devopsy.kinsta.cloud

Author: Deborah Schalm

  • Sysdig Launches PromCat, Saves Developers a Week per Integration

    Industry’s first repository for vetted Prometheus integrations with documentation, configurations, and support

    SAN FRANCISCO — March 24, 2020 — Sysdig, Inc., the secure DevOps leader, launched PromCat.io today. PromCat, short for Prometheus Catalog, is a curated repository of vetted Prometheus exporters, dashboards, and alerts to monitor any infrastructure, application, and service running in the cloud. Sysdig offers documentation, suggested configurations, and Sysdig customer support. There are hundreds of Prometheus exporters at all levels of completion that collect metrics from various applications and services offered by cloud vendors. Having validated integrations — exporters, dashboards, and alerts — with documentation, helps customers to decide which integration to use, how to configure them, and keep up with changes. DevOps teams can save weeks of time by reducing this research. Today, PromCat hosts integrations for Kubernetes control plane, Isteo, and a growing list of AWS services.

    In a separate announcement today, the company announced the industry’s first cloud-scale, fully  Prometheus compatible monitoring solution. Like with PromCat, Sysdig continues to help organizations ship applications faster as they adopt the cloud and Kubernetes.

    Blog: PromCat: A resource catalog for enterprise-class Prometheus monitoring

    When developers collaborate and share, they improve visibility and strengthen security in their environments. The popularity of Prometheus has led to an abundance of shared resources; however, it can be hard to determine which resources are production-ready and capable of supporting the enterprise.

    Implementing a scalable Prometheus monitoring system is a challenge, requiring tight integrations between metrics sources and collection, dashboards, alerts, and retention. It is a puzzle that requires navigating compatibility differences that take effort to set up and maintain over time. The goal of PromCat is to make it easier for developers to access the collective expertise of the cloud-native community.

    Users can take the integrations from PromCat and use them with the Sysdig Secure DevOps Platform, or their own Prometheus servers. Developers do not have to use commercial Sysdig products to use the PromCat repository, unless they require support. Over the coming months, PromCat will expand to include more applications and services identified in the 2019 Sysdig Container Usage Report in the order of popularity.

    “There is a wealth of code sharing online; however, it is hard to know where to look and the quality is inconsistent,” said Loris Degioanni, founder and chief technology officer at Sysdig. “Developers can spend hours testing a dashboard or an exporter only to find that it has issues. By validating, improving, and documenting, we hope to grow expertise across the community, which improves Kubernetes visibility and security for everyone.”

    Sysdig was founded on the belief that innovation is stifled when core technology is controlled by a single provider. The Sysdig business model depends on adding services and support on top of open source to enhance scalability, performance, and ease of use. As new integrations are added to PromCat, all enhancements and bug fixes are contributed back to the open source community.

    With this belief in the power of open source, Sysdig has heavily invested in the community. The company introduced sysdig, the open source container troubleshooting project, in 2014. Since then, the company has created two additional open source tools — Falco and Sysdig Inspect — along with contributing to other open source projects, including Prometheus and eBPF. Falco, a CNCF incubation-level hosted project, is the only runtime security project in the CNCF.

    Availability

    PromCat.io is now live and new validated integrations will continue to be added.

  • The 2020 Call for Code Global Challenge takes on COVID-19

    By Willie Tejada, Chief Developer Advocate, IBM

    Nearly one month ago, together with Creator David Clark Cause and in partnership with United Nations Human Rights and the Linux Foundation, we announced climate change as the theme for the 2020 Call for Code Global Challenge. In that brief period, much has changed. COVID-19 (Coronavirus) has spread across the world with unprecedented effect and now has the potential to become the greatest crisis of modern times. From its inception Call for Code was created to take on society’s most pressing issues, which is why we are expanding this year’s Challenge to address both climate change and COVID-19, two urgent crises that have the power to compromise our health, our planet, our survival. We’re asking developers, data scientists, and problem solvers to answer the Call.

    On COVID-19:

    In a very short period of time, COVID-19 has revealed the limits of the systems we take for granted. The 2020 Call for Code Global Challenge will arm you with resources (see here) to build open source technology solutions that address three main COVID-19 areas: crisis communication during an emergency, ways to improve remote learning and how to inspire cooperative local communities.

