GitOps and Kubernetes

6 Access control and security

This chapter covers

• Areas of attack when using GitOps-driven deployment
• Ensuring that critical infrastructure components are protected
• Guidelines for choosing the right configuration management pattern
• Enhancing security to avoid security pitfalls in GitOps

Access control and security topics are always essential and are especially crucial for deployment and infrastructure management. In this case, the attack surface includes expensive things like infrastructure, dangerous things like policy and compliance, and the most important things like data stores that contain user data. Modern operations methodologies enable engineering teams to move at a much quicker pace and optimize for fast iterations. However, more ...