Jun 5, 2025 · 4 min read · Policy-as-Code CI/CD Governance "Why is no one talking about policy enforcement in CI/CD pipelines like it's a core part of DevOps?"This was the question that started it all for me. I am C.Aman — a cloud and DevOps engineer who recently went deep in...
Join discussionOct 2, 2024 · 10 min read · Introduction Welcome to Part IV of my Kubernetes series, where we delve into building compliant systems on Kubernetes to meet stringent regulatory standards such as PCI-DSS, POPI, GDPR, and HIPAA. As
Join discussion
Oct 5, 2023 · 8 min read · In the realm of Terraform, creating infrastructure was a breeze, but challenges loomed. How could teams ensure rule adherence? Were the right tags and naming conventions followed? Many organizations grappled with these questions. Terraform, though ef...
Join discussion
Sep 11, 2023 · 3 min read · What is OPA? The Open Policy Agent (OPA) is a general-purpose policy engine that can assess Rego-expressed rules using information compiled in JSON format from various sources. A policy's enforcement may make use of an evaluation's findings. It offer...
Join discussionSep 6, 2023 · 5 min read · Authorization is a crucial concern for most applications. As app logic grows, permission checks often get scattered across handlers, middlewares, and external services. This leads to duplicated logic and inconsistencies. Open Policy Agent (OPA) provi...
Join discussion
Jul 21, 2023 · 5 min read · Gatekeeper is a general-purpose policy engine based on Open Policy Agent (OPA). It allows you to define and enforce custom policies across various Kubernetes resources. Kyverno is specifically designed for Kubernetes policy management. It focuses o...
Join discussionMar 2, 2023 · 8 min read · Last week, I wrote about putting the right feature at the right place. I used rate limiting as an example, moving it from a library inside the application to the API Gateway. Today, I'll use another example: authentication and authorization. Securing...
Qquitzon commented