Name: DevOps.js Conf 2022
Start: 2022-03-24T15:00:00.000Z
End: 2022-03-25T20:00:00.000Z

Lera

Sophie Kolbe

Varun

David Barry

Oscar Pagani

Ricardo Machado

Ian Sutherland

Aman Beg

Denis Radin

Norm Crandall

Andrea Martz

yuya-soneda

Christian Guy

Rahul Rana

Serge Bedzhyk

Rishi Narang

Vitor Barbosa

Matej

Claudia Stefan

Chinenye Onuegbu

Max Medina

Artem Metelskyi

Daniel Suchý

Mailing Delgado Medina

Martyna Skup

mickael

Mohamed Sibras

Victor Neves

Zain Fathoni

Ravi

Kateryna Pohrebniak

Jan Pfeiffer

Aprenda más sobre cómo aprovechar las características predeterminadas de los espacios de trabajo de npm para ayudarlo a administrar su proyecto monorepo, mientras también explora algunas de las nuevas características de npm cli. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Elevando Monorepos con los Espacios de Trabajo de npm

NPM workspaces help manage multiple nested packages within a single top-level package, improving since the release of NPM CLI 7.0. You can easily add dependencies to workspaces and handle duplications. Running scripts and orchestration in a monorepo is made easier with NPM workspaces. The npm pkg command is useful for setting and retrieving keys and values from package.json files. NPM workspaces offer benefits compared to Lerna and future plans include better workspace linking and adding missing features.

Learn more about how to leverage the default features of npm workspaces to help you manage your monorepo project while also checking out some of the new npm cli features. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Levelling up Monorepos with npm Workspaces

Ruy Adorno

La demanda de DevOps ha aumentado en los últimos años a medida que más organizaciones adoptan tecnologías nativas de la nube. La complejidad también ha aumentado y una mentalidad de "cero a héroe" deja a muchas personas persiguiendo la perfección y FOMO. Esta sesión se centra en cambio en por qué tal vez no deberíamos adoptar una práctica tecnológica y cómo a veces los equipos pueden lograr los mismos resultados priorizando a las personas sobre la automatización y controles de operaciones. Veamos las cantidades y el ajuste fino de todo como código, solicitudes de extracción, DevSecOps, Monitoreo y más para priorizar el bienestar del desarrollador sobre la perfección de la optimización. Puede ser una decisión válida desplegar menos y dormir mejor. Y finalmente examinaremos cómo la práctica manual y la disciplina pueden ser la clave para productos y experiencias superiores.

Ajustando DevOps para las Personas sobre la Perfección

DevOps is a journey that varies for each company, and remote work makes transformation challenging. Pull requests can be frustrating and slow, but success stories like Mateo Colia's company show the benefits of deploying every day. Challenges with tools and vulnerabilities require careful consideration and prioritization. Investing in documentation and people is important for efficient workflows and team growth. Trust is more important than excessive control when deploying to production.

Demand for DevOps has increased in recent years as more organizations adopt cloud native technologies. Complexity has also increased and a "zero to hero" mentality leaves many people chasing perfection and FOMO. This session focusses instead on why maybe we shouldn't adopt a technology practice and how sometimes teams can achieve the same results prioritizing people over ops automation &amp; controls. Let's look at amounts of and fine-tuning everything as code, pull requests, DevSecOps, Monitoring and more to prioritize developer well-being over optimization perfection. It can be a valid decision to deploy less and sleep better. And finally we'll examine how manual practice and discipline can be the key to superb products and experiences.

Fine-tuning DevOps for People over Perfection

Julie Ng

Todos nos hemos preguntado esto mientras esperamos una eternidad a que termine nuestro trabajo de CI. Un CI lento no solo arruina la productividad del desarrollador, rompiendo nuestra concentración, sino que también cuesta dinero en tarifas de computación en la nube y desperdicia enormes cantidades de electricidad. Vamos a adentrarnos en por qué ocurre esto y cómo podemos solucionarlo con herramientas mejores y más rápidas.<a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

¿Por qué es tan lento el CI?

Slow CI has a negative impact on productivity and finances. Debugging CI workflows and tool slowness is even worse. Dependencies impact CI and waiting for NPM or YARN is frustrating. The ideal CI job involves native programs for static jobs and lightweight environments for dynamic jobs. Improving formatter performance and linting is a priority. Performance optimization and fast tools are essential for CI and developers using slower hardware.

We've all asked ourselves this while waiting an eternity for our CI job to finish. Slow CI not only wrecks developer productivity breaking our focus, it costs money in cloud computing fees, and wastes enormous amounts of electricity. Let’s take a dive into why this is the case and how we can solve it with better, faster tools. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Why is CI so Damn Slow?

