The Future of Workflow Automation Is Now- Hassle-Free ARM Template Deployment With GitHub Actions

May 13, 20200 likes120 views

This document discusses GitHub Actions and its integration with Azure. It presents a method called "the white duck way" for hassle-free deployment of ARM templates to Azure using GitHub Actions. The document also covers how to build custom GitHub Actions and publish them to the GitHub Actions Marketplace.

The Future of Workflow Automation Is Now
Hassle-Free ARM Template Deployment With GitHub Actions
May 2020

Nico Meisenzahl
• Senior Cloud & DevOps Consultant at white duck
• Microsoft MVP, GitLab Hero, Docker Community
Leader
• loves Kubernetes, DevOps and Cloud
© white duck GmbH 2020
Phone: +49 8031 230159 0
Email: nico.meisenzahl@whiteduck.de
Twitter: @nmeisenzahl
LinkedIn: https://www.linkedin.com/in/nicomeisenzahl
Blog: https://meisenzahl.org

Agenda
• GitHub Actions & Azure
• the “white duck way”
• build your own GitHub Action
© white duck GmbH 2020

GITHUB ACTIONS & AZURE
The future of workflow automation is now
© white duck GmbH 2020

Integrated CI/CD workflows
© white duck GmbH 2020

Event and schedule driven
• GitHub events
• Webhooks
• schedules
© white duck GmbH 2020

Community-powered
© white duck GmbH 2020

GitHub Actions & Azure
© white duck GmbH 2020

THE “WHITE DUCK WAY”
Hassle-free ARM template deployment with GitHub Actions
© white duck GmbH 2020

Demo
© white duck GmbH 2020
https://github.com/azuredevcollege/devops/tree/master/github-action-deploy-arm-template

BUILD YOUR OWN GITHUB ACTION
GitHub Action development
© white duck GmbH 2020

Build your own GitHub Action
• Container vs JavaScript
• private vs public
• action.yaml contains meta data
• details, branding
• input, output
• runtime details
• publish to marketplace with releases
• more details
• https://help.github.com/en/actions/building-actions
© white duck GmbH 2020

Questions?
Nico Meisenzahl (Senior Cloud & DevOps Consultant)
Phone: +49 8031 230159 0
Email: nico.meisenzahl@whiteduck.de
Twitter: @nmeisenzahl
LinkedIn: https://www.linkedin.com/in/nicomeisenzahl
Blog: https://meisenzahl.org
whiteduck on GitHub: https://github.com/whiteducksoftware
Demo: https://github.com/nmeisenzahl/arm-actions-sample
© white duck GmbH 2020

Containerized applications have become an essential part of our everyday life. Learn everything about Kubernetes and how you can run it in the Azure Cloud. In this talk, Nico will explain how Kubernetes work and how it can help to run Containers in production. You will learn everything about Azure Kubernetes Service, Azure Container Registry and Azure Container Instances. Get to know the basics as well as the best practices that you can implement straight away!

Docker Rosenheim Meetup: Policy & Governance for KubernetesNico Meisenzahl

DevOps Gathering - How Containerized Pipelines Can Boost Your CI/CDNico Meisenzahl

Learn how to eliminate any dependencies on your CI/CD build nodes and don’t bother yourself with multiple versions of your toolchain and any corresponding constraints. Walk away with knowledge and best practices that will help you to optimize your builds and deployments with containerized pipelines! Use containerized Gitlab CI/CD pipelines and Kaniko to move your build and deployment workloads into your Kubernetes cluster. Build your apps and infrastructure without any external dependencies and constraints. You are building a Go project, deploying an app to Kubernetes or building your infrastructure. It doesn’t matter. Anything is possible! Nico will also introduce you to Tekton - an open source project which helps you building a cloud native toolchain by moving your whole CI/CD into Kubernetes. Join Nico on a deep dive into the secrets of building hassle-free containerized build and deployment pipelines with Gitlab CI/CD, Kaniko and Tekton.

Global Azure Virtual: Container & Kubernetes on AzureNico Meisenzahl

Containerisierte Anwendungen sind zu einem festen Bestandteil unseres Alltags geworden. Erfahren Sie alles über Containern und wie Sie diese in der Azure Cloud betreiben können. In diesem Vortrag erklärt Nico, wie Container funktionieren und zeigt Ihnen welche Probleme diese in Ihrem Alltag lösen können. Im Anschluss erfahren Sie, wie Kubernetes Ihnen helfen kann, Container in Produktion zu betreiben. Lernen Sie die Grundlagen sowie Best-Practises kennen, die Sie direkt umsetzten können! Abschließend werden Sie die Möglichkeiten der Azure Container Services kennenlernen. Nico wird hierbei insbesondere auf Azure Kubernetes Service, Azure Container Registry und Azure Container Instances eingehen.

