Ασφάλεια και αξιοπιστία σε υποδομή μέσω κώδικα : μελέτη περίπτωσης δηλωτικής προσέγγισης
Security and reliability in IaC : a declarative approach case study
View/ Open
Keywords
Devops ; Devsecops ; Gitops ; Infrastructure as code ; Non-functional requirements ; ObservabilityAbstract
Software development has evolved from a locally executed process to a collaborative and multidimensional approach that leverages a multitude of libraries and technologies. Creating new versions of software has gone from an infrequent and time-consuming process to a routine that can be repeated multiple times in a single day. In addition, the services are based on complex infrastructures and automatically adapt to the changing needs of users. This complexity creates challenges not only for security, but also for other non-functional characteristics such as reliability and performance. The software development cycle, with the adoption of DevOps methodologies, includes both the design and operation of infrastructures and services, with the main objective of enhancing non-functional features. This study provides an in-depth analysis of DevOps and DevSecOps methodologies, as well as related technologies and practices, such as Continuous Integration and Delivery (CI/CD), Infrastructure as Code (IaC), and GitOps. These techniques help improve non-functional requirements such as safety, reliability and reproducibility of systems. Through these methodologies, automation, process optimization and the possibility of faster and safer software development are promoted.