Nicholas Yang

Aprenderás sobre uno de los gestores de paquetes más populares para JavaScript y sus ventajas sobre npm y Yarn.<ul><li>Una breve historia de los gestores de paquetes de JavaScript</li><li>La estructura aislada de node_modules creada por pnpm</li><li>Qué hace que pnpm sea tan rápido</li><li>Qué hace que pnpm sea eficiente en el uso del espacio en disco</li><li>Soporte para monorepos</li><li>Gestión de versiones de Node.js con pnpm</li></ul> <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

pnpm: un gestor de paquetes rápido y eficiente para JavaScript

pnpm is a fast and efficient package manager that gained popularity in 2021 and is used by big tech companies like Microsoft and TikTok. It has a unique isolated node module structure that prevents package conflicts and ensures each project only has access to its own dependencies. pnpm also offers superior monorepo support with its node module structure. It solves the disk space usage issue by using a content addressable storage, reducing disk space consumption. pnpm is incredibly fast due to its installation process and deterministic node module structure. It also allows file linking using hardlinks instead of symlinks.

You will learn about one of the most popular package managers for JavaScript and its advantages over npm and Yarn.<ul><li>A brief history of JavaScript package managers</li><li>The isolated node_modules structure created pnpm</li><li>What makes pnpm so fast</li><li>What makes pnpm disk space efficient</li><li>Monorepo support</li><li>Managing Node.js versions with pnpm</li></ul> <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

pnpm – a Fast, Disk Space Efficient Package Manager for JavaScript

Zoltan Kochan

Vite, el servidor de desarrollo ESM desagregado y el HMR rápido, son revolucionarios para la experiencia de desarrollo (DX). Pero Vite también brilla al construir tus aplicaciones en producción.Esta charla profundizará en cómo encajan las piezas principales para empaquetar y minimizar tu código:<ul><li>La construcción de Vite como una configuración de Rollup con opiniones.</li><li>Cómo se utiliza esbuild como un transpilador rápido de TS y JSX y un minificador.</li><li>El pipeline de plugins de producción.</li></ul>Los frameworks modernos (Nuxt, SvelteKit, Astro, entre otros) han elegido Vite, mejorando la experiencia de desarrollo (DX) y las optimizaciones para su caso de uso objetivo.Descubriremos Vite como un conjunto de herramientas pulido y extensible para crear aplicaciones modernas optimizadas. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

El funcionamiento interno de la construcción de Vite

Welcome to vidBuild, a tool that optimizes your application for production by offering fast hodgemodule replacement and support for various technologies. The build process in vidBuild involves optimizing and minifying assets, bundling JS and CSS, and generating chunks for dynamic imports. The pipeline in vidBuild includes plugins for alias, resolution, CSS modules, and asset handling. Vid is a complete build tool with a flexible plugin system and support from a vibrant community. Vite's plugin API is compatible with Rollup, and Vite aims for simplicity while pushing complexity to the plugin system.

Vite unbundled ESM dev server and fast HMR are game-changing for DX. But Vite also shines when building your production applications.This talk will dive into how the main pieces fit together to bundle and minify your code:<ul><li>Vite build as an opinionated Rollup setup.</li><li>How esbuild is used as a fast TS and JSX transpile and a minifier.</li><li>The production plugins pipeline.</li></ul>Modern frameworks (Nuxt, SvelteKit, Astro, among others) have chosen Vite, augmenting the DX and optimizations for their target use case.We'll discover Vite as a polished and extendable toolkit to craft optimized modern apps. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

The Inner Workings of Vite Build

Matias Capeletto

En los últimos años, Yarn se ha convertido en una de las herramientas más comunes utilizadas para desarrollar proyectos de JavaScript, en gran parte gracias a un conjunto de principios rectores. Pero, ¿cuáles son? ¿Cómo se aplican en la práctica a Yarn? Y, lo que es igual de importante, ¿cómo te benefician a ti y a tus proyectos? En esta charla no nos adentraremos en pruebas de rendimiento o conjuntos de características: en su lugar, aprenderás cómo abordamos el desarrollo de Yarn, cómo exploramos nuevos caminos, cómo mantenemos nuestro código saludable y, en general, por qué creemos que Yarn se mantendrá firmemente establecido en nuestro ecosistema en los próximos años. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

La filosofía de Yarn

Let's talk about React and TypeScript, Yarn's philosophy and long-term relevance, stability and error handling in Yarn, Yarn's behavior and open source sustainability, investing in maintenance and future contributors, contributing to the JavaScript ecosystem, open-source contribution experience, maintaining naming consistency in large projects, version consistency and strictness in Yarn, and Yarn 4 experiments for performance improvement.

In the past years Yarn took a spot as one of the most common tools used to develop JavaScript projects, in no small part thanks to an opinionated set of guiding principles. But what are they? How do they apply to Yarn in practice? And just as important: how do they benefit you and your projects? In this talk we won't dive into benchmarks or feature sets: instead, you'll learn how we approach Yarn’s development, how we explore new paths, how we keep our codebase healthy, and generally why we think Yarn will remain firmly set in our ecosystem for the years to come. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

The Zen of Yarn

Maël Nison

Los equipos están creciendo cada vez más siguiendo la arquitectura de microfrontends. La observabilidad para los equipos a gran escala se vuelve aún más importante para poder identificar posibles problemas en tiempo de ejecución, así como separar las responsabilidades. En esta presentación aprenderemos cómo lograrlo.<a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Observabilidad para Microfrontends

Microfrontends follow the microservices paradigm and observability is crucial for debugging runtime production issues. Error boundaries and tracking errors help identify and resolve issues. Automation of alerts improves incident response. Observability can help minimize the time it takes to understand and resolve production issues. Catching errors from the client and implementing boundaries can be done with tools like OpenTelemetry.

