application, & environments layer a. Events, logs, & metrics b. Common service to centralize, rotate, and delete 2. Event router responsible for storing our events and metrics a. Enables visualization alerting, & other good things b. Enable threshold-based alerting & health checks iii. Transform logs/events into metrics to enable statistical analysis iv. Adrian Cockcraft – “Monitoring is so important that failures, internal issues 5. Fatal – forces a termination iv. Examples of potentially significant events (Gartner’s GTP Security & Risk Management group) 1. Authentication/authorization decisions 2

mentoring (vs self-teaching through search) is mentor telling you what not to worry about  Perf events mixed mode can show stack traces of both Java and native system calls Continuous Delivery in Financial

configurations 4. XSS, SQLi attempts 5. Server errorsii. Consider blocking and storing source of events when attacks are detected to facilitate mitigation strategies m. PROTECT OUR DEPLOYMENT PIPELINE

Package the code only once – use the same packages throughout the pipeline 3. Captures the history of events for a build, test results, environments deployed to, etc. a. Use to support audits and compliance

since. Follow Us Follow our Agile for Defense group on Meetup, Facebook, and GitHub where we post events and many of our table topics.  https://www.meetup.com/Agile-for-Defense/  https://www.facebook

ates/42/gitlab/ Webhook Key： vHRMIUlRQql9khxfr23sVlaeeMaLA7pZEmbKmmECeFL3bgF7kP Trigger可选择“Push events”（表示更新代码时），All branches表示所有分支，也 可使用“Regular expression”指定目标分支 SSL verifica�on 根 据 目 标 webhook 而 定

secrets: Mountable secrets: default-token-bk95n Tokens: default-token-bk95n Events: #以下是某容器默认挂载的一个存储卷，里面一般有3个文件 ①创建用户账号 # cd /etc/kubernetes/pki # openssl