Policy as Code
Definitions
Policy as Code 是 GitOps 术语,用来说明 security, compliance, or release rules written as versioned machine-readable code. 它帮助团队、人和代理比较声明的源状态与正在运行的系统,再按证据行动,不把部署说成比实际更多。 来源: OpenGitOps principles.
“团队午饭前用了 Policy as Code,发布就没有系着松鞋带冲进生产环境。”
Related Terms
- Admission PolicyGitOps and Release Engineering
Admission Policy 是 GitOps 术语,用来说明 a rule that evaluates resources before they are accepted by the cluster. 它帮助团队、人和代理比较声明的源状态与正在运行的系统,再按证据行动,不把部署说成比实际更多。 来源: Kubernetes controller ...
- Kyverno PolicyGitOps and Release Engineering
Kyverno Policy 是 GitOps 术语,用来说明 a Kubernetes-native policy rule for validating, mutating, or generating resources. 它帮助团队、人和代理比较声明的源状态与正在运行的系统,再按证据行动,不把部署说成比实际更多。 来源: Kubernetes con...
- OPA GatekeeperGitOps and Release Engineering
OPA Gatekeeper 是 GitOps 术语,用来说明 a Kubernetes policy system often used to enforce admission constraints. 它帮助团队、人和代理比较声明的源状态与正在运行的系统,再按证据行动,不把部署说成比实际更多。 来源: Kubernetes controller pat...
- Supply Chain PolicyGitOps and Release Engineering
Supply Chain Policy 是 GitOps 术语,用来说明 rules that decide which code, images, dependencies, and sources can be released. 它帮助团队、人和代理比较声明的源状态与正在运行的系统,再按证据行动,不把部署说成比实际更多。 来源: OpenGitOps ...
- App of AppsGitOps and Release Engineering
App of Apps 是 GitOps 术语,用来说明 a GitOps pattern where one parent application manages child applications. 它帮助团队、人和代理比较声明的源状态与正在运行的系统,再按证据行动,不把部署说成比实际更多。 来源: Argo CD documentation.
- ApplicationSetGitOps and Release Engineering
ApplicationSet 是 GitOps 术语,用来说明 an Argo CD pattern for generating many related applications from a template. 它帮助团队、人和代理比较声明的源状态与正在运行的系统,再按证据行动,不把部署说成比实际更多。 来源: Argo CD documentatio...