    • Crisis Communication: In times of crisis, communications systems are one of the first systems to become overwhelmed. Chatbots help respond to tens, even hundreds, of thousands of messages a day. Whether via text, websites or communication apps like WhatsApp, being able to converse with chatbots and other resources can play a critical role in helping communities understand everything they need to know rapidly and free up customer service resources to focus on higher level issues. Whether that’s correct hand washing procedure, how to properly detect symptoms, or local updates on quarantine, providing crisis communications digitally has a major role to play.
    • Remote Education: Where possible, people who are self-isolating are being asked to work from home, which presents its own set of challenges: transitioning to a new home office or, as some schools close for the foreseeable future, children find themselves stuck indoors for long periods of time. It is important to keep them engaged, entertained and on top of their education. Technology has a pivotal role to play, whether that’s creating ad-hoc classrooms, or helping parents quickly adapt to home-schooling.
    • Community Cooperation: Your local community must stand united, operate efficiently and be there for its constituents more than ever before. Understanding not only what is happening in your neighborhood, but also how you can help others, or how others can help you, is vital. Consider how you can incorporate everything from weather data to local food and medical supply information to help your local community better deal with a crisis — especially those who need it most.

    On Climate Change:

    As previously planned, today we are revealing our 2020 Call for Code Challenge climate change starter kits (see here). These three quick-start guides explain the individual problems people and communities are facing, and help you start creating applications tied to easy-to-understand use cases in just minutes.

    To help define the specific situations caused by climate change where your innovations could be most helpful, a few weeks ago IBM partnered with the world’s leading humanitarian experts for our kickoff event in Geneva at the historic Palais Wilson, Headquarters of the Office of the United Nations High Commissioner for Human Rights. Together with UN humanitarian experts, and eminent technologists from Red Hat, JP Morgan Chase, Persistent Systems, Unity Technologies, NearForm, and Johnson & Johnson, we collaborated to create our three climate change starter kits.

    Each kit focuses on a key topic — water sustainability, energy sustainability and disaster resiliency — essential to halting and reversing climate change, and grounded in real-world needs defined by the UN Sustainable Development Goals and the Sendai Framework for Disaster Risk Reduction. These are the areas where you can have the greatest impact:

    • Water sustainability: This IoT based solution aims to help farmers, particularly those in shifting climate realities, monitor hyper-localized weather data and adapt their crop strategies to optimize water usage.
    • Energy sustainability: With a goal of building consumer awareness about energy costs across the manufacturing process, this solution creates the framework for a new global product labelling system that would include a comprehensive Climate Impact Rating (CIR), similar to the labels on food products, with incentives for consumers and retailers to drive purchases of more efficient products.
    • Disaster resiliency : To help communities prepare for floods, this app will provide residents education at all stages of an event, from a checklist of essential survival materials to real-time information on the capacity of local shelters.

    The kits include a description of the starter solution, an architectural diagram, and a tutorial with starter code and reference materials. With these starter kits, you can get a head start creating a sustainable solution to halt and reverse climate change. To further increase the impact you can make, IBM is building a wide ecosystem of partners and tech providers to help participants round out their solutions. For example, the HERE location API lets you access geospatial data, routing, geofencing and interactive maps.

    We’ll follow up in a week with more details on our three COVID-19-specific starter kits to help you jump-start your solutions. As with climate change, we are working with some of the world’s leading experts to define the most pressing needs and provide the most helpful resources. That said, you don’t need to wait. You can register and get started now creating applications with our open source-powered software built on Red Hat OpenShift, IBM Cloud, IBM Watson, IBM Blockchain, and data from The Weather Company. As we’ve done the previous two years, IBM will work with the teams who create the most promising solutions to build, fortify, test and deploy them through IBM Code and Response.

    Together, we have the power to use the latest technology in ways that make an immediate and lasting humanitarian impact in local communities and across the globe.

    Thank you for answering the Call in this unprecedented time in our history.

  • DevOps Institute Announces Virtual SKILup Days to Advance the Humans of DevOps

    Due to Coronavirus concerns and social distancing practices, DevOps Institute has migrated all SKILup Day events to one-day, virtual micro-conferences available for free to the global community 

    BOCA RATON, Fla., March 19, 2020 — DevOps Institute, a global member-based association for advancing the human elements of DevOps, today announced eight Virtual SKILup Day micro-conferences starting April 30, 2020. Each monthly conference focuses on a single topic and features six hours of “how-to” presentations, exhibitor booths, a networking chat lounge and a scavenger hunt in a virtual conference environment. By focusing each SKILup Day on a single topic, IT professionals will gain actionable skills, knowledge, ideas and learning by breaking down traditional monolithic events into single-day micro-conferences.

