General terminology of Software development Software Composition Analysis(SCA) Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Runtime Application Self-Protection (RASP) information security (InfoSec) Integrated Development Environment (IDE) Common Vulnerabilities and Exposures …

read more

The config for kind cluster settings the expose port didn’t change when cluster launched, need prepared 1kind: Cluster 2apiVersion: kind.x-k8s.io/v1alpha4 3networking: 4 # WARNING: It is strongly recommended that you keep this the default 5 # (127.0.0.1) for security reasons. However it is possible to change …

read more

Setup GO private package repositry ATHENS for project development Use Nexus proxy access public go package and private repository repo 1#The access workflow 2 3 |——> proxy-public internal 4internal.pack.com/goproxy—>nexus 5 |——>athens—>nginx—> private gitlab The pull package workflow - set …

read more

Sometimes enterprise is ineternal network not has internet network in production The offline installing and setup k8s environment and resources is necessery Prepare the terraform environment Download the Terraform binary terraform You can also download the HELM binary to operate the k8s cluster. 1wget …

read more

Sometimes we need to manage distributed task scheduling and secure clandestine transport, so introducing HashiStack is a good choice Prepare Ansible script and playbook I choice the following playbook roles for stacks,But I changed things to suit my own needs Consul: github url Nomad: github url Vault use both repo …

read more