GitOps Security Architecture with Zero Trust: Identity-Driven Control Planes for Cloud-Native Deployments

Uttama Reddy Sanepalli

International Journal of Scientific Research in Computer Science, Engineering and Information Technology, 2024, vol. 10, issue 2, 1198-1209

Abstract: The rapid adoption of GitOps has redefined continuous deployment in cloud-native environments, yet prevailing GitOps implementations often rely on implicit trust relationships that conflict with modern Zero Trust security principles. This paper introduces an identity-driven Zero Trust architecture for GitOps-managed Kubernetes deployments, where every deployment action is continuously authenticated, authorized, and validated through explicit identity and policy enforcement. By integrating federated identity, workload-level authentication, and policy-as-code into the GitOps control plane, the proposed approach transforms deployment pipelines into verifiable security enforcement points rather than privileged automation channels. The architecture is validated in a production-scale cloud environment and demonstrates measurable improvements in deployment integrity, policy compliance, and unauthorized access prevention, while preserving the operational efficiency that makes GitOps effective. This work establishes a practical foundation for embedding Zero Trust directly into cloud deployment architectures, advancing secure-by-design principles for modern financial and enterprise cloud platforms.

Keywords: Zero Trust; GitOps; Kubernetes; Identity Management; Cloud Security; Policy-as-Code (search for similar items in EconPapers)
Date: 2024
Note: Article URL: https://ijsrcseit.com/home/article/view/CSEIT24102255
References: Add references at CitEc
Citations:

Downloads: (external link)
https://ijsrcseit.com/home/article/view/CSEIT24102255 Article URL (text/html)
https://ijsrcseit.com/home/article/download/CSEIT24102255/CSEIT24102255 Full text (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:jbh:ijsrcs:v10:y2024:i2:id:1797

DOI: 10.32628/CSEIT24102255

Access Statistics for this article

More articles in International Journal of Scientific Research in Computer Science, Engineering and Information Technology from International Journal of Scientific Research in Computer Science, Engineering and Information Technology
Bibliographic data for series maintained by Pankaj Sharma ().