Why we paid a bug bounty hunter

You can't make an omelette without breaking eggs - and this also applies to the construction of our services. But what happens if we are not thorough enough when it comes to decommissioning? We regularly create JFrog instances dynamically for the development of our service and also dismantle them after testing. The process is automated using Terraform, Crossplane and it's been deployed on Kubernetes. However, one small but crucial point has been overlooked: the deletion of all associated DNS entries.

4DIdentity - Part 2

Welcome to the second blog post about our new 4DIdentity service. In the first blog post, we reviewed our motivation to create this internal service and its architecture. Brief summary: We use it to enable single sign-on for internal applications and future managed services. 4DIdentity is based on the Amazon Cognito service from AWS. We consciously chose to run it completely serverless, highly resilient, fully manageable and built using Infrastructure as Code (IaC).

4DIdentity - Part 1

In this blog post series, we want to give you a sneak peek into how we develop and maintain our applications. We have recently developed an internal service called 4DIdentity. This service acts as our central identity provider for internally used tools like ArgoCD and HashiCorp Vault. We also plan to use it in our future managed service offerings, so stay tuned! When developing the 4DIdentity service, we leveraged a set of best practices.

DevOpsCon 2023 Berlin

Intro This year we joined the DevOpsCon in Berlin. Visiting together with our team the conference was a great experience. We can enjoy together the talks, the workshops, the networking and the city of Berlin. For most of us it was the first time in Berlin and we were very excited to visit the city. Last year we visited the KubeCon in Valencia and we were very excited to visit a much smaller conference this time.

4data is now a JFrog partner

We are thrilled to announced that 4data has partnered with JFrog, a leading provider of DevOpsSec technology solutions. As a company, we understand the challenges that come with managing complex software systems, and are committed to providing our customers with the most effective tools to streamline their processes, and improve their developer experience. That's why partnering with JFrog was a natural fit for us. The JFrog stack is a universal solution for housing and managing all of the artifacts, files, container images and open source libraries that your business relies on, in a secure way, while still maximising developer happiness.