Continuous Integration & Delivery (CI / CD) on JAVAPRO International

Stop Writing YAML: How to Define, Test, and Deploy Your Cloud in Pure Java

Tue, 12 May 2026 07:00:00 +0000

1. Introduction

As Java developers, we apply rigorous engineering practices to application code: type safety, unit testing, refactoring, code review. Then we switch to deploying that code and write hundreds of lines of YAML, accepting the lack of expressiveness, missing abstractions, and missing flexibility as the cost of doing business. Or worse, we log into the cloud console and click our way through to the deployment.

This article explores an alternative: defining cloud infrastructure in Java, with the same tools and practices we use for application code. We’ll build a working example, a Java service deployed on AWS, covering the full lifecycle from resource definition through testing to CI/CD. While this example uses Quarkus, the infrastructure patterns demonstrated here apply equally for Spring Boot, Jakarta EE, or any other containerized Java framework. The companion code is available at github.com/wlami/stop-writing-yaml-javapro.

The Myth of Stability: Java's Software Supply Chain After Log4Shell

Thu, 08 Jan 2026 07:00:02 +0000

For as long as most Java developers can remember, we’ve lived inside a comforting story about our ecosystem. It’s the idea that Maven Central, the Jakarta stack, the Spring universe, the vast Apache landscape, and all the independent libraries quietly carrying enterprise workloads together form a coherent, self-maintaining, self-healing whole.

A world where problems are fixed upstream, where maintainers have time, where the dependencies we pull down are being actively watched by someone who knows exactly what they’re doing. It’s a lovely idea. It’s also never been completely real.

Move Fast, Break Laws: AI, Open Source and Devs (Part 4)

Thu, 10 Apr 2025 07:00:02 +0000

The software development landscape is rapidly changing, with legislation emerging as a key driver of industry trends. As our reliance on software and AI grows, so does our vulnerability to cybercrime, which is now a multi-trillion-dollar problem. This has caught the attention of regulators worldwide.

This article explains the various regulatory efforts in play and summarises actions that developers and executives should consider as they get to grips with 2025 - the year of software legislation

Move Fast, Break Laws: AI, Open Source and Devs (Part 3)

Tue, 08 Apr 2025 07:00:01 +0000

Background

Part 1 covered the background, what a software supply chain is and thoughts on AI and open source.

Part 2 explored how governments are working to create legislation and what the current status is.

Move Fast, Break Laws: AI, Open Source and Devs (Part 2)

Thu, 03 Apr 2025 09:56:07 +0000

This article explains the various regulatory efforts in play and summarises actions that developers and executives should consider as they get to grips with 2025 - the year of software legislation

Move Fast, Break Laws: AI, Open Source and Devs (Part 1)

Tue, 01 Apr 2025 11:34:21 +0000

This article series explains the various regulatory efforts in play and summarises actions that developers and executives should consider as they prepare for 2025, the year of software legislation.

Thinking differently about testing

Mon, 27 Jan 2025 16:35:56 +0000

10x Insights to help take a different view of quality assurance

I’ve given a few talks about 10x developers, or rather 10x professionals and been involved in process (re)engineering for many teams and projects. However much you learn about people and their roles - there’s always something new to discover. In fact, it’s amazing how often your worldview is blinkered, how often there’s a different way to do or think about some aspect of your life or career.

The AI Mona Lisa Challenge: Precision and Security Adjustments for Your CI/CD Pipeline

Thu, 21 Nov 2024 12:22:47 +0000

“Mona Lisa, Mona Lisa, men have named you; you’re so like the lady with the mystic smile.”

Last time, I finished a set of articles about using AI coding tools. In the end, my conclusion was that the tools can help greatly but that right now, using them to generate whole programs was pushing the envelope. As helpers, as pseudo-pair-programmers, the tools can offer great value and make you more productive. However, it’s essential to understand that this process works because of the interaction between humans and AI. Without the steering and a continuous mix of rejection and acceptance, the AI can’t learn how to respond correctly.

Exploring Cost-Effective Solutions for Stateful Rest Services

Tue, 30 Jul 2024 12:30:00 +0000

A cost-effective approach to implementing stateful REST services using IBM Cloud Code Engine, EclipseStore, and IBM Cloud Object Storage, highlighting their integration and scalability benefits for enterprise applications.