This is the first episode in the new format - 30 minutes short and crisp episodes, i.e., less water and side discussions, focusing on the topic, duration under (well, almost under) 30 minutes. We hope you like it!

The topic of this episode is building docker images - automation, security, best practices.

In this episode, we discuss:

• Saving money with T3a family

In some of the information overlaps with episode #3 but greatly extends information provided before https://devsecops.fm/episodes/docker-secure-build/

Visit https://devsecops.fm to see show notes and https://gitter.im/devsecopstalks/community to join a discussion

In this episode, we discuss options for splitting your deployment stages.

Put it simply - stage or not to stage?

Visit https://devsecops.fm to see show notes and https://gitter.im/devsecopstalks/community to join a discussion

Let's talk about security in the era of remote work. Most of us have experienced a flaky VPN connection.

We discussed various topics around security inside a cluster and outside.

Visit https://devsecops.fm to see show notes and https://gitter.im/devsecopstalks/community to join a discussion

This time, we are joined by Henrik Høegh who shares his unique perspective on applying the theory of constraint to IT transformation as well as how it applies in the world of Cloud Native. We go back to the origin of DevOps, discussing the various problems companies are facing when transforming their organizations and adopting cultural changes.

Visit https://devsecops.fm to see show notes and https://gitter.im/devsecopstalks/community to join a discussion

Mattias wants to setup HashiCorp Vault and quizzes Andrey how to do that.

We cover a lot of ground - from basic Vault concepts to setting it up and hardening.

Julien and Andrey got together to define the scale and ways to automate the scaling of your infrastructure in response to changes in load patterns.

Visit https://devsecops.fm to see show notes and https://gitter.im/devsecopstalks/community to join a discussion

This time we are discussing the white paper by Summit Route - AWS Security Maturity Roadmap 2020. Tune in to learn more about the white paper and recommendations that we pile up on top of it.

Our guest speaker is Anton Babenko

How do you start to implement a CI pipeline when dealing with infrastructure as code implemented via Terraform? What are the security concerns when the credentials to the whole kingdom are used in an automated process? In this episode, we discuss the various security and feasibility aspects of using Terraform in a CI pipeline.

We start the episode by catching up with what we’ve been working on. Feel free to skip to 11:52 if you want to go directly to the topic. Having an automated process to deploy and manage infrastructure has advantages such as fast feedback and collaboration. The code for the infrastructure is treated like an application that is versioned, tested, and deployed.

Show notes are available at https://devsecops.fm/episodes/terraform-in-ci/

Andrey tells us the story of how DevOps came into existence and took over the market. We discuss the marketing around it, its relationship with DevSecOps. We tried to shed a light on what is marketing strategy versus implementing DevOps in an organization. We also compared DevOps to SRE (Site Reliability Engineering)