From f29cd9ec17f63f68f43ae95a60eb10aaf9fe45e4 Mon Sep 17 00:00:00 2001 From: Martin Lindefors Date: Thu, 12 Sep 2024 17:05:20 +0200 Subject: [PATCH 1/5] Week 6 Demo Proposal --- .../demo/week6/melvinj-lindefor/README.md | 26 +++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 contributions/demo/week6/melvinj-lindefor/README.md diff --git a/contributions/demo/week6/melvinj-lindefor/README.md b/contributions/demo/week6/melvinj-lindefor/README.md new file mode 100644 index 0000000000..94e1c2f0fa --- /dev/null +++ b/contributions/demo/week6/melvinj-lindefor/README.md @@ -0,0 +1,26 @@ +# Assignment Proposal + +## Title + +Ensuring the integrity and source of software packages + +## Names and KTH ID + +- Martin Lindefors (lindefor@kth.se) +- Melvin Jakobsson (melvinj@kth.se) + +## Deadline + +- Week 6 + +## Category + +- Demo + +## Description + +We intend to demonstrate how easy it can be to fall victim to attacks such as typosquatting or dependency confusion. We will do this by creating two bogus packages in `pip` & `npm` and highlight some weaknesses in those package managers. We will then show how to cryptographically verify the authenticity of packages using Sigstore & `npm audit`. Finally we will end with a note on the importance of verifying the origin of software, an often overlooked aspect of software development. + +**Relevance** + +Since the demo will include both package managers and software verification it is relevant for both of this weeks topics. In particular, verifying the origin of software packages is more relevant than ever because of the widespread nature of package managers and the comfortability of outsourcing code to these packages. Furthermore, there are several examples of attacks related to package managers. \ No newline at end of file From b82f44d86a890bb08c41319aeb306f36329aa2a0 Mon Sep 17 00:00:00 2001 From: Martin Lindefors Date: Mon, 23 Sep 2024 16:20:36 +0200 Subject: [PATCH 2/5] correct tutorial proposal --- .../tljun-lindefor/README.md | 26 +++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 contributions/executable-tutorial/tljun-lindefor/README.md diff --git a/contributions/executable-tutorial/tljun-lindefor/README.md b/contributions/executable-tutorial/tljun-lindefor/README.md new file mode 100644 index 0000000000..04aabe5886 --- /dev/null +++ b/contributions/executable-tutorial/tljun-lindefor/README.md @@ -0,0 +1,26 @@ +# Assignment Proposal + +## Title + +Working with Kubernetes and Docker to deploy and scale a web application + +## Names and KTH ID + +- Tobias Ljunggren (tljun@kth.se) +- Martin Lindefors (lindefor@kth.se) + +## Deadline + +- Task 2 + +## Category + +- executable-tutorial + +## Description + +This tutorial provides a guide to building, containerizing, and deploying a Node.js application using Docker and Kubernetes on a single local system. Participants will start by creating a small Node.js application. They will then learn how to create a Dockerfile to containerize the application and run it locally to verify functionality. The tutorial continues with setting up a local Kubernetes cluster using Minikube. Participants will deploy the Docker container to Kubernetes, expose it via a Service, and scale the application by increasing the number of replicas. + +**Relevance** + +This tutorial is relevant to DevOps since it teaches important skills in containerization and orchestration using Docker and Kubernetes. By learning how to build, deploy, and scale applications in a consistent and automated way, tutorial participants will be more prepared to work in complex application environments. Furthermore, Docker is a DevOps tool that everyone should be familiar with, and Kubernetes is required for scaling up a growing application. \ No newline at end of file From a2cf7e381279ed794a00a3fe170ed60dd3ec8b5a Mon Sep 17 00:00:00 2001 From: Lindefor <83233481+Lindefor@users.noreply.github.com> Date: Wed, 2 Oct 2024 13:08:28 +0200 Subject: [PATCH 3/5] Update README.md --- contributions/executable-tutorial/tljun-lindefor/README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/contributions/executable-tutorial/tljun-lindefor/README.md b/contributions/executable-tutorial/tljun-lindefor/README.md index 04aabe5886..23f8bf0f3a 100644 --- a/contributions/executable-tutorial/tljun-lindefor/README.md +++ b/contributions/executable-tutorial/tljun-lindefor/README.md @@ -19,8 +19,8 @@ Working with Kubernetes and Docker to deploy and scale a web application ## Description -This tutorial provides a guide to building, containerizing, and deploying a Node.js application using Docker and Kubernetes on a single local system. Participants will start by creating a small Node.js application. They will then learn how