Teams are getting bigger and bigger following the micro-frontends architecture. Observability for teams on a scale becomes even more important in order not only to be able to identify potential issues in the runtime, but also separating the responsibilities. In this presentation we’ll learn how this can achieved. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Observability for Microfrontends

Konstantinos Leimonis

Walt te mostrará 2 formas de crear rápidamente un sitio web en Vultr: desde cero utilizando archivos HTML y CSS con Object Storage, y con el Marketplace de 1 clic de Vultr. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Cómo crear un sitio web utilizando Vultr Object Storage y Vultr Marketplace

Vulture's developer advocate introduces the three main product categories and offers a free credit code for sign up. The marketplace allows users to easily launch instances and offers a variety of apps and services. Developers can join the marketplace to submit their own apps and monetize them. Vulture provides features like automatic backups, DDoS protection, and support for custom ISOs.

Walt will show you 2 ways to quickly create a website on Vultr - from scratch using an HTML and CSS files with Object Storage, and with Vultr's 1-click Marketplace. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

How to create a website using Vultr Object Storage and Vultr Marketplace

Walt Ribeiro

Desplegar y gestionar aplicaciones JavaScript en Kubernetes puede volverse complicado. Especialmente cuando una base de datos también debe formar parte del despliegue. MongoDB Atlas ha facilitado mucho la vida de los desarrolladores, sin embargo, ¿cómo se integra un producto SaaS con su clúster de Kubernetes existente? Aquí es donde entra en juego el Operador de MongoDB Atlas. En este masterclass, los asistentes aprenderán cómo crear una aplicación MERN (MongoDB, Express, React, Node.js) localmente y cómo desplegar todo en un clúster de Kubernetes con el Operador de Atlas. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Despliegue de Aplicación MERN Stack en Kubernetes

The Workshop covered building a full stack JavaScript application using the MERN stack, including the back end with a MongoDB database and Express server, and the front end with React. The application was containerized using Docker and deployed to a Kubernetes cluster. The workshop also covered using operators for managing databases and ensuring secure service communication in Kubernetes. The final application was highly available and the GitHub repo with all the code and steps was shared.

Deploying and managing JavaScript applications in Kubernetes can get tricky. Especially when a database also has to be part of the deployment. MongoDB Atlas has made developers' lives much easier, however, how do you take a SaaS product and integrate it with your existing Kubernetes cluster? This is where the MongoDB Atlas Operator comes into play. In this workshop, the attendees will learn about how to create a MERN (MongoDB, Express, React, Node.js) application locally, and how to deploy everything into a Kubernetes cluster with the Atlas Operator. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

MERN Stack Application Deployment in Kubernetes

Joel Lord

<div>En esta charla, aprenderás cómo optimizar tu flujo de trabajo de desarrollo y lanzamiento de Node.js en Kubernetes con Skaffold y Rancher Desktop. El uso conjunto de estas herramientas ayuda a mejorar la experiencia de desarrollo local de K8s, reflejando una experiencia de clúster real, así como el flujo de trabajo de lanzamiento que tendrías para tu clúster remoto. Cubriremos los desafíos del desarrollo local de Kubernetes, cómo ayudan Skaffold y Rancher Desktop, demostraciones de lanzamientos locales a un clúster y cómo utilizar la misma configuración para lanzamientos en clústeres remotos.</div> <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Optimizar flujos de trabajo de desarrollo de Node.js en Kubernetes con Skaffold y Rancher Desktop

Lucan de Muela discusses how to optimize Node.js development workflows in Kubernetes using Scaffold and Rancher Desktop. He highlights the developer experience, cluster management simplification with Rancher Desktop, and build/release workflow optimization with Scaffold. He also mentions the ability to update Kubernetes versions and choose a container runtime, as well as the option to reset the cluster for a safe development environment.

<div>In this talk, you will learn how to optimise your Node.js development and release workflow to Kubernetes with Skaffold and Rancher Desktop. Using these tools together helps enhance the local K8s development experience mirroring a real cluster experience, as well as the release workflow you would have for your remote cluster. We will cover the challenges of local Kubernetes development, how Skaffold and Rancher Desktop help, demonstrations of local releases to a cluster and how to use the same configuration for remote cluster releases.</div> <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Optimize Node.js Development Workflows in Kubernetes with Skaffold and Rancher Desktop

Lukonde Mwila

¿Cómo actualizar cientos de proyectos de una vez? Con el rápido crecimiento de las organizaciones, la demanda de escalabilidad de los equipos crece, lo que afecta directamente la estructura y propiedad de los proyectos. El dilema habitual es mono vs. multi-repos, pero... ¿Y si te digo que no importa mucho? Ambos enfoques pueden golpearte en algún momento, así que tal vez es mejor pensar de abajo hacia arriba. Hoy te guiaré a través de algunos de los mayores desafíos que existen en ambos enfoques, como la gestión de dependencias en cientos de proyectos, las actualizaciones globales de código y muchas otras cosas. También te mostraré ejemplos de cómo resolvimos esto dentro de Infobip mediante la construcción de nuestras propias bibliotecas internas. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

La Guía del Desarrollador Perezoso: ¿Cómo Automatizar las Actualizaciones de Código?

