I fell into the trap. I blindly followed all the "best practices" and now I can't deploy. Watch me explain how this happened in an Infrastructure as Code use case and why I use God Mode to bypass the very controls I put in place. No one's perfect, not me either.
Important - this video describes a very specific high trust scenario and should not be considered a best practice. It's here to teach you how to think for yourself.
Jump to:
00:00 intro
02:08 Bypass security by deploying locally
02:58 How to lock yourself out
05:46 Using elevated privileges
07:18 Merge anyway
08:00 Walking through pipeline run
11:19 Approvals and Checks
13:23 Closing, Trust Yourself
The public repo in this project
https://github.com/azure/devops-gover...