Analyzer (SCA) uses multiple algorithms and an expansive knowledge base of secure coding rules to analyze an application’s source code for exploitable vulnerabilities. This technique analyzes every feasible path that execution and data can follow to identify and remediate vulnerabilities.

1.flexible

2.security

3.fix easier

4.Reduce development time and cost

5.fast and accurate scanning

Chef in DevOps is an automation tool. It is a Configuration Management (CM) tool that lets you automate processes and tasks across numerous servers and other devices of an organization in simple steps. Such a framework is highly beneficial to a company.

10 Advantage of Chef?

• Automation of cloud server
• Managing servers with ease
• Deployment of servers at faster pace.
• Best consistency – all the machines have same cloud running.
• Scalability
• Speed and accuracy
• Integrating cloud technology
• Effective risk management
• Speed s/w delivery
• Best rectification factor

How to install Chef Workstation?

• Go the Chef workstation page
• signup into the page
• Click on the package for window/ Linux or any other version we want.
• After clicking on download, we will get a link.
• wget https://packages.chef.io/files/stable/chef-workstation/22.5.923/el/7/chef-workstation-22.5.923-1.el7.x86_64.rpm
• rpm -ivh chef-workstation-22.5.923-1.el7.x86_64.rpm
• Copy this to the putty, download the packages of the chef.
• Workstation will be installed automatically
• use chef version command to find the version that is installed in your Linux.
• use which chef command to find the version.

One Example Program of Recipe?

vi first.rb

file ‘/opt/first.txt’

file ‘/opt/first.txt’ do
action :delete
end

file ‘/opt/content.txt’ do
content “This is my first program of chef”
mode 755
owner “root”
end

chef-apply first.rb

Terraform is a tool which is used to write a code for infrastructure and it allows to programmatically provision the physical resources an application requires to run. This helps to manages the application infrastructure through programming. It is used to automate the provisioning of your cloud resources. Terraform is an open-source, cloud-agnostic provisioning tool developed by HashiCorp and written in GO language.

One example terraform program.

resources.tf

resource “github_repository” “Sample” {
name = “Proj1”
description = “My first project”

visibility = “public”
}

terraform.tf

provider github

{

token=”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”

owner=”Organization”

}

List of 5 terraform commands and its use

• terraform init – It is used to initialize the directory which consists of configuration files.
• terraform plan – It checks the configuration to determine the desired state of all the resources it declares.
• terraform apply – It carries out the planned changes to resource using the same type of infrastructure providers API.
• terraform destroy – It destroys all the resources being managed by current directory.
• terraform show – It provides an output of plan file in understandable manner.

Kubernetes manages the containers. It is a open open-source container orchestration system for managing, automating and software deployment. It manages multiple docker hosts which contains containers. It is written in Go Programming language. It was developed by google and donated to CNCF.

5 reasons of using kubernetes

• Scalability
• Elasticity
• Multi-cloud capability
• Portability and Flexibility
• Reduces cost

Each kubernetes Components & write 2-3 mins about each one of them.

Etcd : Etcd is a distributed key-value store of Kubernetes. It stores and replicates the Kubernetes cluster state. To run Etcd, you first need to have a Kubernetes cluster and the command-line tool configured to communicate. And also used for storing all data of kubernetes cluster.

API Server : All the services like managing resources and functionalities handled in API server.

Scheduler : The scheduler’s responsibility is to assign pods to nodes within your cluster. The scheduler will use information such as compute requests and limits defined within your workload. For assigning container to worker also this Scheduler component helpful

Controller Manager : The Kubernetes controller manager is a collection of controllers bundled within a single binary and run in a single process.

–> Node controller: Responsible for identifying changes in nodes within the cluste

–>Replication controller: Responsible for maintaining replications of objects in the cluster

–>Endpoint controller: Responsible for provisioning of endpoints

Kubernetes proxy : For connecting networking services.

Network driver : Networking Driver

Docker is an open-source containerization technology that allows you to create, distribute, and execute software without relying on your local or remote infrastructure. It is a platform for creating and managing containers that are isolated from one another but can communicate via defined channels. The docker platform lets developers and programmers seamlessly throughout their workspace. Whether you are an in-house or remote team with members around the world, using docker to ship and run your containers is a low-cost way of building software more efficiently.

What is Container?

A container is a standard unit of software that packages up code and all its dependencies so the application runs quickly and reliably from one computing environment to another. A Docker container image is a lightweight, standalone, executable package of software that includes everything needed to run an applications like code, runtime, system tools, system libraries and settings. Container images become containers at runtime and in the case of Docker containers, images become containers when they run on Docker Engine.

What are top 5 advantage of Docker?

• Faster time to market
• Developer Productivity
• Deployment velocity
• IT infrastructure reduction
• Faster issue to resolution
• Portability

What are top 10 commands you used today and one line explanations.

Docker ps – List all the running containers

Docker start container – to start the container

Docker rm container – removes the container

Docker pause container – pauses the container that is currently running

Docker unpause container – unpauses the container to running stage

Docker info – displays the number of containers and images

Docker exec -it container bash – to enter into a container

Docker inspect container – detailed information on constructs controlled by docker

Docker run -it ubuntu – to run ubuntu in docker

10 Advantages of DevOps :

1. Continuous Integration

2. Faster Deployment

3. Continuous delivery of a product

4. Cost Reduction

5. Reduces bugs

6. Quality of product gets improved

7. Fast and reliable problem solving techniques

8. Increases productivity in the organization

9. Improved Software perfomance

10. Improves communication and collaboration between the teams

Top 10 tools used in DevOps :

1. Splunk
2. Git
3. Jenkins
4. Docker
5. Kubernetes
6. Selenium
7. Azure
8. Puppet
9. Ansible
10. Jira

How to implement DevOps :

1.Intoduce DevOps Intiative

2. Develop DevOps strategy

3. Use containerizations

4. Integrate infrastructure with CI/CD tools

5. Test Automation and Alignment with testing and development team

6. Continuous monitoring on the product