Code automations can save time and effort in development tasks. There are tools and examples available for automating tasks like updating dependencies and code formatting. Automation allows teams to focus on valuable work and improves overall performance. Deciding when to automate depends on the impact and type of code. The last automated task discussed was applying translation updates to multiple projects.

How to update hundreds of projects all at once? With organizations rapidly growing, demand for the scalability of the teams grows which directly impacts projects structure and ownership. The usual dilemma is mono- vs. multi-repos, but ... What if I tell you that it does not matter much? Both approaches can punch you in the face at some point, so perhaps it is better to think bottom-up. Today I will walk you through some of the biggest challenges that exist in both approaches and those are managing dependencies across a few hundred projects, global code updates and many other things. I will also show you examples of how we solved this inside Infobip through building our own internal libraries. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

The Lazy Developer Guide: How to Automate Code Updates?

Ante Tomić

Las Azure Static Web Apps se lanzaron a principios de 2021 y, de forma predeterminada, pueden integrar su repositorio existente y implementar su aplicación web estática desde Azure DevOps. Este masterclass demuestra cómo publicar una Azure Static Web App con Azure DevOps. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Azure Static Web Apps (SWA) con Azure DevOps

Thanks for joining us today! We'll have a workshop about Azure Static Web Apps with Azure DevOps. To get started, click the documentation link to find quick starts for various frameworks. You'll need an active Azure account, which you can create for free. Create a deployment pipeline by providing the necessary arguments and creating a variable with the deployment token. Finally, to clean up after the workshop, go back to the Azure portal and delete the resource group. Additional resources include complete documentation and free courses on Microsoft Learn for Azure Static Web Apps and various frameworks.

Azure Static Web Apps were launched earlier in 2021, and out of the box, they could integrate your existing repository and deploy your Static Web App from Azure DevOps. This workshop demonstrates how to publish an Azure Static Web App with Azure DevOps. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Azure Static Web Apps (SWA) with Azure DevOps

Juarez Barbosa Junior

Como todos sabemos, lidiar con YAML de Kubernetes no es muy intuitivo (especialmente para aquellos que recién comienzan) y cuanto más recursos y dependencias se agregan, más desordenado y complejo se vuelve el proceso. En esta charla, exploraremos cómo podemos usar TypeScript y Deno para agregar tipado, composición, reutilización de código y pruebas como alternativa a YAML, que no incluye estas capacidades, todo mientras sigue siendo declarativo y fácil de usar.<a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Experimentando con Deno para facilitar las implementaciones de Kubernetes

The Talk discusses using Dino and TypeScript to simplify writing and managing Kubernetes YAML configurations. It explores the challenges of working with large YAML files and introduces a unique solution. The Talk also highlights the features and benefits of Deno, such as its secure runtime and powerful typing capabilities. It demonstrates how Deno can be used to create and modify Kubernetes objects, and emphasizes the advantages of using a general-purpose language for configuration. The Talk concludes by discussing the potential applications of this approach beyond Kubernetes deployments.

As we all know, dealing with Kubernetes YAML is not very intuitive (especially for those just getting starting) and the more resources and dependencies are added the messier and more complex the process becomes. In this talk, we'll explore how we can use Typescript and Deno to bring typing, composition, code-reuse, and testing as an alternative to YAML - that doesn't include these capabilities, all while still remaining declarative and easy to use. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Experimenting with Deno for Easier Kubernetes Deployments

Yshay Yaacobi

El masterclass ofrece una perspectiva práctica de los principios clave necesarios para desarrollar, construir y mantener un conjunto de microservicios en el stack Node.js. Cubre los detalles específicos de la creación de servicios TypeScript aislados utilizando el enfoque de monorepo con lerna y yarn workspaces. El masterclass incluye una descripción general y un ejercicio en vivo para crear un entorno en la nube con el framework Pulumi y los servicios de Azure. Las sesiones están dirigidas a los mejores desarrolladores que deseen aprender y practicar técnicas de construcción e implementación utilizando el stack Azure y Pulumi para Node.js.<a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Cómo desarrollar, construir e implementar microservicios Node.js con Pulumi y Azure DevOps

The Workshop is about deploying Node.js microservices with Pulumi and Azure. It covers Docker, Kubernetes, Azure, and Pulumi concepts. The project uses a Monorepo approach and relies on gRPC and protocol buffers for communication between microservices. Pulumi is a flexible tool for creating infrastructure as code and supports multiple languages. The workshop also explores deploying applications with Helm in Kubernetes and discusses future plans for exploring microservices and database separation.