    Virtual SKILup Days are free to registered attendees. To register for an upcoming event or learn how to get involved, please visit: (https://devopsinstitute.com/virtual-skilup-days/)

    “By identifying in-demand skill sets from the ‘Upskilling 2020: Enterprise DevOps Skills Report,’ we are providing a forum for IT professionals to upskill and connect based on the know-how of thought leaders, practitioners, vendors and partners,” said Jayne Groll, CEO at DevOps Institute. “To continue our mission of advancing the Humans of DevOps, we want to make these continuous learning opportunities accessible to anyone, anywhere, at any time. Our solution is to extend SKILup Days to a worldwide audience and proceed through a realistic virtual conference platform.”

    Each Virtual SKILup Day will feature a keynote session, technical and cultural sessions and practical advice from practitioners. In addition, there will be opportunities for demos and online interactions from SKILup Day sponsors.

    The first Virtual SKILup Day will focus on Value Stream Management, April 30th and currently features a powerful speaker line-up (with more to speakers to be announced), including:

    • Shaaron Alvares, Sr. Agile Coach – Enterprise Agility and DevOps Transformation, T-Mobile
    • Helen Beal, DevOpsologist at Ranger4
    • Jack Maher, Consultant, author and former director, IT process management at Nationwide
    • Mike Orzen, Consultant and author of Lean IT and the Lean IT Field Guide

    Future Virtual SKILup Day micro-conferences will focus on:

    • Enterprise Kubernetes (May 21)
    • Site Reliability Engineering (June 18)
    • Release Automation (July 16)
    • Hybrid Cloud (Aug. 20)
    • Human Skills (Sept. 17)
    • CI/CD (Oct. 15)
    • Continuous Testing (Nov. 12)
    • Global SKILup Day (Dec. 10)

    If you’re interested in sponsoring or partnering on a Virtual SKILup Day, please contact: Sean@DevOpsInstitute.com

    About the DevOps Institute

    DevOps Institute is dedicated to advancing the human elements of DevOps success. As a global member-based association, DevOps Institute is the go-to hub connecting IT practitioners, education partners, consultants, talent acquisition and business executives to help pave the way to support digital transformation and the New IT.

    We help advance careers and support emerging practices within the DevOps community based on a human-centered SKIL framework, consisting of Skills, Knowledge, Ideas, and Learning.  All of our work, including accreditations, research, events, and continuous learning programs – is focused on providing the “human know-how” to modernize IT and make DevOps succeed.

    Web | https://devopsinstitute.com/

    Twitter | @DEVOPSINST

    LinkedIn | /devops-institute

    YouTube | DevOps Institute

    ###

  • 42Crunch Launches New REST API Static Security Testing Extension for Azure Pipelines

    42Crunch Launches New REST API Static Security Testing Extension for Azure Pipelines Enables Azure DevOps customers to extend their DevSecOps practices to REST APIs

    IRVINE, CA, MARCH 18, 2020 — Today, the API security leader and creator of REST API DevSecOps tooling and the industry’s first API Firewall, 42Crunch, announced the launch of
    their new REST API Static Security Testing extension for Microsoft Azure Pipelines. This extension enables companies to easily enforce secure API design right from their CI/CD
    pipeline. With REST API proliferation and REST APIs becoming one of the top attack vectors, ensuring that all APIs that a company develops and hosts are secure by design can be a problem. And
    with CI/CD, any new API or any modification to existing APIs that developers add can get pushed to production without proper checks on security. Up until now, there has been no
    extension in the Azure marketplace that would have been specifically geared for the static analysis of REST API security.

    The new 42Crunch extension for Microsoft Azure Pipelines allows companies to add REST API static security testing (SAST) right into their CI/CD pipeline. The benefits include:
    ● Reduced risk of breach : Locate API contract files in the repository and run 200+ security checks covering OpenAPI standard requirements, authentication, authorization, and both incoming and outgoing data validation. This makes sure that no new or changed API can pass the test and get deployed to production if it does not meet your security standards.
    ● Reduced fixing costs : Find and report security flaws at each pipeline run, providing immediate feedback to R&D.
    ● Increased R&D efficiency : 42Crunch API Contract Security Audit does not give false positives. Every issue reported is worth looking into. Issues are prioritized by impact, so developers know where to start. Every issue comes with a detailed knowledge base article explaining the issue, its severity, exploit scenario, and ways to fix it.

    “Modern software development trends, such as cloud-native architectures, microservices, and serverless, have led to companies spinning up hundreds or even thousands of APIs,” says
    Jacques Declas, the CEO and founder of 42Crunch. “Agile processes and DevOps lead to new APIs being developed and existing APIs getting changed every day. No manual policies or
    checks can ensure that they are all securely designed and follow all the modern API security best practices. Today, 42Crunch is releasing an off-the-shelf API security extension for Azure DevOps to allow Azure Pipelines customers to automatically discover APIs built by their pipelines, and ensure that these APIs are secure by design.”

