions.
Episode IV - A New Network Service Mesh
Explore Network Service Mesh: a revolutionary approach to Cloud Native networking that simplifies complexity, enables multi-cloud connectivity, and integrates with SPIFFE and OPA for enhanced identity and policy support.
No More Moats - Protecting Your Cloud Native Infrastructure with Zero Trust
Explore Zero Trust security for cloud native infrastructure using SPIFFE, SPIRE, and open-source tools. Learn practical architectures and implementation strategies from Fortune 500 examples.
Fortifying Microservice Security with SPIRE and OPA
Learn how to enhance microservice security using SPIRE for authentication and OPA for authorization. Discover scalable solutions for reliable service-to-service and end-user access control in complex environments.
Customizing OPA for a "Perfect Fit" Authorization Sidecar
Explore customizing Open Policy Agent (OPA) for enhanced authorization: high-performance gRPC API, Kafka decision logging, and OAuth2 Rego functions. Tailored solutions for improved security and integration.
Access Policies for Hybrid Cloud Environments
Explore challenges and solutions for managing access policies across diverse systems in hybrid cloud environments, aiming for a secure and consistent experience.
Terraform Enterprise with OPA: Reducing Toil and Improving Security
Explore how OPA enhances Terraform Enterprise security, reduces toil, and improves multi-tenant workspace management. Learn to offload validations and implement disaster prevention measures.