The DevOps methodology is changing into mainstream for good cause: 99% of practitioners say it has positively affected their group.
Whereas DevOps is foremost a method of collaborating, lots of it’s formed by instruments. And it seems that many widespread DevOps instruments, equivalent to Prometheus, Argo, Grafana, KubeFlow and Jenkins, are open supply software program (OSS).
Whereas utilizing OSS is free, assembling an OSS DevOps toolset — with a median of 15 instruments per firm — isn’t with out challenges. Let’s check out what these hurdles are and easy methods to keep away from them.
Choose lively, backed initiatives
Earlier than including an OSS undertaking to your DevOps toolset, be certain to carry out a full audit: What number of contributors does the undertaking have? Are they people or organizations? How shortly are points resolved? Is their neighborhood discussion board, or Slack, lively?
This will provide you with an image of the general exercise and well being of the undertaking.
You will need to keep in mind that whereas the software program is free, operation prices are all the time a actuality.
Even established OSS initiatives might be in danger. For instance, logging device Log4j has been in murky waters since final 12 months. Quite a few severe safety breaches have been discovered, and it took time for the neighborhood to develop safety patches.
These patches themselves sadly introduced in new safety vulnerabilities. And since the device is embedded in so many components of the software program stack, fixing points is a tricky activity. For smaller organizations with a small IT finances or no publicity to safety points, the patching could by no means occur. The scenario is so dangerous that the FTC is stepping in and threatening to start out handing out fines.
Selecting initiatives endorsed by main OSS leaders equivalent to CNCF and the Apache basis is one other good indicator. These organizations will carry out security audits on initiatives they assist, and, extra broadly, be sure that they’ve reached a stage of maturity primarily based on clear criteria.
Leave a Reply