    “DevSecOps has become the way for teams to stay agile and deliver business value while maintaining a high level of systems security,” says Steven Murawski, Cloud Advocate at Microsoft. “While Azure Pipelines already had security testing extensions for various parts of the application stack, there had been a glaring gap of the one specifically designed for REST APIs. We are happy to see 42Crunch bridge that gap with their solution.”

    Now, any registered 42Crunch user who is also a user of Azure DevOps pipeline, can extend the pipeline with the 42Crunch REST API Security Audit Static Analysis extension: https://bit.ly/42azure

    Last year, 42Crunch launched an OpenAPI (Swagger) Editor for VS Code as part of an overall strategy to simplify and automate API security. The extension has been well received with a 5
    star rating, and more than 47,000 installs.

    You can download it for free here: https://bit.ly/42vscode

    42Crunch has also recently launched freemium model with free self-service registration at
    https://platform.42crunch.com/register
    REST API Security by Design with Azure Pipelines

    Join Microsoft and 42Crunch for a live webinar Wednesday March 25th at 8am PST / 11am EST
    for a deep dive into a shift-left security approach using OpenAPI, Azure Pipelines, and
    42Crunch. Register Now .

    About 42Crunch
    42Crunch bridges the gap between API development and security teams with a simple,
    automated platform that provides auditing, live endpoint scanning, and micro API firewall
    protection. Unlike other solutions on the market, 42Crunch Platform empowers development,
    security, and operations teams with a set of integrated tools to easily build security into the
    foundation of the API, and enforce those policies throughout the API lifecycle. By delivering
    security as code, you enable a seamless DevSecOps experience, allowing innovation at the
    speed of business without sacrificing integrity. Visit https://42crunch.com to learn more.
    Visit our online community https://APIsecurity.io .

  • CLOUDBEES STRONG GROWTH AND BUSINESS MOMENTUM CONTINUES FOR FISCAL YEAR ENDING JANUARY 31: DRIVES RECORD ANNUAL RECURRING REVENUE, MAKES KEY ACQUISITIONS, SETS INDUSTRY VISION FOR SOFTWARE DELIVERY MANAGEMENT

    2020 Fiscal Year Featured 55% Increase in ARR, Marked Key Milestones

    MARCH 17, 2020 – CloudBees, the enterprise software delivery company, today announced a 55% increase in annual recurring revenue for the fiscal year ending January 31, 2020. The record results capped a successful 12-month stretch marked by key acquisitions, a new strategic vision for the industry, an investment in the company by a global bank, strong growth in customer engagements and industry recognition.

    “Our achievements this past year illustrate how CloudBees is not only serving a market need but also helping to define an evolving industry,” said Matt Parson, chief financial officer, CloudBees. “As we cross $100 million in ARR, we are positioned for our best year ever.”

    During the year, CloudBees rolled out a new forward-looking vision for turning software delivery into a core business process. Its vision for Software Delivery Management (SDM), unveiled during the DevOps World | Jenkins World conference last August, breaks down silos by linking, all teams, tools and technologies for the efficient continuous delivery of software. SDM also integrates wider non-IT business functions across the company, providing an unprecedented level of visibility via common data, universal insights, connected processes, and unparalleled collaboration.

    “The software delivery market will continue to grow as organizations undergo DevOps transformations and drive greater business value as a result of their efforts,” said Sacha Labourey, chief executive officer and co-founder, CloudBees. “However, you’re never really finished. There are always additional processes to automate and optimize, and demands from business functions for more insight into the overall software delivery flow. Our Software Delivery Management offering accomplishes this by layering a seamless set of services on top of CI/CD automation. We’re excited about the future of the industry, as SDM will make software delivery a more holistic process across the organization, integrating insights and stakeholders in ways that were not possible before.”

    Building on its vision, CloudBees was active on the acquisition front. The company acquired a pair of industry leaders – continuous delivery and application release orchestration (ARO) provider Electric Cloud and feature flag management provider Rollout. The two acquisitions deepened the strength of CloudBees’ offerings across the software delivery spectrum, establishing the company as the first end-to-end provider of continuous integration, continuous delivery, continuous deployment and ARO solutions. Both acquisitions contributed to CloudBees growth. Rollout, alone, grew its user base by 220% and increased ARR more than 5x over the previous year.

    The company extended its core product line in new and innovative ways. CloudBees extended its partnership with Google Cloud with the introduction of CloudBees CI/CD powered by Jenkins X, a SaaS solution running on Google Cloud Platform. CloudBees also introduced a set of capabilities to support SDM, giving product teams and stakeholders the central visibility and actionable insights critical to managing the on-time delivery of quality software that customers want, and positively impacts business outcomes. This includes product hub, policy engine, report engine with custom querying, feature management and various tool integrations.

