DevOps

Coding Continuous Delivery: CIOps vs. GitOps with Jenkins

Continuous delivery (CD) is an agile software development approach that has proven to be a suitable way to reliably and repeatably produce high-quality software in short cycles. The use of containers and the cloud, e.g., on platforms such as Kubernetes (K8s), offers many opportunities to make CD processes more robust and simpler. One such option is GitOps. This article provides some concrete examples to illustrate the differences between classic CD pipelines (CIOps) and GitOps processes.

21.04.2023

See Post

Blogpost

Automation assistants: GitOps tools in comparison

If you want to switch from classic CI/CD environments to GitOps, then you can choose from any of a large number of available tools. However, it is not always easy to tell which features they support and how suitable they are for your project at first glance. This article provides help in making a decision.

14.04.2023

See Post

Blogpost

Kubernetes least privilege implementation using the Google Cloud as an example

Everyone knows it: granting privileges is always a balance between security, usability and maintenance effort. If permissions are granted very generously, the effort is very low and there are rarely any hurdles to use; however, security is compromised. If permissions are granted sparingly, security is higher, but there are costly processes and a lot of administrative overhead.

07.04.2022

See Post

Blogpost

The advantages of DevOps for medium-sized companies

Is the hype around DevOps justified? Dr. Peer Faßnacht, Head of Customer Services at Cloudogu GmbH, says "yes" – if a few prerequisites are met. Read the interview with the magazine "IT Mittelstand" here.

19.05.2021

See Post

Blogpost

DevOps Basics (2/2): Phases and Processes

DevOps combines previously assigned tasks and roles at a company on the basis of agile working methods, automation and cross-functional cooperation in order to create a common basis for value creation. This post describes the phases and processes of this so-calles “DevOps life cycle“.

24.02.2021

See Post

Blogpost

DevOps Basics (1/2): Advantages & Best Practices

DevOps is not, as is often assumed, a tool or a programming language. Rather, to put it in a nutshell, it is a collection of procedures, practices, and methods to deliver new software features faster in order to create satisfied customers.

17.12.2020

See Post

Blogpost

Kubernetes AppOps Security Part 6: Pod Security Policies (2/2) - Exceptions and Troubleshooting

Pod Security Policies (PSP) allow to use cluster wide settings that are used for all new containers. In comparison to the Security Context, the usage of PSPs not as easy, but especially for large organizations with large clusters it can be beneficial to use them, because they reduce the necessity for manual configuration.

28.10.2020

See Post

Blogpost

Kubernetes AppOps Security Part 5: Pod Security Policies (1/2) – Good Practices

Pod Security Policies (PSP) allow to use cluster wide settings that are used for all new containers. In comparison to the Security Context, the usage of PSPs not as easy, but especially for large organizations with large clusters it can be beneficial to use them, because they reduce the necessity for manual configuration.

30.09.2020

See Post

Blogpost

Kubernetes AppOps Security Part 4: Security Context (2/2) – Background

A container is basically a normal Linux process that runs isolated from the rest of the system via certain kernel components. This makes containers lighter but more vulnerable than virtual machines (VMs). To reduce this vulnerability to attack, the container runtimes offer a variety of settings whose default values strike a compromise between usability and security.

19.05.2020

See Post

Blogpost

Kubernetes AppOps Security Part 3: Security Context (1/2) – Good Practices

The virtual construct of a “container” is a normal Linux process at its core that largely runs in isolation from the rest of the system using certain kernel components. This makes containers lighter but more vulnerable than virtual machines (VMs). To reduce this vulnerability to attack, the container runtimes offer a variety of settings whose default values strike a compromise between usability and security.

17.03.2020

See Post

Blogpost

Kubernetes AppOps Security Part 2: Using Network Policies (2/2) - Advanced Topics and Tricks

In a Kubernetes cluster, everything (nodes, pods, Kubelets, etc.) can communicate with each other by default. If an attacker succeeds in exploiting a security vulnerability in one of the applications, he can easily expand his attack to all underlying systems in the same cluster. You can restrict this vulnerability using the on-board network policy features found in Kubernetes.

21.01.2020

See Post

Blogpost

Kubernetes AppOps Security Part 1: Using Network Policies (1/2) – Basics and Good Practices

If you deploy applications on a managed Kubernetes cluster, operations is responsible for security, right? Not really! Even though Kubernetes abstracts from hardware, its API offers many possibilities for developers to improve security for the applications that are operated on it, by not just using the default settings. This post explains for which attack vectors network policies can offer protection and it will also show pragmatic good practices based on practical examples.

29.10.2019

See Post

All articles for topic "DevOps"

Coding Continuous Delivery: CIOps vs. GitOps with Jenkins

Automation assistants: GitOps tools in comparison

Kubernetes least privilege implementation using the Google Cloud as an example

The advantages of DevOps for medium-sized companies

DevOps Basics (2/2): Phases and Processes

DevOps Basics (1/2): Advantages & Best Practices

Kubernetes AppOps Security Part 6: Pod Security Policies (2/2) - Exceptions and Troubleshooting

Kubernetes AppOps Security Part 5: Pod Security Policies (1/2) – Good Practices

Kubernetes AppOps Security Part 4: Security Context (2/2) – Background

Kubernetes AppOps Security Part 3: Security Context (1/2) – Good Practices

Kubernetes AppOps Security Part 2: Using Network Policies (2/2) - Advanced Topics and Tricks

Kubernetes AppOps Security Part 1: Using Network Policies (1/2) – Basics and Good Practices