DevOpsCon London: How containerized Pipelines can boost your CI/CDNico Meisenzahl

Learn how to eliminate any dependencies on your CI/CD build nodes and don’t bother yourself with multiple versions of your toolchain and any corresponding constraints. Walk away with knowledge and best practices that will help you to optimize your builds and deployments with containerized pipelines Use containerized Gitlab CI/CD pipelines and Kaniko to move your build and deployment workloads into your Kubernetes cluster. Build your apps and infrastructure without any external dependencies and constraints. You are building a Go project, deploying an app to Kubernetes or building your infrastructure. It doesn’t matter. Anything is possible! Nico will also introduce you to Tekton – an open source project which helps you building a cloud native toolchain by moving your whole CI/CD into Kubernetes. Join Nico on a deep dive into the secrets of building hassle-free containerized build and deployment pipelines with Gitlab CI/CD, Kaniko and Tekton.

FestiveTechCalendar2021 - Have Yourself An Azure Container RegistryPhilip Welz

Cloud Native Day: Cloud-native Anwendungsentwicklung im Jahr 2021Nico Meisenzahl

In diesem Vortrag sprechen wir darüber, wie sich die Entwicklung und Bereitstellung von Cloud-nativen Anwendungen in der Zukunft verändern wird. Cloud-native Anwendungen, die oft auf Microservices und Kubernetes basieren, werden immer häufiger genutzt und sind inzwischen sehr verbreitet. Jedoch ist die Hürde noch immer recht hoch. Wir glauben, dass eine weitere Abstraktion notwendig ist, damit sich Entwickler und Administratoren auf ihre Arbeit konzentrieren können, anstatt sich mit zu vielen Implementierungsdetails zu beschäftigen. Aus diesem Grund möchten wir Ihnen die folgenden Open-Source-Projekte vorstellen: * Distributed Application Runtime (dapr) - Eine quellenoffene Laufzeitumgebung, die es Entwicklern leicht macht, robuste microservice-basierte Applikationen zu entwickeln. * Service Mesh Interface - Eine Standardschnittstelle für Service Meshes auf Kubernetes. Das Ziel ist es, einen gemeinsamen, portablen Satz von Service-Mesh-APIs bereitzustellen, den Entwickler und Administratoren providerunabhängig nutzen können. Verpassen Sie den Vortrag von Martin und Nico nicht und erhalten Sie nützliche Einblicke in die Zukunft der Entwicklung und des Betriebs Cloud-nativer Anwendungen.

Azure Rosenheim Meetup: Azure Service OperatorNico Meisenzahl

DevOpsCon Berlin: Helm vs Operators – Do I Need to Decide?Nico Meisenzahl

In this session, Nico will talk about Helm and Operators as well as the battle between them. If you ever ask yourself one of the following questions, this talk is the right one for you: "Do I have to decide?" "Do I need to learn both?" "What are the best tools for my use-case?" In short: There is no battle. Both tools have different scopes. Nico will talk about the pros and cons, and what the projects themselves focus on. Join his talk to learn more!

AzDevCom2021 - Bicep vs TerraformPhilip Welz

This document compares Bicep and Terraform for infrastructure as code on Azure. It provides an overview of infrastructure as code, describes Terraform and its key principles like idempotency. Bicep is introduced as the native language for Azure Resource Manager templates that uses a simpler syntax than JSON. The document concludes that both tools can work with Azure but Bicep is tailored specifically for it while Terraform supports multi-cloud infrastructure management.

Azure Zürich User Group: Azure Kubernetes Service – more than just a managed ...Nico Meisenzahl

You are already running Kubernetes-based workloads on Azure Kubernetes Service and want to get more out of it? This is your session! In this talk, Nico will show you all the nice features you get with AKS besides just Kubernetes. Learn all the details about the available add-ons, integrations, and toolsets to integrate and secure your Kubernetes-based applications. Furthermore, Nico will give a preview of potential new features from the AKS roadmap.

Virtual GitLab Meetup: How Containerized Pipelines and Kubernetes Can Boost Y...Nico Meisenzahl

Learn how to eliminate any dependencies on your CI/CD build nodes and don’t bother yourself with multiple versions of your toolchain and any corresponding constraints. Walk away with knowledge and best practices that will help you to optimize your builds and deployments with containerized pipelines! Use containerized GitLab CI/CD pipelines and Kaniko to move your build and deployment workloads into your Kubernetes cluster. Build your apps and infrastructure without any external dependencies and constraints. If you are building a Go project, deploying an app to Kubernetes or just building your infrastructure. It doesn’t matter, anything is possible! Join Nico on a deep dive into the secrets of building hassle-free containerized build and deployment pipelines with GitLab CI/CD, Kubernetes and Kaniko.

GitHub Actions 101Nico Meisenzahl

GitHub Actions 101 introduces GitHub Actions as an integrated CI/CD workflow tool for automating software development processes. GitHub Actions allows for event-driven automation of workflows using Actions, which are portable building blocks. It provides features like publishing artifacts, integration with services like Azure, and tools for creating, distributing, and using custom Actions. The document demonstrates GitHub Actions through examples and provides resources for learning more.