    To drive growth for the future, CloudBees announced a $10 million investment from HSBC, one of the world’s largest banking and financial services organizations and a significant CloudBees customer. The announcement represents a follow-on to investors’ $62 million round of growth capital in CloudBees in 2018, bringing total funding in the company to more than $120 million.

    Customer growth also accelerated, with the number of customers growing by 34% over the prior year, reflecting the continued demand for DevOps tools and CloudBees’ success as an industry leader. New customers subscribing to CloudBees’ solutions include Airbnb, East Side Games, Fox Corporation, Nationwide Building Society, RE/MAX, Starbucks and Westfield Insurance Company.

    CloudBees also achieved other milestones throughout the year:

    Additional Resources

    About CloudBees

    CloudBees, the enterprise software delivery company, provides the industry’s leading DevOps technology platform. CloudBees enables developers to focus on what they do best: Build stuff that matters, while providing peace of mind to management with powerful risk mitigation, compliance and governance tools.Used by 50% of the Fortune 100, CloudBees is helping thousands of companies harness the power of continuous everything and gets them on the fastest path from great idea, to great software, to amazing customer experiences, to being a business that changes lives.

    Backed by Matrix Partners, Lightspeed Venture Partners, Verizon Ventures, Delta-v Capital, Golub Capital and Unusual Ventures, CloudBees was founded in 2010 by former JBoss CTO Sacha Labourey and an elite team of continuous integration, continuous delivery and DevOps professionals. Follow CloudBees on Twitter, LinkedIn and Facebook.

     

     

  • Announcing Red Hat Ansible Certified Content for IBM Z

    We know that speed and agility are of utmost importance for our clients on their journey to cloud. But what we’ve also heard from them is that they’re looking for an enterprise-wide strategy to provide consistent automation across their hybrid environment — spanning their IT infrastructure, clouds and applications.

    The reality of hybrid IT is here. Our clients are looking for solutions that leverage their investments in — and the strengths of — their existing IT infrastructure, clouds and applications in a seamless way. To deliver on this we’re focusing on three areas: developer experience, automation and operations that bring value to our clients no matter where they are on the hybrid IT continuum.

    To help make this a reality, today IBM announced the availability of Red Hat Ansible Certified Content for IBM Z, enabling Ansible users to automate IBM Z applications and IT infrastructure. The Certified Content will be available in Automation Hub, with an upstream open source version offered on Ansible Galaxy. This means that no matter what mix of infrastructure our clients are working with, IBM is bringing automation for IBM Z into the fold to help you manage across your hybrid environment through a single control panel.

    Ansible functionality for z/OS will empower IBM Z clients to simplify configuration and access of resources, leverage existing automation and streamline automation of operations using the same technology stack that they can use across their entire enterprise. Delivered as a fully supported enterprise-grade solution with Content Collections, Red Hat Ansible Certified Content for IBM Z provides easy to use automation building blocks that can accelerate the automation of z/OS and z/OS-based software. These initial core collections include connection plugins, action plugins, modules and a sample playbook to automate tasks for z/OS such as creating data sets, retrieving job output and submitting jobs.

    Over the last several months, we’ve made significant strides to improve the developer experience by bringing DevOps and industry-standard tools like Git and Jenkins to the platform. We’ve announced IBM Z Open Editor, IBM Developer for z/OS V14.2.1, and, of course, we are a founding member of Zowe™.  In February we announced the availability of Red Hat OpenShift on IBM Z, which enables developers to run, build, manage and modernize cloud native workloads on their choice of architecture.

    And with today’s announcement, we’re taking the next step toward this commitment.  For developers and operations, Ansible allows them to break down traditional internal and historical technology silos to centralize automation — all while leveraging the performance, scale, control and security provided by IBM Z. This brings the best of both worlds together with a practical and more economical solution. We’re excited about this important step both for our clients, and for our shared mission with Red Hat to provide a flexible, open and secured enterprise platform for mission-critical workloads.

    For more information on Red Hat Ansible Certified Content for IBM Z visit:

    • Github to join the open source community, see source code and documentation
    • Ansible Galaxy to get started with the ibm.ibm_zos_core Ansible Collection

    Ansible Automation Hub: Now Ansible Automation Platform subscribers can get started with Red Hat Ansible Certified Content for IBM Z.

    Statements by IBM regarding its plans, directions, and intent are subject to change or withdrawal without notice at the sole discretion of IBM. Information regarding potential future products is intended to outline general product direction and should not be relied on in making a purchasing decision. The information mentioned regarding potential future products is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. Information about potential future products may not be incorporated into any contract. The development, release, and timing of any future features or functionality described for IBM products remain at the sole discretion of IBM.

