Infrastructure as Code with Terraform and GitHub Actions: A Kubernetes Case Study

As I’ve been working with Terraform more and more these days, I felt that it would be a good idea to move away from some of my other hacked together solutions in favor of Terraform. My next logical step was to focus on kubernetes management with terraform and github actions. This idea builds upon my previous Using Github to Manage Kubernetes article. As I started down this path, I realized that I needed a way to manage my state file. This is why I thought it was important to tackle the configuration I posted in Managing Your Terraform State File. ...

October 13, 2023 · 7 min · Scott

Managing Your Terraform State File

I started messing with GitHub Actions a little more in my Using GitHub to Manage Kubernetes post. I also did some tinkering around with Terraform in my How to Use Terraform to Deploy a Python Script to AWS Lambda post. As I started messing with Terraform even more, I realized how cool it would be to merge Terraform and GitHub Actions. As I started to do this, I ran into the problem of how to manage Terraform state files. This appears to be a rather common problem too. ...

October 2, 2023 · 3 min · Scott

Benchmarking Your Rego Policies

Yes, I’ve been on a Rego kick lately. I posted Kickstart Your Journey With Rego as a way for others to get onboard as well. As with any language, it’s always good to know the impact of your logic. After gaining an understanding of the language and flow, it only makes sense to begin benchmarking your Rego policies to understand the impact of awesome policies. Introduction to Benchmarking Your Rego Policies In the delightful world of policy and security, Rego is the belle of the ball. It’s the language of choice for crafting policy in Open Policy Agent (OPA). Like a skilled magician pulling rabbits out of hats, OPA uses Rego to create abracadabra moments, transforming complex policy language into straightforward, executable rules. ...

July 6, 2023 · 5 min · Scott

Kickstart Your Journey With Rego

Rego, the language powering the Open Policy Agent (OPA), has become an indispensable tool for developers and security professionals alike. In order to kickstart your journey with Rego, it makes sense to first understand some of the basics. I put the cart before the horse by first posting how to use Rego in Rego Based Policies in Cyral. In this guide, we will delve into the depths of Rego and explore how you can leverage its capabilities to enhance your policy as code practices. ...

June 29, 2023 · 5 min · Scott

Rego Based Policies in Cyral

From time to time, I end up documenting very specific details like my Integrating Cyral with Jira Cloud post. This is another case where I recently had to develop some customer Rego based policies for a specific use case at Cyral. When I first started working at Cyral, I did not know the Rego language. I’ve had to learn it over the years since it’s what drives many of the policy related decisions for our platform. We recently announced a change in our 4.5 release that allows for customers to be able to write their own policies using the Rego language. This post covers an example of building a policy with Rego using this new framework. ...

June 22, 2023 · 11 min · Scott