GitOps с Точки Зрения Безопасности - Принципы и Инструменты Контроля

Learn about security principles and tools for controlling risks associated with Infrastructure as Code (IaC) and GitOps implementations in this 47-minute conference talk from DevOops. Explore how to manage security in modern cloud-based environments where traditional processes struggle to keep up with complex application deployment systems. Dive into infrastructure security concepts through practical examples, including a detailed user story demonstrating automated change management processes for IaC. Master essential technologies like GitOps, IaC, policies as code, Gatekeeper, GPG, and SAST while understanding their role in maintaining robust security practices for modern IT infrastructure.