Securing your Pipeline on OpenShift - Marc Boorshtein (Tremolo Security)| OpenShift Commons Briefing
Channel: OpenShift
Date: 2020-05-20

OpenShift Commons Briefing 2020-05-19 
Host: Diane Mueller (Red Hat)
Guest Speaker: Marc Boorshtein (Tremolo Security)

Securely Provision Your Pipeline on OCP Making Dev, Sec and Ops All Happy 

Your CI/CD pipelines are a crucial component to your platform.  Production OCP deployments need to take into account how to build out pipelines for applications in an automated way that respects all of the users in your environment.  The Devs want systems that stay out of their way, Sec wants to be able to audit the environment and Ops doesn’t want to get paged.  Automating the provisioning means integrating source control, multiple OCP clusters across environments, security scanning, and IT process to build an automated platform.

Tremolo Security’s CTO, Marc Boorshtein, will walk through a proof of concept that was built for a customer to automate the creation of a multi-environment secured pipeline using GitLab for source control, multiple OCP environments for different stages of the application’s lifecycle, Sonarqube for scanning, and OpenUnison to tie them all together via SSO and automated workflows.  We’ll cover the initial provisioning of the pipeline, environments across multiple clusters, and promoting containers across environments without using the ocp command or ever logging into a terminal.



@mlbiam / @tremolosecurity