Azure Meetup Hamburg: Production-Ready Terraform Deployments on AzureNico Meisenzahl

Nico Meisenzahl presented on production-ready Terraform deployments on Azure. The presentation introduced Infrastructure as Code (IaC) and Terraform, discussing why IaC is needed and how Terraform works. It provided an overview of Terraform concepts like providers, modules, workflows, and authentication on Azure. The presentation concluded with a demo of using Terraform to provision Azure resources like a service principal and storage container.

Continuous Lifecycle: Hijack KubernetesNico Meisenzahl

Nico will show how to hijack a Kubernetes cluster based on common attack vectors. You'll also learn why it's important to implement zero-trust to prevent data leaks and malicious workloads from being executed on a hijacked cluster. Furthermore, he will show you how to protect your cluster from being taken over by sharing useful insights, configurations, and toolsets. This talk is not intended to be an in-depth security talk, but to provide you with best practices and also make you aware of certain attack vectors and how to prevent them.

GitLab Commit DevOps: How GitLab Can Save your Kubernetes environment from Be...Nico Meisenzahl

Cloud native environments are a double edged sword - used right, the benefits are immense. However, it also introduces multiple entry points for example security breaches. In this session, Nico will show how application vulnerabilities make it easy to hijack a Kubernetes cluster. He will also talk about why it's important to implement zero-trust to prevent data leaks and malicious workloads from being executed on a hijacked cluster. In addition, you will learn how GitLab can protect you from being hijacked. Nico will talk about how to create more secure applications by using Static Application Security Testing (SAST) as well as how to secure your Kubernetes cluster with Container Host Security, Container Network Security or a Web Application Firewall.

azdevcom - Hijack a Kubernetes ClusterNico Meisenzahl

GitLab Remote Meetup: Enhance Your Kubernetes CI/CD Pipelines with GitLab & ...Nico Meisenzahl

Join Nico to learn how to enhance your Kubernetes CI/CD pipelines with GitLab FOSS/CE features as well as Open Source projects. Learn how GitLab can help you to better integrate your CI/CD pipelines with Kubernetes. Nico will talk about newer GitLab FOSS/CE features like the Web Application Firewall for Kubernetes Ingress, Monitoring and Logging as well as Serverless with Knative. Besides this, you will also learn how Open Source projects like Kaniko and Kustomize can help you to streamline your pipelines. Walk away with knowledge and best practices that will help you to enhance your own Kubernetes CI/CD Pipelines with Gitlab and Open Source!

Enhance Your Kubernetes CI/CD Pipelines With GitLab & Open SourceNico Meisenzahl

Working within a heavily regulated environment brings a special set of challenges, including increased difficulty in application scaling. In this session you will learn how you can enhance your Kubernetes CI/CD pipelines with GitLab and other open source projects. We will demonstrate practices for deployments using newer GitLab features like the Web Application Firewall for Kubernetes Ingress, and managing serverless functions with Knative. The techniques covered in this session will give you new options to streamline your Kubernetes pipelines reliably and consistently.

Global Azure Bootcamp: Container, Docker & Kubernetes BasicsNico Meisenzahl

This document summarizes a presentation about containerization using Docker and Kubernetes. It introduces Docker as a tool for building and running containerized applications. Kubernetes is introduced as an open-source system for automating deployment, scaling, and management of containerized applications. The presentation demonstrates using kubectl and YAML files to interact with and define resources in a Kubernetes cluster, and discusses concepts like pods, deployments, services and ingress in Kubernetes.

GitLab Commit: Enhance your Compliance with Policy-Based CI/CDNico Meisenzahl

Whether you want to get started with Governance or improve your current process, this talk will show you how to improve your compliance by implementing policy-based CI/CD (Continuous Integration / Continuous Delivery) with GitLab CI and Open Policy Agent. Philippe and Nico will tell you all the details about Open Policy Agent and how you can easily integrate it into your existing CI/CD pipelines. Join our session to learn how to improve compliance, from gating your dependencies to controlling your infrastructure.

Die Evolution von Container Image BuildsNico Meisenzahl

Containerisierte Anwendungen sind zu einem wesentlichen Bestandteil unseres täglichen Lebens geworden. Wir bauen diese mehrmals täglich, sowohl innerhalb unserer CI-Pipelines als auch lokal zu Debugging- und Testzwecken. Vor einigen Jahren konnten wir hierzu nur auf "docker build" zurückgreifen. Inzwischen gibt es jedoch viele alternative Projekte, die verschiedene Funktionen und Vorteile bieten. Nico führt Sie in diesem Vortrag in die Evolution der Container-Builds ein. Sie erhalten Einblicke in Werkzeuge wie BuildKit, buildx, Kaniko, buildah, img und weitere. Neben den Unterschieden werden Sie auch die Vor- und Nachteile der einzelnen Tools kennenlernen. Nach diesem Vortrag wissen Sie alles, was Sie benötigen, um Ihre Container Builds auf die nächsten Level zu heben.

Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

Event sourcing your React-Redux applicationsMaurice De Beijer [MVP]

This document discusses event sourcing React-Redux applications. It introduces event sourcing and how events get stored in a database and used to update projections. It describes using a command service to handle actions and update events in the database. Events then get pushed to a projector service to update projections and a query service to serve data to the React frontend. It provides examples of drafting a permit event, projecting that event, connecting the Redux state to a React component, and how the permit reducers work.

Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

All Things Cloud Native Meetup: Azure Kubernetes Service BasicsNico Meisenzahl

Distributed Storage in the CloudAll Things Open

Presented by: Peter Zaitsev Presented at the All Things Open 2021 Raleigh, NC, USA Raleigh Convention Center Abstract: Cloud brought many innovations - one of them is inexpensive, scalable and sometimes secure Distributed Storage options. In this presentation we will talk about distributed storage Options modern clouds offers ranging from elastic block devices and object storage to sophisticated transactional data stores. We will discuss the benefits and new architecture options such distibuted storage systems enable as well as the challenges pitfals you need to be aware about.

Was ist ein Service Mesh und wie funktioniert es?Cloud Native Rosenheim Meetup

In diesem Meetup möchten wir über Service Meshes sprechen. Was ist ein Service Mesh genau und wie funktioniert es? Wir klären euch auf! Wir starten den Abend mit einem Beispiel-Anwendung an der wir euch zeigen wie man Retry-, Timeout-Management sowie Circuit Breaker als Code implementiert um eine widerstandsfähige und belastbare Microservice zu erhalten. Des Weiteren zeigen wir auch die Implementierung von mutual TLS mit der eine sichere Kommunikation gewährleistet ist. Im Anschluss schauen wir uns nach einer Einleitung zu den Grundlagen von Service Meshes an wie man mit Hilfe von Istio die oben beschriebenen Funktionen abstrahieren und vom Code in die Infrastruktur verlagern kann. Abschließen geben wir einen Ausblick auf weitere Funktionen von Istio wie A/B testing und Fault Injection.

GitLab Remote Meetup: Enhance Your Kubernetes CI/CD Pipelines with GitLab & O...Cloud Native Rosenheim Meetup

Nico Meisenzahl presented on enhancing Kubernetes CI/CD pipelines with GitLab and open source tools. The presentation covered moving pipeline workloads into Kubernetes clusters with GitLab Runners, building container images within clusters using Kaniko to avoid Docker dependencies, securing application ingress with GitLab Web Application Firewall, developing serverless applications with GitLab Serverless, and enabling easy operations through integrated monitoring, logging and tracing tools. Live demos of these techniques were provided.

Azure Service Operator - Provision Your Resources in a Cloud-Native WayNico Meisenzahl

In this talk, Nico will introduce you to the Azure Service Operator project. The Azure Service Operator allows you to manage your Azure resources with a cloud-native approach using a Kubernetes Controllers and Custom Resource Definitions (CRDs). We will show you how Azure Service Operator works and share how customers and partners use it to take their Azure infrastructure management to the next level. Get insights into how Azure Service Operator can help you to package your application with its infrastructure dependencies, how you can use a GitOps approach to manage your Azure infrastructure, or how Azure Service Operator allows you to create your own composable abstraction to build your own implementations and self-service solutions. Walk away and know everything you need to know to successfully provision your Azure resources with Azure Service Operator.

More Related Content

What's hot (20)

DevOpsCon Berlin: Helm vs Operators – Do I Need to Decide?Nico Meisenzahl

AzDevCom2021 - Bicep vs TerraformPhilip Welz

Azure Zürich User Group: Azure Kubernetes Service – more than just a managed ...Nico Meisenzahl

Virtual GitLab Meetup: How Containerized Pipelines and Kubernetes Can Boost Y...Nico Meisenzahl

Learn how to eliminate any dependencies on your CI/CD build nodes and don’t bother yourself with multiple versions of your toolchain and any corresponding constraints. Walk away with knowledge and best practices that will help you to optimize your builds and deployments with containerized pipelines! Use containerized GitLab CI/CD pipelines and Kaniko to move your build and deployment workloads into your Kubernetes cluster. Build your apps and infrastructure without any external dependencies and constraints. If you are building a Go project, deploying an app to Kubernetes or just building your infrastructure. It doesn’t matter, anything is possible! Join Nico on a deep dive into the secrets of building hassle-free containerized build and deployment pipelines with GitLab CI/CD, Kubernetes and Kaniko.

