C4: Container, Code, Cloud & Context
Designing intelligent systems, one layer at a time. ~ Nithin Mohan T K
After two decades of building and operating enterprise systems, I’ve watched the IT operations landscape transform dramatically. What started as siloed development and operations teams has evolved into a rich ecosystem of methodologies, each addressing specific organizational challenges. In this comprehensive guide, I’ll share my perspective on four dominant approaches: DevOps, DevSecOps, Site Reliability Engineering… Continue reading
In the fast-paced world of technology, ensuring the reliability of services is paramount for businesses to thrive. Site Reliability Engineering (SRE) has emerged as a discipline that combines software engineering and systems administration to create scalable and highly reliable software systems. In the Azure cloud environment, Azure Kubernetes Service (AKS) plays a pivotal role in… Continue reading
Introduction The rise of DevSecOps has transformed the way organizations develop, deploy, and secure their applications. By integrating security practices into the DevOps process, DevSecOps aims to ensure that applications are secure, compliant, and robust from the start. In this blog post, we will discuss the key metrics for measuring the success of your DevSecOps… Continue reading
Introduction In today’s fast-paced world, the need for rapid and secure software development has never been more crucial. As organizations strive to meet these demands, the DevSecOps approach has emerged as a powerful solution that integrates security practices into the DevOps process. By combining development, security, and operations, DevSecOps enables teams to create high-quality, secure… Continue reading
GitOps is a relatively new approach to software delivery that has been gaining popularity in recent years. It is a set of practices for managing and deploying infrastructure and applications using Git as the single source of truth. In this blog post, we will explore the concept of GitOps, its key benefits, and some examples… Continue reading
Docker has revolutionized the world of software development, packaging, and deployment. The platform has enabled developers to create portable and consistent environments for their applications, making it easier to move code from one environment to another. Docker has also improved collaboration among developers and operations teams, as it enables everyone to work in the same… Continue reading
Docker is a popular platform for developing, packaging, and deploying applications. In the previous blog, we provided an introduction to Docker and containers, including their benefits and architecture. In this article, we’ll dive deeper into Docker, exploring Dockerfiles, Docker commands, and OCI specifications. Dockerfiles Dockerfiles are text files that contain instructions for building Docker images.… Continue reading
This is a final series to conclude and summarize the key topics covered in previous 8 blogs: DevSecOps is an approach to software development that emphasizes integrating security into every stage of the software development lifecycle. Application security and immutable infrastructure are two key practices that can help organizations achieve this goal. Application Security Application… Continue reading
Continuing from our previous blog, let’s explore some more advanced topics related to DevSecOps implementation. Continuous Compliance Continuous compliance is a practice that involves integrating compliance requirements into the software development lifecycle. By doing so, organizations can ensure that their software complies with regulatory requirements and internal security policies. Continuous compliance includes the following activities:… Continue reading
Continuing from my previous blog, let’s explore some more advanced topics related to DevSecOps implementation. Automated Vulnerability Management Automated vulnerability management is a key practice in DevSecOps. It involves using automated tools to identify, prioritize, and remediate vulnerabilities in an organization’s systems and applications. Automated vulnerability management includes the following activities: Shift-Left Testing Shift-left testing… Continue reading