to create a Dockerfile to containerize the application and run it locally to verify functionality. The tutorial continues with setting up a local Kubernetes cluster using Minikube. Participants will deploy the Docker container to Kubernetes, expose it via a Service, and scale the application by increasing the number of replicas. +This tutorial provides a guide to building, containerizing, and deploying a Node.js application using Docker and Kubernetes on a single local system. Participants will start by creating a small Node.js application. They will then learn how to create a Dockerfile to containerize the application and run it locally to verify functionality. The tutorial continues with setting up a local Kubernetes cluster using Minikube. Participants will deploy the Docker container to Kubernetes, expose it via a Service, and scale the application by increasing the number of replicas. Moving on to more advanced features, the tutorial will demonstrate how to implement role-based access control (RBAC) within the Kubernetes environment. This is to show how you can manage permissions and ensure that different users and services have the appropriate level of access to resources. The tutorial will contain how to set up RBAC policies, create roles and role bindings, and assign them to users and service accounts. The tutorial will also use the Kubernetes secrets functionality. **Relevance** -This tutorial is relevant to DevOps since it teaches important skills in containerization and orchestration using Docker and Kubernetes. By learning how to build, deploy, and scale applications in a consistent and automated way, tutorial participants will be more prepared to work in complex application environments. Furthermore, Docker is a DevOps tool that everyone should be familiar with, and Kubernetes is required for scaling up a growing application. \ No newline at end of file +This tutorial is relevant to DevOps since it teaches important skills in containerization and orchestration using Docker and Kubernetes. By learning how to build, deploy, and scale applications in a consistent and automated way, tutorial participants will be more prepared to work in complex application environments. Furthermore, Docker is a DevOps tool that everyone should be familiar with, and Kubernetes is required for scaling up a growing application. From 84198c9c46b2007e70b52847ddf0207c23582efd Mon Sep 17 00:00:00 2001 From: Martin Lindefors Date: Wed, 2 Oct 2024 16:51:17 +0200 Subject: [PATCH 4/5] add feedback proposal --- .../feedback/lindefor-tocarls/README.md | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 contributions/feedback/lindefor-tocarls/README.md diff --git a/contributions/feedback/lindefor-tocarls/README.md b/contributions/feedback/lindefor-tocarls/README.md new file mode 100644 index 0000000000..283ffa840a --- /dev/null +++ b/contributions/feedback/lindefor-tocarls/README.md @@ -0,0 +1,22 @@ +# Assignment Proposal + +## Title + +Feedback for Presentation [AI Anomaly Detection for log monitoring](https://github.com/KTH/devops-course/pull/2496) + +## Names and KTH ID + + - Tobias Carlsson (tocarls@kth.se) + - Martin Lindefors (lindefor@kth.se) + +## Deadline + +- Task 3 + +## Category + +- Feedback + +## Description + +We will provide feedback to the Presentation [AI Anomaly Detection for log monitoring](https://github.com/KTH/devops-course/pull/2496) made by Melvin Jakobsson and Jonatan Tuvstedt. We have confirmed with them that this is okay. \ No newline at end of file From 2b7704b5beb6733deb474f6389d452531e461e41 Mon Sep 17 00:00:00 2001 From: Martin Lindefors Date: Wed, 2 Oct 2024 16:55:14 +0200 Subject: [PATCH 5/5] remove feedback proposal from this branch --- .../feedback/lindefor-tocarls/README.md | 22 ------------------- 1 file changed, 22 deletions(-) delete mode 100644 contributions/feedback/lindefor-tocarls/README.md diff --git a/contributions/feedback/lindefor-tocarls/README.md b/contributions/feedback/lindefor-tocarls/README.md deleted file mode 100644 index 283ffa840a..0000000000 --- a/contributions/feedback/lindefor-tocarls/README.md +++ /dev/null @@ -1,22 +0,0 @@ -# Assignment Proposal - -## Title - -Feedback for Presentation [AI Anomaly Detection for log monitoring](https://github.com/KTH/devops-course/pull/2496) - -## Names and KTH ID - - - Tobias Carlsson (tocarls@kth.se) - - Martin Lindefors (lindefor@kth.se) - -## Deadline - -- Task 3 - -## Category - -- Feedback - -## Description - -We will provide feedback to the Presentation [AI Anomaly Detection for log monitoring](https://github.com/KTH/devops-course/pull/2496) made by Melvin Jakobsson and Jonatan Tuvstedt. We have confirmed with them that this is okay. \ No newline at end of file