11
Validating Compliance and Policy as Code
Now that we have explored how to design and enable the use of starter kits that give your users with the proven patterns, it is time to think about the challenges around doing that. A typical scenario involves a developer deploying a container without resource limits, or pulling from an untrusted registry. How's your starter kit going to prevent secrets from being hardcoded, which is one of the most common challenges we see. This is the context in which we will talk about compliance—as a core capability of your platform. If compliance and security is an afterthought, teams will invariably struggle with it.
This chapter explores how to implement policy-as-code using Open Policy Agent (OPA) and its Kubernetes-integrated ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access