GitHub Actions 101Nico Meisenzahl

Azure Meetup Hamburg: Production-Ready Terraform Deployments on AzureNico Meisenzahl

Continuous Lifecycle: Hijack KubernetesNico Meisenzahl

GitLab Commit DevOps: How GitLab Can Save your Kubernetes environment from Be...Nico Meisenzahl

azdevcom - Hijack a Kubernetes ClusterNico Meisenzahl

GitLab Remote Meetup: Enhance Your Kubernetes CI/CD Pipelines with GitLab & ...Nico Meisenzahl

Enhance Your Kubernetes CI/CD Pipelines With GitLab & Open SourceNico Meisenzahl

Global Azure Bootcamp: Container, Docker & Kubernetes BasicsNico Meisenzahl

GitLab Commit: Enhance your Compliance with Policy-Based CI/CDNico Meisenzahl

Die Evolution von Container Image BuildsNico Meisenzahl

Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

Event sourcing your React-Redux applicationsMaurice De Beijer [MVP]

Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

All Things Cloud Native Meetup: Azure Kubernetes Service BasicsNico Meisenzahl

Distributed Storage in the CloudAll Things Open

Was ist ein Service Mesh und wie funktioniert es?Cloud Native Rosenheim Meetup

DevOpsCon Berlin: Helm vs Operators – Do I Need to Decide?Nico Meisenzahl

AzDevCom2021 - Bicep vs TerraformPhilip Welz

Azure Zürich User Group: Azure Kubernetes Service – more than just a managed ...Nico Meisenzahl

Virtual GitLab Meetup: How Containerized Pipelines and Kubernetes Can Boost Y...Nico Meisenzahl

GitHub Actions 101Nico Meisenzahl

Azure Meetup Hamburg: Production-Ready Terraform Deployments on AzureNico Meisenzahl

Continuous Lifecycle: Hijack KubernetesNico Meisenzahl

GitLab Commit DevOps: How GitLab Can Save your Kubernetes environment from Be...Nico Meisenzahl

azdevcom - Hijack a Kubernetes ClusterNico Meisenzahl

GitLab Remote Meetup: Enhance Your Kubernetes CI/CD Pipelines with GitLab & ...Nico Meisenzahl

Enhance Your Kubernetes CI/CD Pipelines With GitLab & Open SourceNico Meisenzahl

Global Azure Bootcamp: Container, Docker & Kubernetes BasicsNico Meisenzahl

GitLab Commit: Enhance your Compliance with Policy-Based CI/CDNico Meisenzahl

Die Evolution von Container Image BuildsNico Meisenzahl

Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

Event sourcing your React-Redux applicationsMaurice De Beijer [MVP]

Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

All Things Cloud Native Meetup: Azure Kubernetes Service BasicsNico Meisenzahl

Distributed Storage in the CloudAll Things Open

Was ist ein Service Mesh und wie funktioniert es?Cloud Native Rosenheim Meetup

Similar to The Future of Workflow Automation Is Now- Hassle-Free ARM Template Deployment With GitHub Actions (20)

GitLab Remote Meetup: Enhance Your Kubernetes CI/CD Pipelines with GitLab & O...Cloud Native Rosenheim Meetup

Azure Service Operator - Provision Your Resources in a Cloud-Native WayNico Meisenzahl

Cloud Study Jam - Kubernetes 101Nico Meisenzahl

Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications. It introduces basic concepts like pods, deployments, and services. The presentation provides an overview of Kubernetes, including that it was introduced by Google in 2014 and is now hosted by the Cloud Native Computing Foundation. It also demonstrates using kubectl and yaml files to interact with and describe Kubernetes resources.

Container Day Security: How to Prevent Your Kubernetes Cluster From Being HackedNico Meisenzahl

Nico will show how to prevent your Kubernetes cluster from being hijacked by introducing you to best practices as well as useful open-source projects based on real-world examples. You’ll learn everything you need to know to build and run secure Kubernetes clusters including: - basics like shift left and container image security - ensure supply chain security - implement Kubernetes policies - introduce Kubernetes network security - rely on Container Runtime Security - many more… Don't miss this session to learn everything you need to know to securely run your Kubernetes-based workloads.

How to Prevent Your Kubernetes Cluster From Being Hacked by Nico MeisenzahlContainerDay Security 2023

Session at ContainerDay Security 2023 on the 8th of March in Hamburg. Nico will show how to prevent your Kubernetes cluster from being hijacked by introducing you to best practices as well as useful open-source projects based on real-world examples. You’ll learn everything you need to know to build and run secure Kubernetes clusters including: - basics like shift left and container image security - ensure supply chain security - implement Kubernetes policies - introduce Kubernetes network security - rely on Container Runtime Security - many more… Don't miss this session to learn everything you need to know to securely run your Kubernetes-based workloads.

How to Prevent Your Kubernetes Cluster From Being Hacked by Nico MeisenzahlContainerDay Security 2023

GitLab London Meetup: How Containerized Pipelines and Kubernetes Can Boost Yo...Nico Meisenzahl

Learn how to eliminate any dependencies on your CI/CD build nodes and don’t bother yourself with multiple versions of your toolchain and any corresponding constraints. Walk away with knowledge and best practices that will help you to optimize your builds and deployments with containerized pipelines! Use containerized GitLab CI/CD pipelines and Kaniko to move your build and deployment workloads into your Kubernetes cluster. Build your apps and infrastructure without any external dependencies and constraints. If you are building a Go project, deploying an app to Kubernetes or just building your infrastructure. It doesn’t matter, anything is possible! Join Nico on a deep dive into the secrets of building hassle-free containerized build and deployment pipelines with GitLab CI/CD, Kubernetes and Kaniko.

