DevOps Tools for Java Developers - Helion

ebook

Autor: Stephen Chin, Melissa McKay, Ixchel Ruiz
ISBN: 9781492083979
stron: 344, Format: ebook
Data wydania: 2022-04-15
Księgarnia: Helion

Cena książki: 186,15 zł (poprzednio: 216,45 zł)
Oszczędzasz: 14% (-30,30 zł)

Osoby, które kupiły tę książkę, wybierały także »

With the rise of DevOps, low-cost cloud computing, and container technologies, the way Java developers approach development today has changed dramatically. This practical guide helps you take advantage of microservices, serverless, and cloud native technologies using the latest DevOps techniques to simplify your build process and create hyperproductive teams.

Stephen Chin, Melissa McKay, Ixchel Ruiz, and Baruch Sadogursky from JFrog help you evaluate an array of options. The list includes source control with Git, build declaration with Maven and Gradle, CI/CD with CircleCI, package management with Artifactory, containerization with Docker and Kubernetes, and much more. Whether you're building applications with Jakarta EE, Spring Boot, Dropwizard, MicroProfile, Micronaut, or Quarkus, this comprehensive guide has you covered.

Explore software lifecycle best practices
Use DevSecOps methodologies to facilitate software development and delivery
Understand the business value of DevSecOps best practices
Manage and secure software dependencies
Develop and deploy applications using containers and cloud native technologies
Manage and administrate source control repositories and development processes
Use automation to set up and administer build pipelines
Identify common deployment patterns and antipatterns
Maintain and monitor software after deployment

Osoby które kupowały "DevOps Tools for Java Developers", wybierały także:

Windows Media Center. Domowe centrum rozrywki 66,67 zł, (8,00 zł -88%)
Ruby on Rails. Ćwiczenia 18,75 zł, (3,00 zł -84%)
DevOps w praktyce. Kurs video. Jenkins, Ansible, Terraform i Docker 190,00 zł, (39,90 zł -79%)
Przywództwo w świecie VUCA. Jak być skutecznym liderem w niepewnym środowisku 58,64 zł, (12,90 zł -78%)
Scrum. O zwinnym zarządzaniu projektami. Wydanie II rozszerzone 58,64 zł, (12,90 zł -78%)

