Book Image

Strategizing Continuous Delivery in the Cloud

By : Garima Bajpai, Thomas Schuetz
Book Image

Strategizing Continuous Delivery in the Cloud

By: Garima Bajpai, Thomas Schuetz

Overview of this book

Many organizations are embracing cloud technology to remain competitive, but implementing and adopting development processes while modernizing a cloud-based ecosystem can be challenging. Strategizing Continuous Delivery in Cloud helps you modernize continuous delivery and achieve infrastructure-application convergence in the cloud. You’ll learn the differences between cloud-based and traditional delivery approaches and develop a tailored strategy. You’ll discover how to secure your cloud delivery environment, ensure software security, run different test types, and test in the pre-production and production stages. You’ll also get to grips with the prerequisites for onboarding cloud-based continuous delivery for organizational and technical aspects. Then, you’ll explore key aspects of readiness to overcome core challenges in your cloud journey, including GitOps, progressive delivery controllers, feature flagging, differences between cloud-based and traditional tools, and implementing cloud chaos engineering. By the end of this book, you’ll be well-equipped to select the right cloud environment and technologies for CD and be able to explore techniques for implementing CD in the cloud.
Table of Contents (18 chapters)
1
Part 1: Foundation and Preparation for Continuous Delivery in the Cloud
6
Part 2: Implementing Continuous Delivery
11
Part 3: Best Practices and the Way Ahead

Vulnerability management

This topic was discussed in detail in Chapter 7. Vulnerability management is one of the essential parts of open source projects. There are a number of best practices available that contributors and projects can consider to strengthen the security posture of an open source project. It is important the projects consider the adoption of these best practices and continuously identify, prioritize, and address vulnerabilities.

There are also a number of open source projects for vulnerability management, typically taking an example from the CD ecosystem:

  • Open Policy Agent is a graduated CNCF project, which provides policy-based control for cloud-native environments
  • Sigstore enables developers to sign software artifacts and much more
  • Ortelius is an ppen source supply chain catalog that unleashes DevOps and security intelligence siloed across containers and pipelines

There are focused efforts to enhance open source security. The Open Source...