Securityascode¶
Architectural Context
Detailed reference for Securityascode in the context of Hardened Infrastructure.
- searchitoperations.techtarget.com: Kubernetes policy project takes enterprise IT by storm [COMMUNITY-TOOL]
- amazon.com: Policy-based countermeasures for Kubernetes – Part 1 [COMMUNITY-TOOL]
- blog.gitguardian.com: What is Policy-as-Code? An Introduction to Open Policy Agent [COMMUNITY-TOOL]
- OPA Open Policy Agent 🌟 [COMMUNITY-TOOL]
- fugue.co: 5 tips for using the Rego language for Open Policy Agent (OPA) [COMMUNITY-TOOL]
- PolicyHub CLI, a CLI tool that makes Rego policies searchable 🌟 [COMMUNITY-TOOL]
- github.com/instrumenta/policies: A set of shared policies for use with Conftest and other Open Policy Agent tools [COMMUNITY-TOOL]
- thenewstack.io: Getting Open Policy Agent Up and Running [COMMUNITY-TOOL]
- thenewstack.io: Weaveworks Adds Policy as Code to Secure Kubernetes Apps (Magalix) [COMMUNITY-TOOL]
- dev.to: Load external data into OPA: The Good, The Bad, and The Ugly [COMMUNITY-TOOL]
- kubermatic.com: Using Open Policy Agent With Kubermatic Kubernetes Platform [COMMUNITY-TOOL]
- k8s-security-policies [COMMUNITY-TOOL]
- blog.openshift.com: Fine-Grained Policy Enforcement in OpenShift with Open Policy Agent 🌟 [COMMUNITY-TOOL]
- compile OpenPolicyAgent policies into WebAssembly and run them on the edge [COMMUNITY-TOOL]
- Fugue: Container and Kubernetes. Runtime infrastructure security [COMMUNITY-TOOL]
- thenewstack.io: Yor Automates Tagging for Infrastructure as Code [COMMUNITY-TOOL]
- yor.io [COMMUNITY-TOOL]
- checkov.io [COMMUNITY-TOOL]
- aws.amazon.com: Policy-based countermeasures for Kubernetes – Part 1 [COMMUNITY-TOOL]
- Selefra: Selefra is an open-source policy-as-code software that provides analytics for multi-cloud and SaaS. [COMMUNITY-TOOL]
- neonmirrors.net: Kubernetes Policy Comparison: OPA/Gatekeeper vs Kyverno 🌟 [COMMUNITY-TOOL]
- dev.to: Using Kyverno To Enforce EKS Best Practices [COMMUNITY-TOOL]
- kyverno.io: Mutating Resources [COMMUNITY-TOOL]
- squadcast.com: Kyverno - Policy Management in Kubernetes 🌟 [COMMUNITY-TOOL]
- neonmirrors.net: Exploring Kyverno: Part 3, Generation [COMMUNITY-TOOL]
- kyverno.io: Check deprecated APIs 🌟 [COMMUNITY-TOOL]
- kyverno.io: Generating resources into existing namespaces [COMMUNITY-TOOL]
- kyverno.io: Add Pod Proxies [COMMUNITY-TOOL]
- kyverno.io: Auto-Gen Rules for Pod Controllers [COMMUNITY-TOOL]
- kyverno.io: Require PodDisruptionBudget [COMMUNITY-TOOL]
- nirmata.com: Kubernetes Supply Chain Policy Management with Cosign and Kyverno [COMMUNITY-TOOL]
- neonmirrors.net: Exploring Kyverno: Introduction 🌟 [COMMUNITY-TOOL]
- nirmata.com: Introducing Kyverno 1.4.2: Trusted And More Efficient! [COMMUNITY-TOOL]
- searchitoperations.techtarget.com: CNCF policy-as-code project bridges Kubernetes security gaps [COMMUNITY-TOOL]
- Policy Reporter 🌟 [COMMUNITY-TOOL]
- sesin.at: Securing Kubernetes with Kyverno: How to Protect Your Users From Themselves by Ritesh Patel [COMMUNITY-TOOL]
- dev.to: Default Kyverno Policies for OpenEBS [COMMUNITY-TOOL]
- cloud.redhat.com: Automate Your Security Practices and Policies on OpenShift With Kyverno 🌟 [COMMUNITY-TOOL]
- A Kyverno policy to block custom snippet configurations for Kubernetes Nginx ingress (CVE-2021-25742 [COMMUNITY-TOOL]
- kyverno.io: Restrict Image Registries [COMMUNITY-TOOL]
- dev.to: Using Kyverno Policies for Kubernetes Governance [COMMUNITY-TOOL]
- kyverno.io: Implementing your best practices is simple with kyverno [COMMUNITY-TOOL]
- youtube: The Rise of Kubernetes Policy Engine | Ep 57 [COMMUNITY-TOOL]
- blog.sigstore.dev: How to verify container images with Kyverno using KMS, Cosign, and Workload Identity [COMMUNITY-TOOL]
- appsecengineer.com: Kubernetes Policy Management with Kyverno [COMMUNITY-TOOL]
- Cloud Custodian [COMMUNITY-TOOL]
- Apolicy [COMMUNITY-TOOL]
- sysdig.com: Sysdig and Apolicy join forces to help customers secure Infrastructure As Code and automate remediation [COMMUNITY-TOOL]
💡 Explore Related: Crossplane | Liquibase | Kubernetes Security