Using TruffleHog Utility in Your Jenkins Pipeline

Introduction

This is a quick blog on how we can use the TruffleHog utility in our Jenkins pipeline to search for the secrets, passwords, sensitive keys which may have been accidentally committed in our repositories.

TruffleHog proves to be a great tool in helping us to fetch the sensitive data from our repositories which we do not want to expose at any cost.

Before moving further with this blog, I would like you all to take a look at the prerequisites that are mentioned below.

Continue reading “Using TruffleHog Utility in Your Jenkins Pipeline”

Enable Support to Provision GP3 Volumes in Storage Class

No matter where organizations are in their cloud journey, cloud cost optimization remains an essential and top-priority concern. As organizations align increasing workloads to the cloud in terms of size there is a high possibility to lose sight of the overall cloud environment and the costs associated with it. Therefore, it’s essential to optimize cloud costs so as to maximise return over investment (ROI). With the same concern we were working towards reducing the cost of provisioned storage for one our clients. This post covers a particularly interesting issue around the same.

Continue reading “Enable Support to Provision GP3 Volumes in Storage Class”

Monthly Newsletter (June’21)

Hello from OpsTree

A niche Cloud & DevSecOps transformation partner!

We are a huge fan of Kubernetes, Microservices & all things DevSecOps. Here, in this monthly newsletter, we share our learnings and experiences with these technologies. 


The Challenges of a Microservices Journey

Microservices can save us from ‘we sail together or sink together’ paradigm of Monoliths. But with the increased modularity and a promise of faster time-to-market, comes along a unique set of challenges. While failures are inevitable, we can either plan to ring-fence them OR allow them to create a domino effect! Read more..

Continue reading “Monthly Newsletter (June’21)”

AWS IAM: Best practices [ part 2 ]

In the last blog, we discussed some approaches and best practices. You can even consider some of these. Well, that was just the beginning and there are even more. Let’s dive into other approaches while configuring & managing AWS IAM.

Continue reading “AWS IAM: Best practices [ part 2 ]”

ServiceNow Integration with Azure Alerts – Step By Step Setup

Integrating ServiceNow with Azure Alerts (Monitor) requires setting up a dedicated user in ServiceNow with the appropriate evt_mgmt_integration roles. You’ll also need to create a webhook or connector within Azure Monitor’s action groups and arrange the JSON payload required for incident creation.The important steps that must be followed include generating API credentials, configuring URLs, and validating the alert flow to ensure everything is working smoothly.

Topics Breakdown

  1. Introduction and relevance of this Integration
  2. Steps of Setup 
  3. Execution Flow Diagram 
  4. ServiceNow Setup Part 
  5. Azure Logic App Creation Part
    A. Using ServiceNow Connector (Method 1)
    B. Using HTTP Connector (Method 2)
    C. Alert Action Group Creation 
  6. Testing and Validation of Setup

Continue reading “ServiceNow Integration with Azure Alerts – Step By Step Setup”