Best Of 2024: Policy-As-Code Will Rule Your CD Pipelines
DevOps.com, Tuesday, December 31st, 2024
Fear of losing control or being non-compliant has stopped too many DevOps transformations. In most organizations, including all regulated ones, there is a degree of governance required to manage production releases.
Policies around releases could include necessary security checks, quality bars, deployment windows or approvals. Compliance with architectural policies and cost impacts may also be relevant for pipelines governing infrastructure changes.
Ensuring these policies are followed can be challenging. As recently as a few years ago, when monthly or quarterly release cycles were the norm, policies could be enforced manually. A release manager would gather evidence of compliance, and an approval group would review the evidence. Only with sufficient compliance would the application be cleared for release.