$ ls ~/blog
- Policy as code for Terraform: the gate is easy, the pipeline is not
Blocking dangerous Terraform plans with Conftest and Rego, and the five pipeline problems that took longer than the rules.
- Adopting OPA Gatekeeper: mechanics and failure modes
How Gatekeeper admission and audit work, how to order policies by cost, and four failure modes from a rollout across three clusters.