The workshop gives a practical perspective of key principles needed to develop, build, and maintain a set of microservices in the Node.js stack. It covers specifics of creating isolated TypeScript services using the monorepo approach with lerna and yarn workspaces. The workshop includes an overview and a live exercise to create cloud environment with Pulumi framework and Azure services. The sessions fits the best developers who want to learn and practice build and deploy techniques using Azure stack and Pulumi for Node.js. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

How to develop, build, and deploy Node.js microservices with Pulumi and Azure DevOps

Alex Korzhikov

Andrew Reddikh

Aprende las mejores prácticas de seguridad para Kubernetes y especialmente para asegurar aplicaciones construidas con NodeJS que se ejecutan en Kubernetes. Hablaremos sobre cómo asegurar el clúster, tus contenedores Node.js y más. También veremos cómo utilizar OIDC para asegurar el acceso a los clústeres. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Cómo asegurar tus contenedores Node.js en Kubernetes con las mejores prácticas

Today's talk is about securing Kubernetes containers, especially for Node.js. The best practices for securing Kubernetes include using RBAC, OIDC, and secrets, as well as isolating workloads and securing container images. OADC is recommended for authentication in Kubernetes, and securing the Kubernetes cluster is crucial. Cloud-based Kubernetes clusters can utilize OADC or the default authentication mechanism provided by the cloud provider. Managing team size and dealing with different security philosophies are important considerations. Overall, securing Kubernetes is essential for protecting the infrastructure and data.

Learn security best practices for Kubernetes and especially for securing applications built with NodeJS running on Kubernetes. We will talk about securing the cluster, your Node.js containers, and more. We will also look at how to use OIDC to secure access to the clusters. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

How to Secure Your Node.js Containers on Kubernetes With Best Practices

Deepu K Sasidharan

En esta charla, el experto en micro frontends Florian Rappl presentará el patrón de creación de una interfaz de usuario sin servidor. Esta es una interfaz de usuario compuesta por diferentes piezas que pueden desarrollarse de forma independiente y desplegarse sin necesidad de tener o gestionar ningún servidor. Florian te mostrará cómo empezar en este espacio, qué decisiones tomar y qué obstáculos debes evitar.<a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Serverless para Frontends

Welcome to my session on Serverless for Front-ends. Serverless functions eliminate the need for a runtime and handle orchestration for you. Microfrontends require a runtime and orchestration, but side-less UIs provide a runtime-free solution. In the demo, a new team adds functionality to an application and publishes it easily. Building and deploying applications is quick and easy with micro apps and PowerCLI, offering true loose coupling and instant availability without a runtime.

In this talk micro frontend expert Florian Rappl will introduce the pattern of creating a Siteless UI. This is a frontend composed of different pieces that can be developed independently and are deployed without having or managing any server. Florian will show you how to get started in that space, what decisions to take, and what pitfalls you should avoid. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Serverless for Frontends

Florian Rappl

En esta masterclass repasaremos todos los aspectos y etapas al integrar tu proyecto en el ecosistema de Calidad y Seguridad del Código. Tomaremos una aplicación web simple como punto de partida y crearemos un pipeline de CI que active el monitoreo de calidad del código. Realizaremos un ciclo completo de desarrollo, comenzando desde la codificación en el IDE y abriendo una Pull Request, y te mostraré cómo puedes controlar la calidad en esas etapas. Al final de la masterclass, estarás listo para habilitar esta integración en tus propios proyectos.<a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Aporta Calidad y Seguridad al pipeline de CI/CD

The Workshop introduces Sonar products for code quality and security, including SonarLint, SonarQube, and SonarCloud. It covers setting up SonarLint, configuring rules in SonarCloud, and connecting SonarLint to SonarCloud. The Workshop also explains how to configure GitHub Actions for running tests and generating coverage, and how to use SonarCloud's quality gate and new code analysis. Sonar Cloud supports multiple languages and platforms and has a strong community support system.

In this workshop we will go through all the aspects and stages when integrating your project into Code Quality and Security Ecosystem. We will take a simple web-application as a starting point and create a CI pipeline triggering code quality monitoring for it. We will do a full development cycle starting from coding in the IDE and opening a Pull Request and I will show you how you can control the quality at those stages. At the end of the workshop you will be ready to enable such integration for your own projects. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Bring Code Quality and Security to your CI/CD pipeline

Elena Vilchik

Únete a nosotros en un masterclass en el que desplegarás una aplicación Node.js simple construida con componentes web y configurarás un flujo de integración continua (CI). Aprenderás sobre el poder del Lightning Web Runtime (LWR) y las GitHub Actions. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Despliega una aplicación de componentes web y configura un flujo de integración continua

We'll be using Node version 14 or 16 and GitHub Actions for continuous integration. We'll create a Lightning Web Runtime application and assemble web components into a single-page app. We'll add code quality tools and explore configuration files. We'll set up testing, create a Git repository, and configure CI workflows using GitHub Actions. Finally, we'll explore bonus tasks such as adding badges to the readme and creating pre-commit hooks with Husky.

Join us for a workshop in which you’ll deploy a simple Node.js app built with Web Components and set up a Continuous Integration (CI) workflow. You’ll learn about the power of the Lightning Web Runtime (LWR) and GitHub Actions. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Deploy a Web Component App and Set Up a Continuous Integration Workflow

Philippe Ozil

En esta sesión, utilizaré una demostración para demostrar cómo puedes tomar fácilmente el control de la calidad de tu código con SonarCloud. Verás cómo una metodología simple y automatizada garantiza que tú y tu equipo solo comprometan Código Limpio. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

¡Un Enfoque Simple pero Poderoso para el Código Limpio!

