Dog Days of Devops 2022: Policy as Code
The document discusses how policy can be implemented as code to improve cooperation between development and operations teams. Initially operations inserts governance into development, building trust and cooperation over time. This leads teams to share tools and methods, including representing infrastructure and configuration as code. Implementing policy as code provides benefits like being human and machine readable, versioned, and automatable, allowing policy to move at the same cadence as development and be reviewed like code. Examples of policy as code include Terraform, Kubernetes, configuration management tools and OpenAPI specifications. The document recommends talking to developers, converting tribal knowledge and manual processes to code, and cooperating to get started with a policy as code approach.
Dog Days of Devops 2022: Policy as Code
- 1. Policy as Code (or: how I learned to stop worrying and trust my developers) Gabe Schuyler @gabe_sky Dog Days of Devops 🔥 August, 2022
- 2. Gabe Schuyler Dog Days of DevOps @gabe_sky A tale of DevOps • Initially insert Ops (governance) into Dev • Leads to trust • Leads to cooperation • Leads to "borrowing" tools and methods • Infrastructure and con fi guration as code ("ops as code")
- 3. Gabe Schuyler Dog Days of DevOps @gabe_sky Policy • Firewall rules and ACLs • System security con fi guration • Expected API inputs and outputs • The "allow list" for an application
- 4. Gabe Schuyler Dog Days of DevOps @gabe_sky Why code? • Text fi les • Versioned • Machine readable • Human reviewable • Automate-able
- 5. Gabe Schuyler Dog Days of DevOps @gabe_sky Value • Readable (and Commentable) • Automate-able (ClickOps must die) • Move at the same cadence as development • Include "code review" before changes • Integrate into testing and QA • Remove unused policies from the allow list
- 6. Gabe Schuyler Dog Days of DevOps @gabe_sky Examples • Terraform • Kubernetes • Con fi guration Management • Open Policy Agent • OpenAPI speci fi cation
- 7. Gabe Schuyler Dog Days of DevOps @gabe_sky How do we get started? • Talk to developers about their fl ow and tools • Convert tribal knowledge to code • Convert manual run-books to automated processes • Transcribe existing policy into code • Cooperate
- 8. Gabe Schuyler @gabe_sky Dog Days of Devops 🔥 August, 2022 Policy as Code