4 ms·
> If I can just create a Docker container for my ops team to deploy, without them needing to know what is inside of it, I can pretty much use any language I wan
by merlincorey 11y ago
> If I can just create a Docker container for my ops team to deploy, without them needing to know what is inside of it, I can pretty much use any language I want.
If you can get them to deploy anything you want without them needing to know what is inside of it... your ops team is too trusting, in my opinion.
- twblalock 11y agoYou think your ops team really knows what they are pushing? Whether you are deploying jar files, Debian packages, or Docker containers, or whatever else, the ops people rarely look inside. Their main concerns are security and performance, and those can be audited using black-box testing. Code quality has to be enforced by engineers, because ops people are not capable of doing code reviews.
- merlincorey 11y ago> because ops people are not capable of doing code reviews That's probably specific to your organization.
- davelnewton 11y agoNot really. Ops people are generally just that. Even DevOps aren't the ones writing the apps. Except for one specific place, nowhere I've worked in the last 25 years has Ops people that would be qualified to review either the apps or the libraries it uses. PenTests and security is a pretty different thing than app dev. And both are different than ops. Only recently have the roles been blurred, but even now, I see truly cross-functional people very rarely.