It has been a few months since GitHub Advanced Security (GHAS) has been made generally available for Azure DevOps. During this time, I’ve engaged with numerous customers eager to implement GHAS within their Azure subscriptions. In this post, I wanted to show you a quick way to set up GHAS within Azure DevOps and explore the features available. Enabling Advanced Security in Azure DevOps This is easy, however, you need to be a member of the Project Collection Administrator group. You can verify that from Organization Settings -> Permissions and then the Members tab. You should see your name ..read more

This is a quick post to share how you can use a single Azure DevOps repository for multiple wikis in Azure DevOps. This approach will help you avoid creating multiple repositories for each wiki and manage them in a single repository. Create a new repo for wiki Firs lets create a separate repository for the wiki. Create a repository I want to create two wiki for two teams in my project. So I have created subfolders for each team in the repository and have placed a sample markdown files in each folder. The idea is that each team will place their wiki content in their respective folder. Folder st ..read more

In this post, I would like to show you how we added custom scaling with KEDA using the Azure Portal — Thanks to the KEDA scaler, we have a dynamic scaling pool, which automatically scales when there are more jobs in the queue and scales back down when demand reduces. We run our Azure DevOps Build agents inside a container. This has allowed us to package various tools like kubectl, helm, and terraform are installed and available inside the agent image, which gives us control over versions of the tools we use — as we can execute our continuous integrations with consistent configuration. Also, ad ..read more

I host this blog on Netlify and source control is managed using GitHub. Often, I end up writing few blog posts together, but not necessarily want all of them published together. Jekyll allows to put future date in the post and it will not be published until that date. This lets me write blog posts on same day but end up publishing them later based on the date set for the post. However, this means that when you run jekyll build posts with future dates will be skipped and I will need to run jekyll build again on the post date to publish the blog posts. Same applies to Netlify. Curious how we can ..read more

As your team starts to deploy resources to Kubernetes regularly, it becomes necessary for you as a cluster administrator to maintain good standards and consistency of the Kubernetes resources. Be it, ensuring all the resources have set of labels, or ensuring you only pull images from your enterprise container registry. Gatekeeper is a well known policy enforcement tool using Open Policy Agent (OPA) - which is a opensource, Cloud Native Computing Foundation (CNCF) project. But did you know you can validate policies on your Kubernetes manifests before you deploy them on to the cluster? In this p ..read more

GitHub Actions is great in automating your workflows. However, as you start using various actions from GitHub Marketplace in your workflow, it will soon become necessary for you to keep the actions up-to-date. Actions might contain security fixes, bug fixes etc and manually keeping track of updates or updating them when a newer version is available is a lot of hassle. This is where we can use Depndabot can help is by automatically raising PR’s whenever there is a newer version of action is available used in the workflow. In this post, we will see quick way to keep the actions up-to-date using ..read more

Cosmos DB Emulator is great for developing against Azure Cosmos DB in your local environment. If you want to run the emulator on Mac/Linux though, the emulator is now in preview mode at the time of writing this and uses Docker to make it available. Recently I wanted to setup Cosmos DB Emulator on Mac, but I did not want to set it up such that I keep it running always on my Mac. Instead, I decided to use my Synology NAS to host the emulator directly on my NAS as it is built on Linux and also because it allows the emulator running and available for me all the time. In this post we will see how t ..read more

I have already written how to publish HELM chart to ACR using Azure DevOps and GitHub actions. But did you know you can also publish HELM3 charts (or any OCI compliant package) to GitHub Container Registry(GCR)? In this post we will see how to do that. Enable improved container support GitHub Container Registry is currently in public beta. So, the first step is to ensure that you have enabled the GitHub Container Registry for your account. If you have GitHub personal account, you can do that from Feature Preview window. If you have a Enterprise account, you can do that going to Settings page ..read more

In my previous post, we briefly covered how to publish a HELM chart to ACR using Azure DevOps. In this post we will use GitHub actions to build and publish HELM chart to ACR using GitHub Actions. We will also take a sneak peak how GitHub environments work. Pre-requisites I am going to assume ACR instance is setup using repository scoped tokens. Since we already covered setting up of ACR this way in the earlier post, I will not include the steps here. Setting up secrets at GitHub We would like store Azure Container Registry’s tokens as GitHub repository level secrets. To do that, click on Sett ..read more

Microsoft Cloud Adoption Framework (CAF) for Azure is a detailed guidance of patterns and practices to create and implement business and technology strategies necessary for organisations to move to the cloud. According to Microsoft, this guidance is adopted from various customers learnings from moving to cloud and Microsoft itself. In this post, we will see CAF’s starter template in Azure DevOps Demo generator helps customers Plan their cloud journey. The Cloud Adoption Framework documentation is neatly aligned to various phases (Strategy, Plan, Ready, Adopt, Govern and Organise) of customer’s ..read more