Spis treści

DevOps Tools for Java Developers eBook -- spis treści

Foreword
Preface
- Conventions Used in This Book
- Using Code Examples
- OReilly Online Learning
- How to Contact Us
- Acknowledgments
1. DevOps for (or Possibly Against) Developers
- DevOps Is a Concept Invented by the Ops Side
  - Exhibit 1: The Phoenix Project
  - Exhibit 2: The DevOps Handbook
  - Google It
  - What Does It Do?
  - State of the Industry
  - What Constitutes Work?
- If Were Not About Deployment and Operations, Then Just What Is Our Job?
  - Just What Constitutes Done?
  - Rivalry?
- More Than Ever Before
  - Volume and Velocity
  - Done and Done
  - Float Like a Butterfly
  - Integrity, Authentication, and Availability
  - Fierce Urgency
- The Software Industry Has Fully Embraced DevOps
  - Making It Manifest
  - We All Got the Message
2. The System of Truth
- Three Generations of Source Code Management
- Choosing Your Source Control
- Making Your First Pull Request
- Git Tools
  - Git Command-Line Basics
  - Git Command-Line Tutorial
  - Git Clients
  - Git IDE Integration
- Git Collaboration Patterns
  - git-flow
  - GitHub Flow
  - GitLab Flow
  - OneFlow
  - Trunk-Based Development
- Summary
3. An Introduction to Containers
- Understanding the Problem
  - The History of Containers
  - Why Containers?
- Intro to Container Anatomy
  - Docker Architecture and the Container Runtime
  - Docker on Your Machine
  - Basic Tagging and Image Version Management
  - Image and Container Layers
    - Visualizing layers
    - Leveraging layer cache
- Best Image Build Practices and Container Gotchas
  - Respect the Docker Context and .dockerignore File
  - Use Trusted Base Images
  - Specify Package Versions and Keep Up with Updates
  - Keep Your Images Small
  - Beware of External Resources
  - Protect Your Secrets
  - Know Your Outputs
- Summary
4. Dissecting the Monolith
- Cloud Computing
- Microservices
  - Antipatterns
  - DevOps and Microservices
  - Microservice Frameworks
  - Spring Boot
  - Micronaut
  - Quarkus
  - Helidon
- Serverless
  - Setting Up
- Summary
5. Continuous Integration
- Adopt Continuous Integration
- Declaratively Script Your Build
  - Build with Apache Ant
  - Build with Apache Maven
  - Build with Gradle
- Continuously Build
- Automate Tests
- Monitor and Maintain Tests
- Summary
6. Package Management
- Why Build-It-and-Ship-It Is Not Enough
- Its All About Metadata
  - Key Attributes of Insightful Metadata
  - Metadata Considerations
  - Determining the Metadata
  - Capturing Metadata
  - Writing the Metadata
- Dependency Management Basics for Maven and Gradle
  - Dependency Management with Apache Maven
  - Dependency Management with Gradle
- Dependency Management Basics for Containers
- Artifact Publication
  - Publishing to Maven Local
  - Publishing to Maven Central
  - Publishing to Sonatype Nexus Repository
  - Publishing to JFrog Artifactory
- Summary
7. Securing Your Binaries
- Supply Chain Security Compromised
  - Security from the Vendor Perspective
  - Security from the Customer Perspective
  - The Full Impact Graph
- Securing Your DevOps Infrastructure
  - The Rise of DevSecOps
  - The Role of SREs in Security
- Static and Dynamic Security Analysis
  - Static Application Security Testing
    - Advantages of the SAST approach
    - Disadvantages of the SAST approach
  - Dynamic Application Security Testing
    - Advantages of DAST
    - Disadvantages of DAST
  - Comparing SAST and DAST
- Interactive Application Security Testing
- Runtime Application Self-Protection
- SAST, DAST, IAST, and RASP Summary
- The Common Vulnerability Scoring System
  - CVSS Basic Metrics
  - CVSS Temporal Metrics
  - CVSS Environmental Metrics
  - CVSS in Practice
- Scoping Security Analysis
  - Time to Market
  - Make or Buy
  - One-Time and Recurring Efforts
    - Compliance issues
    - Vulnerabilities
  - How Much Is Enough?
  - Compliance Versus Vulnerabilities
- Vulnerabilities Can Be Combined into Different Attack Vectors
  - Vulnerabilities: Timeline from Inception Through Production Fix
    - Creation of a vulnerability
    - Discovery of the vulnerability
    - Public availability of the vulnerability
    - Fixing the vulnerability in production
  - Test Coverage Is Your Safety Belt
- Quality Gate Methodology
  - Quality Gate Strategies
    - Quality gates as uniform quality guideline
    - Quality gates as a flexible quality strategy
  - Fit with Project Management Procedures
  - Implementing Security with the Quality Gate Method
    - Green: Quality gate has passed
    - Red: Failed the quality gate
  - Risk Management in Quality Gates
  - Practical Applications of Quality Management
- Shift Security Left
  - Not All Clean Code Is Secure Code
  - Effects on Scheduling
  - The Right Contact Person
  - Dealing with Technical Debt
  - Advanced Training on Secure Coding
  - Milestones for Quality
  - The Attackers Point of View
  - Methods of Evaluation
  - Be Aware of Responsibility
- Summary
8. Deploying for Developers
- Building and Pushing Container Images
  - Managing Container Images by Using Jib
  - Building Container Images with Eclipse JKube
- Deploying to Kubernetes
  - Local Setup for Deployment
  - Generate Kubernetes Manifests by Using Dekorate
  - Generate and Deploy Kubernetes Manifests with Eclipse JKube
  - Choose and Implement a Deployment Strategy
- Managing Workloads in Kubernetes
  - Setting Up Health Checks
  - Adjusting Resource Quotas
  - Working with Persistent Data Collections
- Best Practices for Monitoring, Logging, and Tracing
  - Monitoring
  - Logging
  - Tracing
- High Availability and Geographic Distribution
- Hybrid and MultiCloud Architectures
- Summary
9. Mobile Workflows
- Fast-Paced DevOps Workflows for Mobile
- Android Device Fragmentation
  - Android OS Fragmentation
  - Building for Disparate Screens
  - Hardware and 3D Support
- Continuous Testing on Parallel Devices
  - Building a Device Farm
  - Mobile Pipelines in the Cloud
    - AWS device farm
    - Google Firebase Test Lab
    - Microsoft Visual Studio App Center
  - Planning a Device-Testing Strategy
- Summary
10. Continuous Deployment Patterns and Antipatterns
- Why Everyone Needs Continuous Updates
  - User Expectations on Continuous Updates
  - Security Vulnerabilities Are the New Oil Spills
    - UK hospital ransomware
    - Equifax security breach
    - Widespread chipset vulnerabilities
- Getting Users to Update
  - Case Study: Java Six-Month Release Cadence
  - Case Study: iOS App Store
- Continuous Uptime
  - Case Study: Cloudflare
    - 2013 Cloudflare router rule outage
    - 2019 Cloudflare regex outage
    - 2020 Cloudflare backbone outage
- The Hidden Cost of Manual Updates
  - Case Study: Knight Capital
- Continuous Update Best Practices
Index