• Choosing to run SCA as a standalone process or integrating fortify SCA as part of the build tool
• It uses a multiple algorithms and an expansive knowledge base of security coding rules
• It secure by coding rules to analyze an application’s source code for exploitable vulnerabilities
• It technique analyzes every feasible path that execution
• The data can follow to identify and remediate vulnerabilities

OpenShift is a cloud based Kubernetes Platform that helps developers to build their applications. It offers automated installations and updates whenever new changes occurs, and life cycle management throughout the container stack – in the operating system, Kubernetes and cluster services, and applications – on any cloud.

Chef is a tool which accelerates the application delivery and DevOps collaboration. Chef helps us to solve the day to day problem by treating infrastructure as a code. Rather being tested manually changing everything, the machine setup will be described in detail in Chef recipe. It is an open source systems management and cloud infrastructure automation platform. Chef transforms infrastructure into code to automate server deployment and management.

10 Advantages of Chef:

-> Accelerating Software deployment

-> Accelerating its software delivery

-> Increase Service Flexibility

-> Cloud adoption

-> Integration

-> Capability to run as Infrastructure as code

-> Managing cloud as well as Data center

-> Resiliency workflow

-> Test driven based infrastructure

-> A streamlined IT operations

How to install Chef Workstation?

Visit the chef workstation downloads official page and select appropriate package for your version. Click on the download button. Follow the steps as displayed.

We copied the downloading file path and entered over centos7

$ wget "<link>"
$ rpm -ivh chef-workstation-22.5.923-1.el7.x86_64.rpm
$ which chef

Example program of Recipe:

Create vi file.rb
Put the code: 
file '/opt/first.txt'
file '/opt/first.txt' do
	action :delete
end
file '/opt/content.txt' do
	content "This is my first program of chef"
	mode 755
	owner "niharika"
end

Create another file vi web.rb
package 'name' do
  package_name               "httpd"
end

file 'index.html' do
  content                    "<h1> Welcome to DevOpsSchool Chef Class</h1>"
end

bash 'extract_module' do
  code <<-EOH
                cp index.html /var/www/html/
  EOH
end

service 'httpd' do
  service_name         "httpd"
  action               :start
end

Now, run chef-apply web.rb
-> chef generate cookbook webserver
-> vi webserver/recipes/default.rb
-> mkdir cookbooks
-> mv webserver/ cookbooks/
-> chef-client --local-mode --runlist 'recipe[webserver]'

It’s done

HashiCorp Terraform is an infrastructure as code tool that makes us to define both cloud and on-prem resources in human-readable configuration files, It helps us to version, reuse and share. Users defines provider data center infrastructure in declarative configuration language which is known as HashiCorp Configuration Language. It helps engineers to programmatically provision the physical resources an application which can be able to run.

An Example on Github handling by Terraform

resource “github_repository” “example” {

  name        = “example9999999”

  description = “My awesome codebase hey”

  visibility = “public”

}

provider “github” {

token = “xxxxxxx”

owner = “xxxxxxx”

}

Top 5 Commands:

-> terraform init – It initializes a working directory containing terraform configuration files

-> terraform plan – it evaluates a terraform configuration to determine the desired state of all the resources it declares. Which lets to preview the changes that terraform plans to make to your infrastructure.

-> terraform apply – executes the actions.

-> terraform show – is used to provide human readable output from state file.

-> terraform destroy – is a convenient way to destroy all remote objects managed by particular terraform configuration.

Kubernetes is an open source container orchestration. It manages various multiple docker hosts. It is developed in Go programming language. Kubernetes initially developed by Google later owned by CNCF (Cloud Native Computing Foundation). It is large rapidly growing ecosystem, Its services, support and tools were used throughout ease.

Reason to use Kubernetes:

1. Reduce the time and increases the release products within the dedicated time.
2. Optimizes the cost effectively
3. High software scalability and availability
4. Improved cloud migration paths
5. Flexibility in multi cloud environment

Components in Kubernetes:

A Kubernetes cluster consists of set of worker machines, Master machines. Where in as follows it contains set of components to follow the process.

• API Server:

Kubernetes is an API Server which provides all the functions on cluster using the API. It implements an interface, to readily communicate with it on different tools and libraries.

• ETCD:

It acts as a storage for the configuration of information which can also be used by each of the nodes in cluster. It will be accessible only by Kubernetes API Server it can have some sensitive information.

• Controller Manager:

The component is responsible for most of the collectors that can monitors the state of clusters and their performance over task. It works towards a shared state of cluster and then makes changes to get the current status of the server to the desired state.

• Scheduler:

Key role participated in Kubernetes master. It is a service in master responsible for distributing in the workload. And also responsible for scheduling the tasks and monitors them accordingly within pods.

And also we have few components:

Kubelet Service: This will be a small service to responsible for relaying information to and from the service. It interacts with etcd store to read all the configuration.

Kubernetes Proxy Service: This proxy service runs on each node and helps in making all the services available to the host.

Docker is a open source containerization platform, where it enables all the developers to package applications into containers. In a low level definition of Docker, it is an tool for handling and managing all the containers. It is based on the idea where one can package code with all the dependencies. Containers will be around for good amount of time. Docker reduces the usage for more infrastructure resources into the development.

Benefits of Docker:

• Great for Investment as well as saving cost
• Ease in the deployment
• Security
• Continuous Integration
• Speed

What is Container?

Containers are the sub group of docker, where it runs our application. It is fully independent application run time environment. Container is an docker image, and a form of operating system virtualization. A single container can be able to run anything from small microservices to a larger applications. One can create, start, stop, move, or delete a container.

Top 10 commands discussed in today’s session:

1. ls – shows all files in the current directory
2. docker ps – lists the running containers by default
3. docker images – Displays the set of images available in current directory
4. ping 172.12.0.2 – Ping the external IP for setting up the connection
5. docker pull httpd – Installation of the Apache 
6. docker image inspect – Display detailed information one or more images
7. docker run -itd ubuntu – for installation of ubuntu
8. docker exec -it <container-id> bash – To go inside the container id
9. apt-get install – Installs the required resources in ubuntu
10. docker version – checking the version of installed docker

What are the benefits of DevOps?

Speed

Time factor plays a key role at the end of the day

Improved Collaboration

Sprint cycle reduction

Faster delivery of products

Increase in Quality

Security

Rapid Integration

Reliability

Automation

Version control everything

On-Demand tools used for DevOps –

1. Version control tool : Git (Gitlab, GitHub, Bitbucket)
2. Build Tool : Maven
3. Continuous integration : Jenkins
4. Configuration Management tool : Chef
5. Configuration Management tool : Puppet
6. Container Platforms : Docker
7. Container Platforms : Kubernetes
8. Preferred cloud platform
9. Testing Tool : Selenium
10. IT Ticketing : ServiceNow

Implementation of DevOps:

1. Initiate with organization in introduction of DevOps Implementation
2. Develop the DevOps strategy
3. Select the resources  and use Containerization to ensure the software reliability 
4. Integrate the entire infrastructure with CI/CD tools
5. Test Automation and QA – Dev Alignment
6. Product Performance Monitoring