DevSecOps MVP

This repository represents our work in DevSecOps practices and tools, Continous Integration and Delivery for the Alaska DHSS modernization project. We performed a breadth-first survey of these things. Most topics exist as folders here and contain README.mds and various flavors of scripts.

This project aims to transform the way Alaska approaches implementation and support activities for its mission critical technology products. We plan to do this by taking deeper ownership of the product definition and the foundational processes and tools used in exchange for steeply reduced financial and functional risks of traditional, monolithic approaches. The foundation of this will be a State managed DevSecOps pipeline.

First, please read DevSecOps.md. It's our idea of what DevSecOps means and why we think it's good.

Development

Development.md has info about development environments like Windows-local and Docker. Tests.md has info about running included unit and integration tests.

Infrastructure

Azure.md has info about managing Azure, including user access.

Infrastructure.md has info about about automated infrastructure in Azure using things like

• Powershell
• ARM templates
• az CLI
• Terraform

The /appservice folder contains code and docs for the Azure App Service, i.e. the Azure PaaS.

The /sqlserver folder contains code and docs for MS SQL Server.

The /hybrid-connection folder contains docs for the Hybrid Connection

Example App

See https://github.com/AlaskaDHSS/ProtoWebApi for our prototype

CI, CD

See /vsts folder for documentation around the VSTS Build and Release pipelines. See /deploy folder for docs around deploying to the Azure AppService.