This Talk introduces the concept of CleanCode in DevOps workflows, highlighting the benefits of efficient and maintainable code. The use of SonarCloud and the Sonar Solution is showcased as an easy way to add clean code to the workflow, providing valuable insights and metrics. Analyzing pull requests and triaging issues is emphasized as a proactive approach to catching and correcting code issues before they reach the main branch.

In this session, I'll use a demo to demonstrate how you can easily take ownership of your Code Quality with SonarCloud. You'll see how a simple, automated methodology ensures you and your Team to only commit Clean Code. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

A Simple, Yet Powerful Approach to Clean Code!

Clint Cameron

Cuando trabajamos con un monorepo, nos enfrentamos a múltiples desafíos: instalación de paquetes, vinculación de paquetes, procesos de desarrollo (compilación, linting, pruebas) y procesos de implementación. Estos desafíos varían según el tipo de artefactos en nuestro monorepo (microservicios, aplicaciones de frontend, paquetes, etc.). Exploraremos diferentes enfoques y herramientas para monorepos y sus ventajas y desventajas.<a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

1001 Paquetes: Estrategias para gestionar Monorepos

This Talk discusses strategies for managing monorepos, including release strategies, building strategies, development processes, and linking packages. The speaker highlights the challenges and complexities of monorepos, such as large codebases and potential coupling of software parts. They also mention the importance of suitable tooling for successful monorepo management and the potential for standardization in the future. Additionally, the speaker shares their personal journey in programming, starting at a young age and expressing their love for the field.

When working with a monorepo, there are multiple Challenges: packages installation, packages linking, development processes (build, lint, testing) and deployment processes. Those challenges vary the type of artifacts in our monorepo (micro services, FE App, packages etc.). We will explore different approaches and tools for monorepos and their pro and cons. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

1001 Packages – Strategies for Managing Monorepos

Tally Barak

Repasaremos la configuración de Sentry paso a paso para obtener visibilidad en nuestro frontend y backend. Una vez integrado, rastrearemos y solucionaremos errores + transacciones que se muestren en Sentry desde nuestros servicios para comprender por qué/dónde/cómo ocurrieron errores y ralentizaciones dentro de nuestro código de aplicación. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Seguimiento de errores y ralentizaciones en aplicaciones JS utilizando Sentry

This Workshop on Sentry and Application Monitoring covers topics such as tracking errors and slowdowns in JS applications, integrating Sentry into React and Express, setting up alerts and notifications, analyzing error details and performance, and using dashboards and the sandbox. It also highlights the importance of code observability, the use of source maps for deciphering minified code, and the ability to trace errors from front end to back end. Additionally, it mentions the features of performance monitoring, such as analyzing transactions and using web vitals. Data scrubbing tools and GDPR compliance are also emphasized.

We'll go through setting up Sentry step--step to get visibility into our frontend and backend. Once integrated, we will track and triage errors + transactions surfaced Sentry from our services to understand why/where/how errors and slowdowns occurred within our application code. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Tracking errors and slowdowns across JS applications using Sentry

Simon Zhong

Hoy en día, no necesitas una contraseña separada para cada sitio web en el que inicias sesión. Sin embargo, gracias a la deuda tecnológica y la tradición, muchos profesionales de DevOps todavía tienen que lidiar con una gran cantidad de claves SSH para acceder a los servidores en los que a veces necesitamos estar. Con OAuth moderno, un solo inicio de sesión y un segundo factor para demostrar tu identidad son suficientes para acceder de forma segura a todos los servicios a los que tienes autorización. ¿Y si SSHing en servidores fuera tan fácil? En este masterclass, utilizaremos la herramienta de Acceso Avanzado a Servidores de Okta (anteriormente ScaleFT) para experimentar una forma en que el sueño de enviar claves SSH como la contraseña se ha hecho realidad. - discutiremos cómo funciona ASA y cuándo es la herramienta adecuada para el trabajo- guiaremos el proceso de configuración de una cuenta de prueba gratuita de Okta para usar ASA, y la configuración de la puerta de enlace ASA y el servidor en servidores Linux- luego nos conectaremos por SSH a nuestros hosts con los clientes ASA sin necesidad de proporcionar una clave SSH desde nuestras laptops- revisaremos los registros de auditoría de nuestras sesiones SSH para examinar qué comandos se ejecutaron <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Autenticación sin contraseña para servidores: práctica con ASA

This Workshop introduces Okta's ASA tool for managing server access and explores the concepts of authentication and authorization. It discusses the challenges of managing SSH keys and the benefits of using one-time use keys. The Workshop also explains how Okta's ASA simplifies server access by reusing an identity provider. It provides a step-by-step guide for setting up and managing authorization and authentication using Okta's ASA. Finally, it covers the process of setting up servers and clients, as well as the cleanup after testing.