  • Red Hat Ansible Certified Content for IBM Z now available for developers

    These new Ansible modules join other recent additions to DevOps tooling for z/OS on IBM Z.

    The entire IBM Z platform is rapidly evolving, with major advances coming across Linux on Z, LinuxONE, and z/OS. Hybrid multicloud demands consistency and agility from all of these platforms. Validation of dozens of open source projects for Linux on Z and LinuxONE has been a boon for developers and DevOps practitioners alike.

    That’s why I’m pleased to announce the availability of the Red Hat Ansible Certified Content for IBM Z, which includes the z/OS Core Collection and is now available on Ansible Galaxy and Ansible Automation Hub as a supported, certified collection by Red Hat.

    This is an important step forward in enabling z/OS to participate in an Ansible-based enterprise automation strategy in exactly the same way that the rest of your environments do. Leveraging Ansible to automate z/OS brings consistency across the hybrid multicloud environments and enables z/OS to transparently participate in your infrastructure.

    These new Ansible modules join other considerable developments in DevOps tooling support for z/OS on IBM Z systems. You can now use modern IDEs like Visual Studio Code and the Eclipse Che platform, employing familiar tools to code in COBOL and PL1 for IBM z/OS. IBM Dependency Based Build (DBB) enables building z/OS source code files with Jenkins and Git, and can be staged on generic artifact repositories like Artifactory or Nexus for deploying as part of a standard CI/CD pipeline. For rapid integration of Linux-based software and workloads in support of z/OS applications, check out the z/OS Container Extensions (zCX), which support Docker containerized workloads directly on z/OS.

    All of these DevOps tools that are now available on IBM Z more closely align development pipelines with those being used throughout an organization. IBM Distinguished Engineer Rosalind Radcliffe described application modernization efforts on IBM Z, saying “development from a pipeline perspective, the CI/CD coordinator, the SCM deployment tool, is identical whether or not I’m doing Java, COBOL, Node, C#. It doesn’t matter.”

    When you also add Red Hat OpenShift, which was recently made available for Linux on IBM Z, having Ansible-based provisioning on z/OS offers great value to your organization. It provides IBM Z users the ability to seamlessly unite workflow orchestration with configuration management, provisioning, and application deployment in one easy-to-use platform, regardless of operating system.

    Looking beyond your IBM Z environments, you may already be using a cloud-based deployment managed by Ansible. In a hybrid infrastructure that includes IBM Z, Ansible can manage your traditional cloud-based workloads, as well as your workloads on IBM Z, furthering the goal to build smart, build secure.

    Ready to dive in? Try out this IMS provisioning example to get started.

    Next steps

    • To learn more about DevOps on IBM Z, visit the DevOps section of the Mainframe DEV blog to see the latest developments.
    • Check out the new Z DevOps Talks podcast for lighthearted but deeply technical discussions with key players in the DevOps for IBM Z sphere.
      • Their first podcast features Rosalind Radcliffe, IBM Distinguished Engineer and Chief Architect for DevOps for z Systems at IBM.
      • The February 11th episode covers Ansible for z/OS with Kyle Charlet, IBM Distinguished Engineer working on Ansible modules and more.

  • Cloudbees Strong Growth And Business Momentum Continues For Fiscal Year Ending January 31: Drives Record Annual Recurring Revenue, Makes Key Acquisitions, Sets Industry Vision For Software Delivery Management

     2020 Fiscal Year Featured 55% Increase in ARR, Marked Key Milestones

    SAN JOSE, CALIFORNIA – MARCH 17, 2020 – CloudBees, the enterprise software delivery company, today announced a 55% increase in annual recurring revenue for the fiscal year ending January 31, 2020. The record results capped a successful 12-month stretch marked by key acquisitions, a new strategic vision for the industry, an investment in the company by a global bank, strong growth in customer engagements and industry recognition.

    “Our achievements this past year illustrate how CloudBees is not only serving a market need but also helping to define an evolving industry,” said Matt Parson, chief financial officer, CloudBees. “As we cross $100 million in ARR, we are positioned for our best year ever.”

    During the year, CloudBees rolled out a new forward-looking vision for turning software delivery into a core business process. Its vision for Software Delivery Management (SDM), unveiled during the DevOps World | Jenkins World conference last August, breaks down silos by linking, all teams, tools and technologies for the efficient continuous delivery of software. SDM also integrates wider non-IT business functions across the company, providing an unprecedented level of visibility via common data, universal insights, connected processes, and unparalleled collaboration.

