The manual process of deploying updates to isolated customer security zones becomes error-prone and inefficient as the number of customers grows.
The team uses Jira with the X-ray plugin to link user stories to automated Cucumber test cases for both API and UI validation.
Shifting to a contract-first workflow using OpenAPI specifications in Git allows for automated code generation and parallel development with a mock API server.
The CI/CD pipeline automates building, quality scanning, security analysis, and nightly end-to-end testing before publishing Docker images.
An Ansible playbook automates the creation and configuration of all necessary infrastructure in Microsoft Azure, including resource groups and app services.
A "stop and fix" approach fails the pipeline on quality violations, while a merge request bot and shared base images streamline development and security.
Important takeaways include starting small with soft limits, verifying tool documentation, and using an IDE-first approach to prevent standalone tools from being ignored.
An idempotent Ansible playbook automates the rollout of new versions to numerous customer environments by updating configurations and restarting containers.
The roadmap includes integrating dynamic security scanning, performance testing, and adopting DevSecOps practices like signed images and secure secret management.
44:30Milecia McGregor
32:29Martin Beránek
33:20Aarno Aukia
42:29Lars Hesel Christensen & Basil Brunner
1:05:06Chris Ayers
29:34Reto Kaeser
26:47Kai Geißelhardt & Volker Zöpfel
50:02Liviu Costea
Jobs that call for the skills explored in this talk.
MediaCologne Kommunikationsmedien GmbH
Hürth, Germany
iits-consulting GmbH
München, Germany
Atruvia AG
Berlin, Germany
smartclip Europe GmbH
Hamburg, Germany
