Category: Operations Development

Supply-chain monitoring

Software used in this article is locked to specific versions to increase the chance of it working as specified. Make sure you update all of it if you want to actually start using it after experimenting. I’ve had this article lying around for a bit before publishing, so versions are pretty outdated even at time of publish. Automate building inventory specifications for your applications and monitor all those dependencies for known vulnerabilities and license issues.

security

Security automation

A typical web application involves a lot of code in many layers and manually keeping it secure requires in depth knowledge in all of those layers and lots of maintenance. To increase your chances of keeping it secure you could utilize automation. There are a lot of tools available for helping with security automation and it’s a pretty big task to sift through them to find good ones. There are lots and lots of companies selling security tools who wants you on their hook.

security

Running dotnet containers in kubernetes

There are some caveats to running dotnet in containers. You might expect that the docker images you pulled from Microsoft’s container registry were checked for vulnerabilities and prepared to run in a containerized environment. If you’ve gone with defaults and don’t have strict rules on your cluster you’ll have an image configured to run alone on a server (which is not a usual setup in a containerized environment) that is also full of known vulnerabilities even when fresh.

dotnet, docker, security, performance

Getting a blog the hard way

The hard way is a path focused on learning, you should follow/replicate this if your aim is gaining knowledge. This post will serve as an overview, while going into a bit more details for sections where there’s no separate post planned. Expect a lot of deep dives searching, especially if you do it before the detailed posts are available. If you’re more interested in the end result, follow these steps instead:

terraform, kubernetes, baremetal