    “The software delivery market will continue to grow as organizations undergo DevOps transformations and drive greater business value as a result of their efforts,” said Sacha Labourey, chief executive officer and co-founder, CloudBees. “However, you’re never really finished. There are always additional processes to automate and optimize, and demands from business functions for more insight into the overall software delivery flow. Our Software Delivery Management offering accomplishes this by layering a seamless set of services on top of CI/CD automation. We’re excited about the future of the industry, as SDM will make software delivery a more holistic process across the organization, integrating insights and stakeholders in ways that were not possible before.”

    Building on its vision, CloudBees was active on the acquisition front. The company acquired a pair of industry leaders – continuous delivery and application release orchestration (ARO) provider Electric Cloud and feature flag management provider Rollout. The two acquisitions deepened the strength of CloudBees’ offerings across the software delivery spectrum, establishing the company as the first end-to-end provider of continuous integration, continuous delivery, continuous deployment and ARO solutions. Both acquisitions contributed to CloudBees growth. Rollout, alone, grew its user base by 220% and increased ARR more than 5x over the previous year.

    The company extended its core product line in new and innovative ways. CloudBees extended its partnership with Google Cloud with the introduction of CloudBees CI/CD powered by Jenkins X, a SaaS solution running on Google Cloud Platform. CloudBees also introduced a set of capabilities to support SDM, giving product teams and stakeholders the central visibility and actionable insights critical to managing the on-time delivery of quality software that customers want, and positively impacts business outcomes. This includes product hub, policy engine, report engine with custom querying, feature management and various tool integrations.

    To drive growth for the future, CloudBees announced a $10 million investment from HSBC, one of the world’s largest banking and financial services organizations and a significant CloudBees customer. The announcement represents a follow-on to investors’ $62 million round of growth capital in CloudBees in 2018, bringing total funding in the company to more than $120 million.

    Customer growth also accelerated, with the number of customers growing by 34% over the prior year, reflecting the continued demand for DevOps tools and CloudBees’ success as an industry leader. New customers subscribing to CloudBees’ solutions include Airbnb, East Side Games, Fox Corporation, Nationwide Building Society, RE/MAX, Starbucks and Westfield Insurance Company.

    CloudBees also achieved other milestones throughout the year:

    Additional Resources

    About CloudBees

    CloudBees, the enterprise software delivery company, provides the industry’s leading DevOps technology platform. CloudBees enables developers to focus on what they do best: Build stuff that matters, while providing peace of mind to management with powerful risk mitigation, compliance and governance tools.Used by 50% of the Fortune 100, CloudBees is helping thousands of companies harness the power of continuous everything and gets them on the fastest path from great idea, to great software, to amazing customer experiences, to being a business that changes lives.

    Backed by Matrix Partners, Lightspeed Venture Partners, Verizon Ventures, Delta-v Capital, Golub Capital and Unusual Ventures, CloudBees was founded in 2010 by former JBoss CTO Sacha Labourey and an elite team of continuous integration, continuous delivery and DevOps professionals. Follow CloudBees on Twitter, LinkedIn and Facebook.

     

     

  • Sonatype Expands its Fully Automated Open Source Security and Governance Solution to Support C/C++, PHP, and Ruby

    Nexus Lifecycle now allows users to scan applications for open source software vulnerabilities, automatically enforce open source governance policies, and easily remediate open source risk for 27 different languages and package formats.

    Fulton, MD – March 12, 2020 — Sonatype, the company that scales DevOps through open source governance and software supply chain automation, today announced it’s further expanded its language coverage within Nexus Lifecycle to include Conan (C/C++), Composer (PHP), and RubyGems (Ruby), including the ability to create and contextually enforce policies. By continuing to increase support for the most popular component formats, Nexus Lifecycle is helping millions of developers and security professionals to automatically govern open source hygiene across every phase of the software development lifecycle (SDLC).

    With the addition of C/C++, PHP, and Ruby, Nexus Lifecycle now supports 27 programming languages and package formats, further meeting the diverse needs of enterprise development teams.

    According to Sonatype’s 2019 State of the Software Supply Chain Report, 1 in 10 open source components downloaded by development teams had known security vulnerabilities. This doesn’t represent the number of components that will be discovered as vulnerable over time, nor potential open source licensing risk, about which organizations should also be concerned. The ability to automate open source governance, enforce policies, and remediate vulnerabilities is vital to application security in today’s world. In fact, the same report showed that managed software supply chains reduced the percentage of vulnerable components used in finished applications by 55%.

