Shift left policies with Conftest

Following my talk at the Virtual Azure Community Day, I received a lot of questions about how to validate Kubernetes deployments before their actual deployment to the cluster. In this, the final chapter of my series about my adventures with Gatekeeper on the Azure Kubernetes Service (AKS), I’m going to look at testing. In Part 1, I told you all about Rego, the domain-specific language (DSL) used by Open Policy Agent (OPA). »

Daniël Paulus

Deepdive with Azure Policy and AKS

After my talk at the Virtual Azure Community Day, I promised I’d deliver a series of articles about my adventures with Gatekeeper on Azure Kubernetes Service (AKS). In Part 1, I told you all about Rego, the domain-specific language (DSL) that is used by Open Policy Agent (OPA). In Part 2, I explained how to set up and use Gatekeeper to enforce policies in a cluster. Now, in Part 3, I’ll talk about how easily you can enable Azure Policy for Kubernetes and get the Gatekeeper set up for free by Microsoft. »

Daniël Paulus

The Power of Gatekeeper

After my talk at the Virtual Azure Community Day, I promised I’d deliver a series of articles about my adventures with Gatekeeper on Azure Kubernetes Service (AKS). In Part 1, I told you all about Rego, the domain-specific language (DSL) that is used by Open Policy Agent (OPA). Now, in Part 2, I’ll talk about the use of Gatekeeper to enforce policy on a cluster. The examples in this post are not tailored to AKS specifically; you can apply them to any Kubernetes cluster you manage—Onprem, Hosted, Managed, or Vendored—as long as you are using Version 1. »

Daniël Paulus

The Rego Language

Because I love to give myself more work, after my talk at the Virtual Azure Community Day, I promised I’d do a series of articles about my adventures with Gatekeeper on Azure Kubernetes Service (AKS). In Part One of the series, I’ll begin by providing an overview of Rego, a domain-specific language (DSL) that allows us to query things. One language to query them all Rego is used by Open Policy Agent (OPA) to write declarative, easily extensible policy decisions. »

Daniël Paulus

Pushing Containers To GitHub Packages

In my previous blog, you read about building containers with GitHub Actions and pushing them to Docker Hub. In this post, I’ll extend the workflow to push the containers to the GitHub Packages registry. Why Use GitHub Packages GitHub Packages is a software package hosting service, similar to npmjs.org, rubygems.org, or hub.docker.com. It allows you to host your packages and code in one place, privately or publicly, and use them as dependencies in your projects. »

Daniël Paulus