These days, you don't need a separate password for every website you log into. Yet thanks to tech debt and tradition, many DevOps professionals are still wrangling a host of SSH keys to access the servers where we sometimes need to be. With modern OAuth, a single login and second factor to prove your identity are enough to securely get you into every service that you're authorized to access. What if SSHing into servers was that easy? In this workshop, we'll use Okta's Advanced Server Access tool (formerly ScaleFT) to experience one way that the dream of sending SSH keys the way of the password has been realized. - we'll discuss how ASA works and when it's the right tool for the job- we'll walk through setting up a free trial Okta account to use ASA from, and configuring the ASA gateway and server on Linux servers- we'll then SSH into our hosts with the ASA clients without needing to supply an SSH key from our laptops- we'll review the audit logs of our SSH sessions to examine what commands were run <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Passwordless Auth to Servers: hands on with ASA

E. Dunham

El beneficio de las dependencias de software es que permiten a los desarrolladores entregar software más rápido, basándose en código previo. Las dependencias son una parte integral del ciclo de desarrollo de software y se utilizan en diferentes etapas, como desarrollo, ejecución o pruebas. Sin embargo, las dependencias no solo pueden introducir riesgos que a menudo se pasan por alto, sino que también se debe tener en cuenta su resolución rápida y el cumplimiento de los tipos de licencia. En esta sesión extremadamente rápida, veremos algunas de las ventajas de usar un administrador de artefactos maduro y robusto para npm, bower y otros administradores de paquetes. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Todo sobre las dependencias

Today's presentation discusses the role of dependencies in software development, including different types of dependencies and their impact on development and maintenance. The talk also highlights incidents related to software dependencies, such as naming disputes and compromised credentials, which have led to system failures and security breaches. Efforts are being made to address these issues with tools like X-Ray and scorecards that provide analysis and insights for improvement.

The benefit of software dependencies is that they allow developers to deliver software faster building on previous code. Dependencies are integral part of the software development cycle and they will be used at different stages i.e. development, execution or testing. Yet dependencies not only may introduce risks that are often overlooked, but their fast resolution and compliance with license types must be taken into consideration. In this extremely fast session we will see some of the advantages of using a mature, robust artifact manager for npm, bower and other package managers. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

All About Dependencies

Ixchel Ruiz

¿Quieres lanzar tus aplicaciones más rápidamente con menor riesgo? Los Feature Flags hacen esto posible. Esta masterclass demostrará concretamente que esto es posible y fácilmente alcanzable. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Lanzamiento más rápido de aplicaciones JavaScript con Feature Flags

Welcome to the Releasing React Apps Faster with Feature Flags talk. Feature flags alleviate problems in the development process by allowing for the creation of feature flags instead of branches. By using feature flags, incomplete versions can be deployed, reviewed, approved, merged, and deployed without errors for customers. Feature flags also enable low-risk deployments, testing in production, gradual release processes, and the ability to quickly turn off features if issues arise.

Do you want to release your applications more rapidly with lower risk? Feature flags make this possible. This talk will concretely demonstrate that this is possible and easily within your reach. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Releasing JavaScript Applications Faster with Feature Flags

David Burrowes

Obtendrás conocimiento sobre los conceptos de GitHub Actions, como:- El concepto de secretos de repositorio.- Cómo agrupar pasos en trabajos con un propósito determinado.- Dependencias y orden de ejecución de trabajos: ejecutar trabajos en secuencia y en paralelo, y el concepto de matriz.- Cómo dividir la lógica de los eventos de Git en diferentes archivos de flujo de trabajo (en empuje de rama, en empuje a master/principal, en etiqueta, en implementación).- Para respetar el concepto de DRY (No te repitas), también exploraremos el uso de acciones comunes, tanto dentro del mismo repositorio como desde un repositorio externo. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Potenciando tu CI/CD con GitHub Actions

Welcome to this workshop on CICD in GitLab Actions and Terraform. The workshop covers building workflows from scratch, creating reusable actions and workflows, and destroying infrastructure. It also explores common actions and code reuse, remote composite actions, and centralized repositories. The workshop demonstrates the power of reusable workflows and how they can be called from another workflow. It emphasizes the simplicity and flexibility of using reusable workflows to deploy to different environments.

You will get knowledge about GitHub Actions concepts, like:- The concept of repository secrets.- How to group steps in jobs with a given purpose.- Jobs dependencies and order of execution: running jobs in sequence and in parallel, and the concept of matrix.- How to split logic of Git events into different workflow files (on branch push, on master/main push, on tag, on deploy).- To respect the concept of DRY (Don't Repeat Yourself), we will also explore the use of common actions, both within the same repo and from an external repo. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Powering your CI/CD with GitHub Actions

David Rubio Vidal

¿Sabes qué está pasando realmente en tu carpeta node_modules? Los ataques a la cadena de suministro de software han explotado en los últimos 12 meses y solo están acelerando en 2022 y más allá. Nos sumergiremos en ejemplos de ataques recientes a la cadena de suministro y en los pasos concretos que puedes tomar para proteger a tu equipo de esta amenaza emergente.<a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Es un mundo salvaje ahí fuera: ¿Qué está pasando realmente dentro de tu carpeta node_modules?

