concourse integration with azure key vault - azure-keyvault

For a cloud-native greenfield project, we are planning to use concourse.
In the project, Azure Key Vault is selected as a secret management tool and I need to integrate concourse with it. In the documentation or examples, I could not see any clue to use both.
Is there a way or workaround to integrate both?
Thanks.

Related

Azure Data Factory CI/CD without using AzureDevOps & AzureRepo

With Azure Data Factory, mostly used with Azure Repo & for CI/CD, Azure DevOps is used.
Currently I am using Azure Data Factory, where the AzureRepo not configured and Azure DevOps is not to be used as DevOps need to be build around a framework which included GitLab, Concourse-CI , Terraform and other OpenSource tools. All the JSONs are exported & available on GitLab. From there Azure Data Factory need to be created on every check-in from the ARMs/ADF-JSONs.
Let me know if anyone has came across such scenarios and is there a way to publish Azure Data Factory without using AzureDevOps & AzureRepo.
Yes there is. The JSONs being exported are standard Azure Resource Manager (ARM) templates. These templates can be deployed from outside of Azure DevOps.
Here is how to deploy ARM templates using GitHub Actions
Another option would be to use Powershell New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateFile <path-to-template>
Basically anything on how to deploy ARM templates to Azure will allow for Data Factory pipelines and infrastructure to be deployed.

Using pulumi Vs aws cdk for infrastructure provisioning

I recently cake to know about pulumi and its capabilities for provisioning infrastructure. I want to draw a comparison between pulumi and aws cdk
Can any tell me what are features that pulumi supports and aws cdk cant? I went through the documentation and different blogs but I am not able to find a good comparison in between them. And why should I use pulumi?

Is there a way to host binaries on Azure DevOps kind of like GitHub allows?

I develop mostly desktop apps and class libraries, and I am struggling to find an way to host them using pipeline automation.
I know I can push them to a UNC, but then people need to know that path to find them. It works, but is not very user friendly.
What I would like is a way to host them on DevOps Server, like GitHub. On GitHub there is a Release section that you can go to and download the binaries of a project. I know Azure DevOps is geared toward webapps, but has anyone found a way to use build/release pipelines to automate the hosting of binary files?
I think what you are looking for is the Atifacts which is under the Test Plans in your project in Azure DevOps.
You can publish and download your binaries very easily here. Create a Feed and connect to it with any kinds of packages, including built in ones like NuGet and Maven, or you can customize it which called Universal packages in it.
You may find more useful information at Azure Artifacts documentation, learn what is Azure Artifacts and how you can publish and download you binaries via the CLI tool.

How to deploy frontend angular app and backend Django app on GCP at same time?

I have a Angular project and Django (backend) project. As of now I am using Gitlab CI/CD to deploy individual app on Google Cloud Platform. But In production environment in future I want to deploy my code at the same time. How to do this on Google Cloud Platform?
There are several tools for CI/CD on Google Cloud Platform. You could use Google App Engine with Cloud Build. You can find a pretty straightforward tutorial here. Or you could take advantage of the Gitlab Google Kubernetes Engine integration. You can find an example on the official documentation by going here.

How does Visual Studio Team Services Transport Secret Variables?

We are currently in the process of evaluating Visual Studio Team Services (VSTS) release management as our continuous deployment (CD) tool. My System Administrators are not crazy about storing any kind of password or secret in VSTS or any other CD tool without having a good understanding of what security is being used. I have already found documentation that describes how VSTS stores Secret Variables at rest, but what I can not find is documentation that describes what security VSTS uses to transports Secret Variables to the build/Release Agents. This is important because we will be deploying to on-premises pre-production environments which means the credentials and secrets entered into VSTS will be sent over the internet. So to sum up my question what encryption does VSTS use to communicate with agents.
Documentation on how VSTS secures Secret Variables at rest.
https://www.visualstudio.com/en-us/docs/build/define/variables#secret-variables
It's all standard HTTPS. No special protocols or encryption are involved.

Resources