Microsoft DevOps Forum 2021 – DevOps & SecurityNico Meisenzahl

This document discusses implementing DevSecOps practices for small teams and organizations. It begins by noting that while DevOps is widely adopted, DevSecOps practices are less well-known and implemented. It then outlines some common security issues seen at clients and provides demos of implementing quick security wins through the DevOps cycle like enabling code scanning and ensuring secure code, runtimes, and monitoring. The document advocates starting small with security and integrating practices throughout the development lifecycle.

Effiziente CI/CD-Pipelines – mit den richtigen Tools klappt dasNico Meisenzahl

Lernen Sie, wie Sie mit containerisierten Pipelines Abhängigkeiten in Ihren CI/CD-Umgebung eliminieren, um sich nicht mit verschiedenen Versionen Ihrer Toolchain und Abhängigkeiten herumschlagen zu müssen. Nutzen Sie die containerisierten Gitlab CI/CD-Pipelines und Kaniko, um Build- und Deployment-Workloads in Ihrem Kubernetes-Cluster zu verlagern. Stellen Sie Ihre Microservices und/oder Infrastruktur ohne externe Abhängigkeiten und Einschränkungen bereit. Nico wird Sie auch in Tekton einführen - ein Open-Source-Projekt, das Ihnen hilft, eine Cloud-native Toolchain aufzubauen, indem Sie Ihr gesamtes CI/CD (Workload sowie Konfiguration) in Kubernetes verlagern. Begleiten Sie Nico auf einem Deep Dive in die Geheimnisse von containerisierten Build und Deployment Pipelines mit Gitlab CI/CD, Kaniko und Tekton.

KCD Munich 2022: Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

The document summarizes a presentation on how to hijack a Kubernetes cluster in order to demonstrate common attack vectors and prevention best practices. The presentation includes demos of hijacking a cluster and discusses how secure application code, container images, network policies, and container runtime security can prevent hijacking. It encourages attendees to implement such security measures to harden their own Kubernetes clusters.

Containerized Build & Deployment PipelinesNico Meisenzahl

Containerized Workloads sind mittlerweile nicht mehr aus unserem Alltag wegzudenken. Warum also nicht auch Container und deren Vorteile als Grundlage unserer Build- und Deployment-Pipelines nutzen? Nico wird in seinem Talk über die Grundlagen und Vorteile von Containerized Pipelines sprechen sowie nützliche Best Practices vorstellen, die sich direkt umsetzen lassen. Darüber hinaus wird Nico die folgenden Themen anhand von Demos präsentieren und vertiefen: * Pipeline Workload auf Kubernetes mit Hilfe von Gitlab Runner * Docker Image Builds mit Kaniko * Ausblick auf Kubernetes-native Pipelines mit Tekton

AzDevCom 2022 - YAMLize your infrastructure with the Azure Service Operator a...Philip Welz

Join this talk to learn about Azure Service Operator v2. In the first part, we will introduce Azure technologies like Azure Service Operator v2, Azure Workload Identity, and GitOps for Azure Kubernetes Service. We will explain how they are linked together to provision Azure resources from Kubernetes. In the second part, we will then show step-by-step how to deploy an application to Kubernetes together with the needed Azure resources only using Git. So don't miss joining us!

KCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being HackedNico Meisenzahl

The document discusses how to prevent a Kubernetes cluster from being hacked. It recommends ensuring secure application and deployment code, building secure container images, implementing Kubernetes policies and network policies, relying on container runtime security, and scanning for vulnerabilities regularly. It provides examples of tools to implement many of these recommendations, such as Trivy for vulnerability scanning, OPA/Kyverno for policies, Cilium/Calico for network policies, and Falco/Tetragon for runtime security.

Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

How to Prevent Your Kubernetes Cluster From Being HackedNico Meisenzahl

Container Days: Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

GitHub for partnersLorenzo Barbieri

This document compares and contrasts Azure DevOps and GitHub for software development. It outlines that both can be used for cloud or on-premises projects and have different paid tiers. It also describes that partners can work with GitHub directly or through the Microsoft partner program. Key features of GitHub like issues, projects, discussions, codespaces, and actions are summarized. It emphasizes that Azure DevOps and GitHub can be used together for development.

Azure Saturday Hamburg: Containerize Your .NET Microservice - the Right Way!Nico Meisenzahl

Every time we start a new project or learn a new technology, we're looking for zero to hero guides to help us get started quickly and easily. In most cases, however, these guidelines are not intended to be production-ready and secure. Join Nico and dive into the secrets and best practices of how to create fast, secure and production-ready Dockerfiles for your .NET Microservice. Walk away and learn everything you need to take your container builds to the next level.

