Tech
June 9

Terraform enterprise with OPA: How we reduced toil and improved security

This talk walks the audience through the journey around how we moved to increase the security of a multi-tenant Terraform workspace, while reducing the toil that came with maintaining the workspace on the gatekeepers (SRE team).
Talk abstract

Open Policy Agent (OPA) has gained a lot of popularity over the past couple of years, but most users still limit its use towards software security and regard it as a "security tool".

I respectfully disagree. OPA (with rego) is able to access any structured data (JSON, YAML, objects), and offload validations, checks and restrictions from Apps to an external tool (OPA).

For this talk, I will be covering a used case on how such "validation/check offload" was implemented with Terraform Enterprise. With this, we were able to cut down dev toil by over 35% and included ways to catch what would otherwise be disastrous events (which would not have been caught by humans).

The audience will benefit from the expansive use of OPA and hopefully find other uses for it.

Chuma Chuma-Obi
Software Engineer - SRE, The Home Depot

Related talks

Tech
June 9
Automate R&D workflows using serverless functions
As the cloud-native environment becomes increasingly complex and dynamic, it presents numerous challenges for platform teams. Managing software development manually is difficult and prone to human error and security issues, making automation essential for reducing workload and increasing security.
Michael Yuan
Founder & CEO, Second State
sponsored
Tech
June 8
Abstracting Kubernetes and setting standards with internal developer portals
Developers find it difficult to manage Kubernetes, let alone understand it when troubleshooting or developing in a shift left world. Internal developer portals can be used to abstract and whitelist K8s data and set standards through scorecards.
Suzanne Daniels
Developer Relations Lead, Port
sponsored
Tech
June 9
The current state and future of Internal Developer Portals
This session will cover how an internal developer portal and platform helps organizations, the current state of the internal developer portal product category, and the future of internal developer portals.
Seth Demsey
Co-Founder, configure8
sponsored
Tech
June 9
How to deploy Kotlin applications to Kubernetes without Dockerfiles
In this talk Lothar shares how to create docker images with Kotlin and Gradle only. Lothar will showcase a ktor application as well as create and deploy a Docker image that contains the application to a Kubernetes cluster. The deployment happens on the command line only - every code change will trigger an instant deployment of a newly created Docker image to a Kubernetes cluster.
Lothar Schulz
Head of Engineering, Miro
sponsored