ОЛЕКСАНДР СНІГОВИЙ «Extension of DevOps: Policy as Code» Lviv DevOps Conference 2019
Download as PPTX, PDF0 likes50 views
The document discusses the concept of Policy as Code within the DevOps framework, highlighting its importance in managing infrastructure by preventing accidental resource deletion and enforcing compliance measures. Tools like Sentinel, Open Policy Agent (OPA), and Chef InSpec are mentioned as key technologies to implement this approach. The author emphasizes the future of managing policies through automation and the benefits it brings to development quality.
ОЛЕКСАНДР СНІГОВИЙ «Extension of DevOps: Policy as Code» Lviv DevOps Conference 2019
- 1. Extension of DevOps: Policy as Code Alexander Snegovoy, DevOps, Kherson
- 2. • DevOps Engineer in DataArt • AWS & GCP Certified • Drive Kherson Cloud/DevOps Community Who am I?
- 3. • Automation Journey • How do we get to policy as code? • Examples • Future? Agenda
- 4. Ways to manage infrastructure
- 5. Ways to manage infrastructure
- 6. Ways to manage infrastructure
- 7. Ways to manage infrastructure
- 8. Ways to manage infrastructure
- 10. Policy as Code!
- 11. • Prevent accidental deletion of resources • Prohibit changes to some resources • Enforce tagging • Express these statements in readable, testable and deployable manner What is Policy as Code?
- 12. • Sentinel • Open Policy Agent • Chef InSpec Some examples
- 13. Sentinel
- 14. Example
- 15. Open Policy Agent Open Policy Agent (OPA) is a general- purpose policy engine with uses ranging from authorization and admission control to data filtering. OPA provides greater flexibility and expressiveness than hard-coded service logic or ad-hoc domain-specific languages. And it comes with powerful tooling to help you get started.
- 16. Example
- 17. Chef InSpec
- 18. Example
- 19. • Compliance team as part of project’s team • Higher quality • Poly as Code as a Service What’s next?
- 20. Thank you!