The Difference Between Screwing Around (DevOps) and Science (GitOps) - Writing It Down
Explore GitOps principles and their implementation at The New York Times, showcasing how writing down configurations enhances DevOps practices, improves deployment velocity, and ensures standardization.
Automating Enterprise and Industry Regulation Enforcement During Software Delivery
Learn to automate compliance with industry regulations during software delivery using OPA policies integrated with Spinnaker, enhancing CI/CD processes for enterprise development teams.
Deploying Policy-as-Code with Readable Rego Policies and Open Policy Agent
Learn to implement Policy-as-Code using Open Policy Agent and Rego language. Explore deployment strategies, centralized management, and best practices for writing clear, effective policies in cloud-native environments.
Container Security: Supply Chain, Authorization, and Runtime Protection
Explore container security: supply chain integrity, deployment authorization, and runtime protection. Experts discuss in-toto, TUF, Open Policy Agent, and container escape prevention.
Securing Your Infrastructure as Code Pipeline
Explore techniques for securing Infrastructure as Code pipelines, including static analysis, RBAC, and open-source tools like Open Policy Agent and Sigstore, to enhance productivity and compliance.
Dynamic Authorization and Policy Control for Kubernetes Clusters
Learn dynamic authorization and policy control techniques for Kubernetes clusters using Open Policy Agent, focusing on admission control and effective policy management.
Secure Container Deployments - Time for Refresh
Explore modern container security practices, focusing on pod security, policy implementation, and admission controllers for enhanced protection in Kubernetes environments.
How to Promote the Use of Best Practices and Automate Security Policies
Explore container security automation in CI/CD pipelines, focusing on vulnerability scanning, admission controls, and runtime security using tools like OPA and Kubernetes Admission Controls.
Beyond the Cluster: Harnessing the Power of Kubernetes Namespaces
Explore Adobe's journey in building a cross-cloud, multi-tenant Kubernetes platform. Learn about tools, challenges, and lessons for balancing velocity and reliability in modern developer ecosystems.
Challenge to Implementing Scalable Authorization with Keycloak
Explore scalable authorization implementation using Keycloak, combining it with OPA and CockroachDB for enhanced security, performance, and multi-cloud resilience in API and service development.
Fine-Grained Authorization with Topaz - Open Source Solutions
Explore Topaz: an innovative authorization engine uniting policy-as-code, relationship-based models, and real-time decision-making for enhanced security in zero-trust environments.
Application Code of Conduct - Full-Stack Policy as Code
Explore full-stack policy as code implementation using open-source tools like Rego and Open Policy Agent. Learn to build comprehensive authorization solutions across backend, frontend, and business functions.
Gatekeeper - Flexible, Shareable Policy for Kubernetes
Explore flexible, shareable Kubernetes policies with Gatekeeper. Learn to implement, customize, and contribute rules for security, legal, and operational requirements across your software lifecycle.
Deep Dive into Open Policy Agent, Conftest, and GateKeeper - Kubernetes Policy in Action
Explore Kubernetes policy enforcement using Open Policy Agent, Conftest, and GateKeeper. Learn implementation strategies and best practices for secure, compliant container orchestration.
Securing the Kubernetes Empire with OpenPolicyAgent and Rego
Explore OpenPolicyAgent and Rego for robust Kubernetes security. Learn to create, implement, and manage policies efficiently, ensuring compliance and fortifying your cloud-native infrastructure.
Modernizing Image Security in CI/CD with Cosign and OPA
Explore Cosign for image signing and OPA for policy enforcement in CI/CD pipelines. Learn implementation strategies and see a hands-on demo for securing Kubernetes deployments.
Policy as Code: A Game-Changer for Stack Security
Explore "Policy as Code" and its impact on stack security. Learn about access control models, policy engines, and how to integrate authorization into your codebase for enhanced application security.
Securing 900 Kubernetes Clusters - Journey to ValidatingAdmissionPolicies
Explore Mercedes-Benz's journey in securing 900+ Kubernetes clusters, transitioning from Pod Security Policies to ValidatingAdmissionPolicies, and learn about challenges and advantages of native solutions.
Securing a Managed Jupyter Notebook Platform Using Istio and OPA
Learn how to secure a managed Jupyter notebook platform using Istio and OPA. Discover techniques for user isolation, traffic segmentation, and access authorization in multi-tenant ML environments.
The Right Feature at the Right Place - Authorization Example
Explore moving authorization from code to a readable, accessible place using Open Policy Agent and Apache APISIX API Gateway for improved system auditability.
Open Policy Agent Intro
Introduction to Open Policy Agent: A versatile policy engine for Kubernetes, microservices, CI/CD, and cloud. Learn about its features, use cases, and the OPA Gatekeeper project.