Profile picture
, 3 tweets, 1 min read
My Authors
Read all threads
The Open Policy Agent project is super dope! I finally have a framework that helps me translate written security policies into executable code for every layer of the stack. openpolicyagent.org
The learning curve isn't as steep as you'd think. You gotta learn Rego, OPA's policy language, but once you do, you'll see an immediate payoff.

The best part is the tooling. I was able to learn Rego and experiment with policies from the command line.
I'm leveraging OPA as an embedded authorization framework with gRPC. I've created gRPC middleware that leverages OPA to authorize clients based on policies defined externally. openpolicyagent.org/docs/latest/ex…
Missing some Tweet in this thread? You can try to force a refresh.

Enjoying this thread?

Keep Current with Kelsey Hightower

Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @kelseyhightower see all

Profile picture
Kelsey Hightower
@kelseyhightower
Open source is not a numbers game. It's about sharing and collaborating; on your own terms.
Some people will only have enough bandwidth to try out your project and offer feedback. That's a valuable form of contribution.
Some people will fork your project because they have ideas that differ from your own. That's fair game, and if you really think about it, you've inspired someone, and it presents an opportunity for experimentation and learning.
Read 3 tweets
Profile picture
Kelsey Hightower
@kelseyhightower
There's a ton of effort attempting to "modernize" applications at the infrastructure layer, but without equal investment at the application layer, think frameworks and application servers, we're only solving half the problem.
Even with the best orchestration, logging, security, and debugging infrastructure, code has to be written to make the best use of it.
We are asking developers to implement all the best practices around security, performance, load shedding, and authorization, for every programming language.

Ideally we encapsulate it all and enable developers to do this:

import "do/the/right/thing"
Read 3 tweets
Profile picture
Kelsey Hightower
@kelseyhightower
The @crossplane_io project is a modern take on configuration management while leveraging the Kubernetes resource model to provide automation for applications and infrastructure. crossplane.io
There is a lot of overlap between Crossplane and Terraform, but the biggest difference seems to be the continuous reconciliation of resources by Crossplane, which leverages the Kubernetes Operator pattern. kubernetes.io/docs/concepts/…
If you attempt to compare Crossplane and Terraform be careful not to miss an important point:

Crossplane is a universal control plane on which any platform can be built and configured through Kubernetes style APIs.

Terraform can configure platforms built on top of Crossplane.
Read 3 tweets

Embed code for your website

×
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!