Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

How to deploy an app to AWS: App security

AWS security is an ongoing battle that you must address during every release, every change, and every CVE. When you’re first launching your production application, it’s impossible to check all the boxes; you simply don’t have the time. Until your application gets more adoption, you only have the time to do the bare essentials of security.

Using NGINX as a Queue for JSON Payloads

Request Metrics is a performance analytics tool. As such, we need to build a data ingestion pipeline that will consume performance data and process it. One common approach to ingest is to shove incoming data into a queue. We like simple things, and figuring out fancy distributed queues is anything but. So we're going to eschew best practices and use NGINX as our queue!

Why GOPROXY Matters and Which to Pick

Starting with Go 1.13, Go modules are the standard package manager in Golang, automatically enabled on installation along with a default GOPROXY. But with other GOPROXY options like JFrog GoCenter, as well as your own Go module packages you need to keep secure from public view, what kind of configuration should you choose? How can you keep your public and private Golang resources from becoming a tangled knot?

Patching Operating Systems While Working from Home

IT leaders need a well-defined strategy for managing patches and upgrades for software applications and technologies. Planned patch management rollouts help combat security vulnerabilities as unpatched systems are highly vulnerable to data breaches and attacks from hackers. During Covid-19, IT organizations have struggled to keep systems updated using remote teams, especially as software vendors have recently released a record number of patch fixes and upgrades.

Master Class - PCI Compliance and Vulnerability Management for Kubernetes - 2020-05-05

This is the Rancher Master Class with NeuVector that was held on May 5, 2020. In it NeuVector talks about the challenges with PCI-DSS compliance when working with Kubernetes and presents strategies for securing containers and content, both using OSS tools and with their paid solutions.

Kubernetes and the Enterprise Knowledge Graph

In today’s enterprises, we spend much of our time dealing with information, whether it’s data, knowledge or analytics. Just like the assembly line workers of last century, today’s knowledge workers deal with similar logistics of taking raw materials as an input and producing a finished product as an output. Only in this case, the raw material is all the unorganized and sometimes random information at our disposal, and the finished product is structured information.

HAProxyConf 2019 - Programmatic HAProxy Configuration Using the Data Plane API with Chad Lavoie

This presentation will provide an overview of the new Data Plane API, which you can use to configure your load balancer using HTTP REST commands. You will learn how to get started and how to build tools to work with it. You will also learn how to configure a frontend/backend and modify a configuration using the API.