The Talk discusses the recent compromise of the UA parser.js package and the need for supply chain security in the open source community. It explores the reasons for security risks in open source and the need for a new approach to detect and block malicious dependencies. The different attack vectors and maintainer vulnerabilities are also discussed. The speaker emphasizes the importance of evaluating packages and protecting your app, as well as the need for a mindset shift in how we view open source. The Talk concludes with an introduction to Socket.dev, a tool focused on supply chain attack detection.

Do you know what’s really going on in your node_modules folder? Software supply chain attacks have exploded over the past 12 months and they’re only accelerating in 2022 and beyond. We’ll dive into examples of recent supply chain attacks and what concrete steps you can take to protect your team from this emerging threat. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

It's a Jungle Out There: What's Really Going on Inside Your Node_Modules Folder

Feross Aboukhadijeh

Aprende sobre herramientas para rastrear datos desde el frontend hasta el backend y aumentar la visibilidad de errores y rendimiento. Repasaremos cómo saber qué equipos son responsables de cada error, cuál es su impacto y todo el contexto necesario para resolverlo. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Monitoreo de Errores y Ralentizaciones en Aplicaciones JS

Sentry is an error monitoring platform that helps developers optimize the customer experience by alerting them of errors and slowdowns. It supports all major languages and frameworks, with a focus on error monitoring, performance monitoring, and release health. The Talk explores how Sentry organizes and represents error data, analyzes error details and tags, and investigates backend issues, performance problems, and release health. Collaboration with backend teams is emphasized to resolve issues and optimize transaction time. The Talk also highlights the importance of analyzing graphs, issues, and regressions to identify areas for improvement in release health.

Learn about tools to trace frontend to backend data and increase visibility on errors and performance. We'll go through how to know which teams are responsible for which error, what the impact is, and all the context needed to solve it. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Monitoring Errors and Slowdowns Across JS Applications

<div>Las pruebas de seguridad tradicionales para aplicaciones JS se han centrado en el front-end, pero los problemas de seguridad reales suelen estar en la API REST de respaldo. Únase al cofundador de StackHawk, Scott Gerlach, para obtener una breve descripción de por qué necesita repensar cómo prueba sus aplicaciones JS y cómo StackHawk puede ayudarlo a encontrar y solucionar rápidamente problemas de seguridad.</div> <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Pruebas automatizadas de seguridad de aplicaciones

StackHawk is a dynamic application security testing tool that helps you find and fix security bugs in your running applications. It runs active security tests on your REST API, GraphQL API, SOAP API, server-side application, and single-page applications. StackHawk ensures that your application handles user input and output safely and follows OWASP top 10 best practices for application security. We make dynamic testing fast by placing the scanner close to the application and using open standards to inform the scanner. The scanner is configured via YAML, and findings are triaged to provide simple descriptions and examples for issue identification and resolution. You can push the identified issues to a JIRA ticket for prioritization and resolution. Once triaged, the scanner will remember the issues and stop notifying you. Start a free trial at stackhawk.com to experience its benefits.

<div>Traditional security testing for JS apps has focused on the front-end, but actual security issues most often lie in the backing REST API. Join StackHawk co-founder Scott Gerlach for a quick overview of why you need to rethink how you test your JS apps and how StackHawk can help you find and fix security bugs fast.</div> <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Automated Application Security Testing

Scott Gerlach

CDK está ganando popularidad en el ecosistema de AWS y está destinado a ser el sucesor de CloudFormation, ya que está construido nativamente para la configuración de recursos de AWS. Aprende cómo esto cambia el juego para los programadores y pilas de NodeJS. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Introducción a CDK: Lo que esto significa para el mundo de IaC

AWS CDK is a concept that allows you to use coding languages to create infrastructure as code, making it more flexible and powerful than traditional config languages. CDK offers benefits such as improved developer experience, multi-regional deployments, and a programmatic approach to infrastructure as code. It is a suitable choice for AWS users, particularly those familiar with CloudFormation. CDK can be used to migrate from CloudFormation to a more efficient and user-friendly infrastructure management tool. CDK also provides drift detection and supports multi-region deployment, making it a popular choice for managing infrastructure on AWS.

CDK is growing in popularity in the AWS ecosystem, and is set to be the successor of CloudFormation, being built natively for the configuration of AWS resources. Learn how this is a game changer for NodeJS programmers &amp; stacks. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

DevOps.js Conf 2022

The JavaScript DevOps Conference

Lera

Sophie Kolbe

Lera

Varun

David Barry

Oscar Pagani

Ricardo Machado

Ian Sutherland

Aman Beg

Denis Radin

Norm Crandall

Andrea Martz

yuya-soneda

Christian Guy

Rahul Rana

Serge Bedzhyk

Rishi Narang

Vitor Barbosa

Matej

Claudia Stefan

Chinenye Onuegbu

Max Medina

Artem Metelskyi

Daniel Suchý

Mailing Delgado Medina

Martyna Skup

mickael

Mohamed Sibras

Victor Neves

Zain Fathoni

Ravi

Kateryna Pohrebniak

Jan Pfeiffer

Total attendees