    “Organizations keep software applications safe, not by chance, but by preparation, and in many cases supported by automation. But, automation without accuracy can be detrimental, giving a false sense of security,” said Brian Fox, CTO of Sonatype. “Developers need broad and accurate component intelligence they can trust for proper security hygiene. By extending our coverage to even more languages, we’re providing our customers with more reliability and confidence, while increasing productivity.”

    Organizations using Nexus Lifecycle and C/C++, PHP, and Ruby will now be able to:

    • Create custom security, license, and architectural policies and contextually enforce those policies across every stage of the SDLC
    • Select safer components throughout the software supply chain, and reduce risk
    • Automatically enforce policies and view expert remediation guidance in the tools developers use every day

    Sonatype remains committed to creating the most universally applicable, polyglot software supply chain automation tools. This is just one of many releases dedicated to expanding the languages with native support across the Nexus Platform.

    Additional Resources: 

    • Read more about Sonatype’s Nexus Lifecycle’s support for C/C++, PHP, and Ruby on our blog
    • Check-out why Nexus Lifecycle is continuously #1 on IT Central Station for enterprises

    About Sonatype

    Sonatype is the leader in software supply chain automation technology with more than 350 employees, over 1,000 enterprise customers, and is trusted by more than 10 million software developers. Sonatype’s Nexus platform enables DevOps teams and developers to automatically integrate security at every stage of the modern development pipeline by combining in-depth component intelligence with real-time remediation guidance. For more information, please visit Sonatype.com, or connect with us on Facebook, Twitter, or LinkedIn.

  • ForgeRock Simplifies the Process for Companies to Migrate from Legacy Products to a Modern Identity Solution

    San Francisco – March 11, 2020 – ForgeRock®, the leading provider in digital identity, today announced new tools to help enterprise customers quickly and easily migrate identity and access management (IAM) capabilities from legacy vendors, such as Oracle or CA Technologies, to ForgeRock’s more secure and flexible platform.

    The Modernize IAM Accelerators mitigate the costly and time-consuming process of moving away from legacy systems, helping to make migration seamless and invisible to users.

    “Organizations often delay updating or replacing their legacy identity systems, assuming they must migrate everything at once and cause massive disruption to users and the organization,” said Peter Barker, chief product officer, ForgeRock. “However, the ForgeRock Modernize IAM Accelerators enable organizations to transition to a modern IAM environment at their own pace and avoid interrupting the user experience or causing operational impact.”

    Tackling the Legacy IAM Challenge

    Legacy IAM software slows digital transformation efforts. Siloed and inflexible identity solutions increase security risks and provide suboptimal user experiences while interoperability and scaling issues inflate operating costs. However, legacy IAM software can’t be ripped out and replaced overnight. The risk, expense, and time required to retire these solutions and implement entirely new ones is a significant challenge for most organizations.

    The Modernize IAM Accelerators Solution

    The ForgeRock Modernize IAM Accelerators enable legacy IAM systems to coexist with a modern IAM platform, giving organizations the ability to migrate to ForgeRock without disruption to users. They are a pluggable, open source framework that can support multiple patterns of co-existence with and migration from most legacy IAM systems, by providing Single Sign On (SSO), Just In Time (JIT) User Migration, and Bulk User Migration. Just in Time (JIT) helps organizations save time and effort without sacrificing users’ productivity, particularly when a bulk export of passwords is not possible.

    Included in the Modernize IAM Accelerators are two bidirectional coexistence toolkits supporting SSO & JIT (Core and Edge), and a bulk user migration toolkit. Customers can choose the optimal toolkit (or combination of toolkits) based on their selected migration strategy.

    For all three toolkits, ForgeRock has developed a pluggable framework that can be extended to specific legacy systems with included Plug Ins. Additional Plug Ins can be developed by customers and partners since the assets are open source.

    Depending on an organization’s needs in modernizing IAM, these solutions can help with the success of  digital transformation by reducing time and cost-intensive barriers to success.

    Availability
    ForgeRock Modernize IAM Accelerators are available today. See http://www.forgerock.com/modernize-iam for details.

    About ForgeRock
    ForgeRock®, the leader in digital identity, delivers modern and comprehensive Identity and Access Management solutions for consumers, employees and things to simply and safely access the connected world. Using ForgeRock, more than a thousand global organizations orchestrate, manage, and secure the complete lifecycle of identities from dynamic access controls, governance, APIs, and storing authoritative data – consumable in any cloud or hybrid environment. The company is privately held, and headquartered in San Francisco, California, with offices around the world. For more information and free downloads, visit www.forgerock.com or follow ForgeRock on social media:

    Facebook ForgeRock |Twitter @ForgeRock | LinkedIn ForgeRock |