Policy & Governance für KubernetesNico Meisenzahl

This document discusses policy and governance for Kubernetes. It introduces Open Policy Agent (OPA) and OPA Gatekeeper, which provide a way to define and enforce policies for Kubernetes. OPA evaluates declarative policies written in Rego to make authorization decisions. OPA Gatekeeper is an implementation of OPA for Kubernetes that allows enforcing policies through admission control webhooks. Examples of policies include requiring specific labels, trusted container images, and unique ingress hosts. The presentation provides an overview of cloud governance needs, demonstrates how OPA and Gatekeeper work, and references examples and demos.

ContainerConf 2022: Hijack KubernetesNico Meisenzahl

This document discusses hijacking a Kubernetes cluster and provides best practices to prevent it. It begins with an introduction to the topic and an overview of what will be covered, including demos on how to hijack a cluster and how common practices can prevent it. The document then covers how to implement security through the development cycle, including ensuring secure code and container images, deployment configurations, policies, network segmentation, and runtime protections. It emphasizes applying security at all stages to make hijacking much harder.

GitLab Remote Meetup: Enhance Your Kubernetes CI/CD Pipelines with GitLab & O...Cloud Native Rosenheim Meetup

Azure Service Operator - Provision Your Resources in a Cloud-Native WayNico Meisenzahl

Cloud Study Jam - Kubernetes 101Nico Meisenzahl

Container Day Security: How to Prevent Your Kubernetes Cluster From Being HackedNico Meisenzahl

How to Prevent Your Kubernetes Cluster From Being Hacked by Nico MeisenzahlContainerDay Security 2023

GitLab London Meetup: How Containerized Pipelines and Kubernetes Can Boost Yo...Nico Meisenzahl

Microsoft DevOps Forum 2021 – DevOps & SecurityNico Meisenzahl

Effiziente CI/CD-Pipelines – mit den richtigen Tools klappt dasNico Meisenzahl

KCD Munich 2022: Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

Containerized Build & Deployment PipelinesNico Meisenzahl

AzDevCom 2022 - YAMLize your infrastructure with the Azure Service Operator a...Philip Welz

KCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being HackedNico Meisenzahl

Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

How to Prevent Your Kubernetes Cluster From Being HackedNico Meisenzahl

Container Days: Hijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl

GitHub for partnersLorenzo Barbieri

Azure Saturday Hamburg: Containerize Your .NET Microservice - the Right Way!Nico Meisenzahl

Policy & Governance für KubernetesNico Meisenzahl

ContainerConf 2022: Hijack KubernetesNico Meisenzahl

Recently uploaded (20)

Splunk Security Update | Public Sector Summit Germany 2025Splunk

SAP Modernization: Maximizing the Value of Your SAP S/4HANA Migration.pdfPrecisely

Technology Trends in 2025: AI and Big Data AnalyticsInData Labs

At InData Labs, we have been keeping an ear to the ground, looking out for AI-enabled digital transformation trends coming our way in 2025. Our report will provide a look into the technology landscape of the future, including: -Artificial Intelligence Market Overview -Strategies for AI Adoption in 2025 -Anticipated drivers of AI adoption and transformative technologies -Benefits of AI and Big data for your business -Tips on how to prepare your business for innovation -AI and data privacy: Strategies for securing data privacy in AI models, etc. Download your free copy nowand implement the key findings to improve your business.

Special Meetup Edition - TDX Bengaluru Meetup #52.pptxshyamraj55

Drupalcamp Finland – Measuring Front-end Energy ConsumptionExove

DevOpsDays Atlanta 2025 - Building 10x Development Organizations.pptxJustin Reock

Building 10x Organizations with Modern Productivity Metrics 10x developers may be a myth, but 10x organizations are very real, as proven by the influential study performed in the 1980s, ‘The Coding War Games.’ Right now, here in early 2025, we seem to be experiencing YAPP (Yet Another Productivity Philosophy), and that philosophy is converging on developer experience. It seems that with every new method we invent for the delivery of products, whether physical or virtual, we reinvent productivity philosophies to go alongside them. But which of these approaches actually work? DORA? SPACE? DevEx? What should we invest in and create urgency behind today, so that we don’t find ourselves having the same discussion again in a decade?

Transcript: #StandardsGoals for 2025: Standards & certification roundup - Tec...BookNet Canada

Book industry standards are evolving rapidly. In the first part of this session, we’ll share an overview of key developments from 2024 and the early months of 2025. Then, BookNet’s resident standards expert, Tom Richardson, and CEO, Lauren Stewart, have a forward-looking conversation about what’s next. Link to recording, presentation slides, and accompanying resource: https://bnctechforum.ca/sessions/standardsgoals-for-2025-standards-certification-roundup/ Presented by BookNet Canada on May 6, 2025 with support from the Department of Canadian Heritage.

