Skip to content

Lunch and learn lab - Policy as code and Chaos engineering

Notifications You must be signed in to change notification settings

dstecholution/lab-001

Repository files navigation

Lunch and learn Lab 001

Goals

Create a base lab environment in GCP for running Gremlin, Sysdig, OPA Gatekeeper for testing and learning Chaos Engineering.

Slidedeck

Google Slides

Launch in Google Cloud Shell

Open in cloud shell

Tooling

  • Snyk provides security scanning, secret scanning, policy as code tests, CVE scanning, Licence checks, Dependancy/Version Management, and code scanning
  • Sysdig is SEIM and HIDS
  • Gremlin is our Chaos Engineering agent for fuzzy testing
  • Disaster Recover is handled by treating the cluster as an ephemeral appliance and source of truth is the git repo and helm charts
  • Terraform Cloud is our GitOps workflow for managing deployments of IaC and Applications via Helm charts
  • GKE is our cloud of choice.

Variables

Some services would need to be setup before hand then one needs to pass these along as terraform varables

Name Description
TF_VAR_sysdig_accessKey Used by sysdig to identify & collector access
TF_VAR_gremlin_teamID Used by gremlin to identify the team(org.)
TF_VAR_gremlin_clusterID Generic name for your cluster; could match GCP project name
TF_VAR_gremlin_teamSecret Gremlin Access key

About

Lunch and learn lab - Policy as code and Chaos engineering

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published