awesome-kubernetes/docs/securityascode.md

Security Policy as Code and Open Policy Agent (OPA)

• SSL certificates with Let's Encrypt in Kubernetes Ingress via cert-manager
• Security Policy as Code
• Open Policy Agent in Kubernetes
• Open Policy Agent in OpenShift
• Open Policy Agent in Cloudflare Workers
• Policy as Code in Terraform Cloud
• Cloud Custodian

SSL certificates with Let's Encrypt in Kubernetes Ingress via cert-manager

• medium: Using SSL certificates from Let’s Encrypt in your Kubernetes Ingress via cert-manager
• rejupillai.com: Let’s Encrypt the Web (for free)

Security Policy as Code

• OPA Open Policy Agent 🌟
• Dzone: DevOps Security at Scale - Security Policy as Code
• searchitoperations.techtarget.com: Kubernetes policy project takes enterprise IT by storm A Kubernetes-friendly compliance as code project hosted by the CNCF has caught on among large enterprises in the first half of 2019, largely through word of mouth.
• magalix.com: Integrating Open Policy Agent (OPA) With Kubernetes 🌟
• fugue.co: 5 tips for using the Rego language for Open Policy Agent (OPA)
• PolicyHub CLI, a CLI tool that makes Rego policies searchable 🌟 a list of community OPA policies
• blog.styra.com: Integrating Identity: OAUTH2 and OPENID CONNECT in Open Policy Agent
• blog.styra.com: Rego Unit Testing
• github.com/instrumenta/policies: A set of shared policies for use with Conftest and other Open Policy Agent tools
• itprotoday.com: Who Needs Open Policy Agent? Open Policy Agent makes it possible to create a single set of configuration rules and deploy them automatically across a large-scale environment.
• blog.styra.com: Dynamic Policy Composition for OPA
• blog.styra.com: 5 OPA Deployment Performance Models for Microservices

Open Policy Agent in Kubernetes

• infracloud.io: Kubernetes Pod Security Policies with Open Policy Agent
• banzaicloud.com: Istio and Kubernetes ft. OPA policies
• fugue.co: 5 tips for using the Rego language for Open Policy Agent (OPA)
• medium: Ensure Content Trust on Kubernetes using Notary and Open Policy Agent A detailed guide to help you to ensure that only signed images can get deployed on the cluster. In this blog post you will learn how to enforce image trust on your Kubernetes Cluster by fully relying on two well known CNCF hosted open source solutions: Notary and Open Policy Agent (OPA).
• kubermatic.com: Using Open Policy Agent With Kubermatic Kubernetes Platform
• k8s-security-policies This repository provides a security policies library that is used for securing Kubernetes clusters configurations. The security policies are created based on CIS Kubernetes benchmark and rules defined in Kubesec.io. The policies are written in Rego, a high-level declarative language, its purpose-built for expressing policies over complex hierarchical data structures. For detailed information on Rego see the Policy Language documentation.
• medium: Deploying Open Policy Agent (OPA) on a GKE cluster — Step by Step
• github.com/instrumenta/policies: A set of shared policies for use with Conftest and other Open Policy Agent tools 🌟
• blog.styra.com: Using OPA with GitOps to speed Cloud-Native development

Open Policy Agent in OpenShift

• blog.openshift.com: Fine-Grained Policy Enforcement in OpenShift with Open Policy Agent 🌟

Open Policy Agent in Cloudflare Workers

• compile OpenPolicyAgent policies into WebAssembly and run them on the edge

Policy as Code in Terraform Cloud

• hashicorp.com: Securing Infrastructure In Application Pipelines Learn how to use policy as code in Terraform Cloud to securely deliver applications.

Cloud Custodian

• Cloud Custodian is a rules engine for managing public cloud accounts and resources. It allows users to define policies to enable a well managed cloud infrastructure, that's both secure and cost optimized.