DevSecOps Notes

Development Feature Set -Full Java EE 6, 7 -Java Cloud Service -HTmL5, REST, WebSocket, SSE -Standard IDE support -Java SE 7 and Java SE 8 -windows, Linux, OSX -Spring -DevOps - Maven , Hudson/ Jenkins, Docker, Arquillian, Ant Cloud Scale Managment  -Cloud-scale managment support -Dynamic Clusters -REST managment APIs -Fusion Middleware Control -Enterprise Manager Cloud Control FMW Control + EM Cloud Control + RESTful Management -> Weblogic 12c  | Dynamic clusters WebLogic Editions and Feature Sets a) Standard -Full Java EE -Java SE 6,7,8 -Zip distro for dev -Oracle TopLink -Choice of IDEs -Maven -RIA support -Class Loader Analysis -Oracle ADF -Spring -Oracle Web Tier b) Enterprise -Standard Edition -High availability -Dynamic clusters -java SE Advanced -JMS clustering -WLS SDK for Oracle Database Appliance c) Suite -Enterprise Edition -Coherence EE -Active GridLink for RAC -Java SE Suite -iAS EE Understanging Weblogic Conc...

0. On Secrets Protecting secrets a) Audit - Verify and log the use of individual secrets to a central system b) Encrypt - Always encrypt secrets in transit with TLS and at rest c) Rotate - change a secret regulary or in case of suspected compromise d) Isolate - Separate where secrets are used from where secrets are managed 1. Vault Overview : -manages (generates, stores, revokes) static and dynamic secrets -provides data encryption service -auditing -plug gable storage and secret backend architecture -declarative authorization framework -full HTTP API -bunch of useful tools bound together with a unified access mechanism -single service/API to secure, manage, design requierments/policy, and audit 2. Installation wget  https://releases.hashicorp.com/vault/1.2.3/ <package_name> unzip -d /bin <package_name> vault  vault -autocomplete-install exec $SHELL a) Starting Vault Server "Dev" Mode -the "dev" server is a built-in, pr...

1) CI/CD Continuous Integration (CI) -This is software development practice in which members of a team integrate their work frequently, at least daily, leading to multiple integrations per day. Base code -> checkout -> changes <-> Local Tests changes -> base code Continuos Delivery (CD) -This is software development discipline where software is built in a manner that allows for deploying to customers at any time. Continuos Deployment -This extends Continuos Delivery by automating the deployment process so that code is automatically deployed to production after it passes automated testing. 2) Jenkins overview - jenkins is a self-contained, open source automation server which can be used to automate all sorts of tasks such as building, testing, and developing software -jenkins can be installed throuh native system packages, Docker, or even run standalone by any a machine with the Java Runtime Environment installed. 3) Installation of Jenkins I...

What problems does Bamboo solve -provides automated and reliable build and testing process, letting you focus on coding -builds and deploys projects which have different technoloies, platforms or target servers -optimixe the code integration cycle and make sure you never commit broken code back into the code repository -run unit tests and see the test results on the fly -helps you to leverage the of Elastic resources e.g. AWS EC2 instances. -deploys your apps to Google Play and/or Apple store Bamboo install on Windows Bamboo Architecture -Bamboo user connect via http:/bamboo:8085 to bamboo server -bamboo server is connected to  * build agent  * database MySQL, SQL Server, Oracle … - you can use internal (bamboo) or external db, do not have driver for mysql Why bamboo server and build agent should be hosted on separate machine Every server you have should be single responsibility Every build could affect responsiveness of bamboo se...