Month: July 2023

[Python] use Try/Except in python

Posted on By nim No Comments on [Python] use Try/Except in python

1) Introduce try / except The try block contains code that might cause an exception. If an exception occurs in the try block, Python will jump to the except block that matches the exception. We have three except blocks to handle different exception types: The advantage of try-except is that we can gracefully handle errors…

Read More “[Python] use Try/Except in python” »

Python

[DevSecOps] Scan Terraform

Posted on By nim No Comments on [DevSecOps] Scan Terraform

Mình copy bài này:https://spacelift.io/blog/what-is-tfsec More and more organizations are adopting IaC to codify their infrastructure requirements and streamline the maintenance processes around it. While Terraform is one of the dominant technologies today in the space of Infrastructure as Code (IaC), there is still a lot of scope of improvement. One such opportunity is its SecOps…

Read More “[DevSecOps] Scan Terraform” »

DevSecOps, Terraform

[Renovate] Automate Dependency Management With Renovate From Mend

Posted on By nim No Comments on [Renovate] Automate Dependency Management With Renovate From Mend

Renovate is an automation tool for keeping your projects up-to-date. It automates the detection of outdated dependencies, the update of dependencies, and the creation of the Merge/Pull Request to get those updates integrated into your project. Self-host Renovate Bot https://jerrynsh.com/12-tips-to-self-host-renovate-bot/ https://github.com/renovatebot/docker-renovate/tree/main/docs

CI/CD, Git

[DevSevOps] How to Install OpenVAS

Posted on By nim No Comments on [DevSevOps] How to Install OpenVAS

I refer to: https://infosecwriteups.com/how-to-install-openvas-52b6337ba29a If you’re starting off in cybersecurity you may have heard of vulnerability scanners. A vulnerability scanner is a software or program that identifies security vulnerabilities or weaknesses in a system, application or network. It’s used by both attackers and defenders to figure out the security posture of the target system. In…

Read More “[DevSevOps] How to Install OpenVAS” »

DevSecOps

[DevSecOps] Anonymous Authentication in Kubernetes

Posted on By nim No Comments on [DevSecOps] Anonymous Authentication in Kubernetes

Nguồn: https://krolcloud.com/blog/anonymous-authentication-in-kubernetes/?fbclid=IwAR1U9U6yzxJoF6tKwUQgkHAyqpB-mL8RMJ_ot8SLaXzseHKPEfZEMfDKHi4 Kubernetes Anonymous Users  Let’s uncover the details of Kubernetes 💥anonymous users and how 💥RBAC tooling works with anonymous access. By default, every request to the Kubernetes API that isn’t otherwise associated with a specific user is treated as coming from an anonymous user. This can be startling at first glance, with some wondering…

Read More “[DevSecOps] Anonymous Authentication in Kubernetes” »

Kubernetes

[Monitoring] How to monitor EBS on AWS via Prometheus

Posted on By nim No Comments on [Monitoring] How to monitor EBS on AWS via Prometheus

Như các bạn cũng đã biết thì Prometheus không thể collect trực tiếp metrics của Cloudwatch. Mình sẽ cài 1 thằng là cloudwatch-exporter để collect metrics.Bạn có thể sử dụng bài viết bên dưới Look into the helpful metrics. Bài này mình sẽ tập trung nhiều vào việc là tìm ra các metrics có ích…

Read More “[Monitoring] How to monitor EBS on AWS via Prometheus” »

AWS - Amazon Web Service, Prometheus

[Zeus] Retention Project

Posted on By nim No Comments on [Zeus] Retention Project

Step 1: — (Done) Đây là phần đầu tiên. Đã tạo Pull Request: https://github.com/mrnim94/zeus/pull/1Đang review suggestions của PR Explainer BotĐã merged No vulnerability: Step 2: Replace the old aws credentials on k8s. (Done) Step2 cũng đã được merged: https://github.com/mrnim94/zeus/pull/10 Pull Request cũng không có Vulnerability. Step 3: Restart the deployments and any workloads to use…

Read More “[Zeus] Retention Project” »

Coding