Fortify SCA uses multiple algorithms and an expansive knowledge base of secure coding rules to analyze an application’s source code for exploitable vulnerabilities.

5 advantages of fortify SCA

• Protect software
• Detect risk
• Evolve app
• Thorough results
• Scalable

OpenShift is a cloud development Platform as a Service (PaaS) developed by Red Hat. It is an open source development platform, which enables the developers to develop and deploy their applications on cloud infrastructure.

Chef is a configuration management technology used to automate the infrastructure provisioning. It is developed on Ruby language.

10 advantages of chef

• Reduces software delivery time.
• Improve risk management.
• Increase service resiliency.
• Streamlined operations and workflow.
• Accelerate cloud adoption.
• Helps to manage both data and cloud environment.
• Flexible.
• Deliver all infrastructure continuously.
• Easy to use and understand.
• Stable.

How to install chef workstation?

1. Install Chef by using command wget https://packages.chef.io/stable/el/7/chefdk-0.11.2-1.el7.x86_64.rpm
2. Install Chef DK by using command rpm -ivh chefdk-0.11.2-1.el7.x86_64.rpm

Example

//content.txt

This is my first app.

//index.html

<h1> Welcome to my page <h1>

exeucte this file using chef command

It is an open source infrastructure as code software tool that allows to programmatically provision the physical resources an application requires to run.

Example

//provider code for github provider

provider “github” {
token = “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”
owner = “Jayesh”
}

//resource code

resource “github_repository” “example” {
name = “test”
description = “test repo”

visibility = “public”
}

5 terraform commands

• init :Used to initialize provider
• plan : Used to create a execution plan.
• apply: It executes the actions proposed in plan commands.
• show : Used to display the contents of repository
• destroy : Used to destroy the repository.

Kubernetes is an open source container orchestration engine for automating deployment, scaling, and management of containerized applications.

5 Reasons of using Kubernetes

• Flexible
• Reduce development and release time frames
• Cost friendly
• Increase availability and scalability of software
• Cloud migration paths

Kubernetes components

API Server

Provides an API that serves as the front end of a Kubernetes control plane. It is responsible for handling external and internal requests—determining whether a request is valid and then processing it.

etcd

A key-value database that contains data about your cluster state and configuration. Etcd is fault tolerant and distributed.

scheduler 

This component is responsible for scheduling pods on specific nodes according to automated workflows and user defined conditions, which can include resource requests, concerns like affinity and taints or tolerations, priority, persistent volumes , and more.

controller-manager 

The controller manager is responsible for several controllers that handle various automated activities at the cluster or pod level, including replication controller, namespace controller, service accounts controller, deployment, statefulset, and daemonset.

proxy 

All compute nodes contain kube-proxy, a network proxy that facilitates Kubernetes networking services. It handles all network communications outside and inside the cluster, forwarding traffic or replying on the packet filtering layer of the operating system.

Networking driver

Networking driver enables containers to communicate with hosts or other containers. It is often achieved by using the container networking interface (CNI), which is a joint initiative by Kubernetes, Apache Mesos, Cloud Foundry, Red Hat OpenShift, and others.

Docker is an open source containerization platform. It enables developers to package applications into containers—standardized executable components combining application source code with the operating system libraries and dependencies required to run that code in any environment.

What is container?

Containers are packages of software that contain all of the necessary elements to run in any environment. Containers virtualize the operating system and run anywhere, from a private data center to the public cloud or even on a console.

Top 5 advantages of docker

• Fast: Deploy in seconds.
• Flexible.
• Portable.
• Consistable and isolated environment.
• Collaboration, Modularity and Scaling.

Top 10 commands used

• Kill

• Pause

• Ps

• Create

• Info

• Inspect

• Run

• Exec

• Rm

• Images

Learnt various commands to create,start,stop,restart,kill,pause,unpause, remove a container in docker.

DevOps is a combination of practices and tools in software development that helps in increasing the speed of delivering applications and seek performance and stability at the same time.

Advantages of DevOps

• Speed up the application delivery.
• Enhances the performance.
• Increases the stability.
• Enhances the quality.
• Increases productivity.
• Cost saving.
• Agile.
• Simplifies the work.
• Continuous Integration
• Continuous Monitoring

Top 10 tools used in DevOps

• Jenkins
• Docker
• Puppet
• Kubernetes
• Chef
• Ansible
• Git
• Selenium
• Gradle
• Maven

How to implement DevOps?

• Access the current business state.
• Create DevOps culture.
• Define DevOps process and plans.
• Select favorable tools.
• Ensure security.
• Measure metrics.