AI Changes Everything – Talk at Cardiff Metropolitan University, 29th April 2...Alan Dix

Talk at the final event of Data Fusion Dynamics: A Collaborative UK-Saudi Initiative in Cybersecurity and Artificial Intelligence funded by the British Council UK-Saudi Challenge Fund 2024, Cardiff Metropolitan University, 29th April 2025 https://alandix.com/academic/talks/CMet2025-AI-Changes-Everything/ Is AI just another technology, or does it fundamentally change the way we live and think? Every technology has a direct impact with micro-ethical consequences, some good, some bad. However more profound are the ways in which some technologies reshape the very fabric of society with macro-ethical impacts. The invention of the stirrup revolutionised mounted combat, but as a side effect gave rise to the feudal system, which still shapes politics today. The internal combustion engine offers personal freedom and creates pollution, but has also transformed the nature of urban planning and international trade. When we look at AI the micro-ethical issues, such as bias, are most obvious, but the macro-ethical challenges may be greater. At a micro-ethical level AI has the potential to deepen social, ethnic and gender bias, issues I have warned about since the early 1990s! It is also being used increasingly on the battlefield. However, it also offers amazing opportunities in health and educations, as the recent Nobel prizes for the developers of AlphaFold illustrate. More radically, the need to encode ethics acts as a mirror to surface essential ethical problems and conflicts. At the macro-ethical level, by the early 2000s digital technology had already begun to undermine sovereignty (e.g. gambling), market economics (through network effects and emergent monopolies), and the very meaning of money. Modern AI is the child of big data, big computation and ultimately big business, intensifying the inherent tendency of digital technology to concentrate power. AI is already unravelling the fundamentals of the social, political and economic world around us, but this is a world that needs radical reimagining to overcome the global environmental and human challenges that confront us. Our challenge is whether to let the threads fall as they may, or to use them to weave a better future.

Manifest Pre-Seed Update | A Humanoid OEM Deeptech In Francechb3

Semantic Cultivators : The Critical Future Role to Enable AIartmondano

Procurement Insights Cost To Value Guide.pptxJon Hansen

Complete Guide to Advanced Logistics Management Software in Riyadh.pdfSoftware Company

Explore the benefits and features of advanced logistics management software for businesses in Riyadh. This guide delves into the latest technologies, from real-time tracking and route optimization to warehouse management and inventory control, helping businesses streamline their logistics operations and reduce costs. Learn how implementing the right software solution can enhance efficiency, improve customer satisfaction, and provide a competitive edge in the growing logistics sector of Riyadh.

The Evolution of Meme Coins A New Era for Digital Currency ppt.pdfAbi john

Role of Data Annotation Services in AI-Powered ManufacturingAndrew Leo

Quantum Computing Quick Research Guide by Arthur MorganArthur Morgan

This is a Quick Research Guide (QRG). QRGs include the following: - A brief, high-level overview of the QRG topic. - A milestone timeline for the QRG topic. - Links to various free online resource materials to provide a deeper dive into the QRG topic. - Conclusion and a recommendation for at least two books available in the SJPL system on the QRG topic. QRGs planned for the series: - Artificial Intelligence QRG - Quantum Computing QRG - Big Data Analytics QRG - Spacecraft Guidance, Navigation & Control QRG (coming 2026) - UK Home Computing & The Birth of ARM QRG (coming 2027) Any questions or comments? - Please contact Arthur Morgan at [email protected]. 100% human made.

#StandardsGoals for 2025: Standards & certification roundup - Tech Forum 2025BookNet Canada

Book industry standards are evolving rapidly. In the first part of this session, we’ll share an overview of key developments from 2024 and the early months of 2025. Then, BookNet’s resident standards expert, Tom Richardson, and CEO, Lauren Stewart, have a forward-looking conversation about what’s next. Link to recording, transcript, and accompanying resource: https://bnctechforum.ca/sessions/standardsgoals-for-2025-standards-certification-roundup/ Presented by BookNet Canada on May 6, 2025 with support from the Department of Canadian Heritage.

Generative Artificial Intelligence (GenAI) in BusinessDr. Tathagat Varma

Into The Box Conference Keynote Day 1 (ITB2025)Ortus Solutions, Corp

Rusty Waters: Elevating Lakehouses Beyond Sparkcarlyakerly1

Spark is a powerhouse for large datasets, but when it comes to smaller data workloads, its overhead can sometimes slow things down. What if you could achieve high performance and efficiency without the need for Spark? At S&P Global Commodity Insights, having a complete view of global energy and commodities markets enables customers to make data-driven decisions with confidence and create long-term, sustainable value. 🌍 Explore delta-rs + CDC and how these open-source innovations power lightweight, high-performance data applications beyond Spark! 🚀

Mobile App Development Company in Saudi ArabiaSteve Jonas

EmizenTech is a globally recognized software development company, proudly serving businesses since 2013. With over 11+ years of industry experience and a team of 200+ skilled professionals, we have successfully delivered 1200+ projects across various sectors. As a leading Mobile App Development Company In Saudi Arabia we offer end-to-end solutions for iOS, Android, and cross-platform applications. Our apps are known for their user-friendly interfaces, scalability, high performance, and strong security features. We tailor each mobile application to meet the unique needs of different industries, ensuring a seamless user experience. EmizenTech is committed to turning your vision into a powerful digital product that drives growth, innovation, and long-term success in the competitive mobile landscape of Saudi Arabia.