Book Image

DevSecOps in Practice with VMware Tanzu

By : Parth Pandit, Robert Hardt
Book Image

DevSecOps in Practice with VMware Tanzu

By: Parth Pandit, Robert Hardt

Overview of this book

As Kubernetes (or K8s) becomes more prolific, managing large clusters at scale in a multi-cloud environment becomes more challenging – especially from a developer productivity and operational efficiency point of view. DevSecOps in Practice with VMware Tanzu addresses these challenges by automating the delivery of containerized workloads and controlling multi-cloud Kubernetes operations using Tanzu tools. This comprehensive guide begins with an overview of the VMWare Tanzu platform and discusses its tools for building useful and secure applications using the App Accelerator, Build Service, Catalog service, and API portal. Next, you’ll delve into running those applications efficiently at scale with Tanzu Kubernetes Grid and Tanzu Application Platform. As you advance, you’ll find out how to manage these applications, and control, observe, and connect them using Tanzu Mission Control, Tanzu Observability, and Tanzu Service Mesh. Finally, you’ll explore the architecture, capabilities, features, installation, configuration, implementation, and benefits of these services with the help of examples. By the end of this VMware book, you’ll have gained a thorough understanding of the VMWare Tanzu platform and be able to efficiently articulate and solve real-world business problems.
Table of Contents (19 chapters)
1
Part 1 – Building Cloud-Native Applications on the Tanzu Platform
7
Part 2 – Running Cloud-Native Applications on Tanzu
11
Part 3 – Managing Modern Applications on the Tanzu Platform

Day-2 operations with App Accelerator

In software development, getting something deployed into production is often the easy part. Keeping that software up to date and patched with minimal user disruption is where most of your time will be spent. App Accelerator was designed with day 2 in mind.

As it turns out, the component versions in our OpenAPI application accelerator have already gone out of date. Let’s quickly update and patch our accelerator.

First, let’s find our local copy of the openapi-accelerator project. Open build.gradle in your favorite editor. Notice the org.springframework.boot and org.openapi.generator dependencies are not the most recent and could therefore contain bugs or even known vulnerabilities. Notice that org.springframework.boot is at 2.5.6 and org.openapi.generator is at 5.2.1:

Figure 2.12 – Our build.gradle file with out-of-date versions of Spring Boot and OpenAPI Generator

Figure 2.12 – Our build.gradle file with out-of-date versions of Spring Boot and OpenAPI Generator

First, let’s visit...