<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Dmytro Bot | Blog</title><description>Notes on DevSecOps, Kubernetes, cloud infrastructure and security.</description><link>https://dmytrobot.dev/</link><item><title>Policy as code for Terraform: the gate is easy, the pipeline is not</title><link>https://dmytrobot.dev/blog/terraform-policy-as-code/</link><guid isPermaLink="true">https://dmytrobot.dev/blog/terraform-policy-as-code/</guid><description>Blocking dangerous Terraform plans with Conftest and Rego, and the five pipeline problems that took longer than the rules.</description><pubDate>Sat, 03 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Adopting OPA Gatekeeper: mechanics and failure modes</title><link>https://dmytrobot.dev/blog/opa-gatekeeper/</link><guid isPermaLink="true">https://dmytrobot.dev/blog/opa-gatekeeper/</guid><description>How Gatekeeper admission and audit work, how to order policies by cost, and four failure modes from a rollout across three clusters.</description><pubDate>Fri, 02 Oct 2026 00:00:00 GMT</pubDate></item></channel></rss>