DevOps

Install, deploy, secure and monitor Zato environments.

Get started

Install Zato with Docker on Linux, Windows or Mac, in the cloud or on premises, then deploy your projects with git and keep the whole environment in version control.

Deployment and CI/CD

Enmasse (GitOps) Export and import environment configuration as YAML across dev, test and production. Enmasse reference The full reference of all options available in enmasse YAML configuration files. Deploying projects Deploy your Python code and configuration to Zato environments. CI/CD test pipelines Run Zato API tests in GitHub Actions, GitLab CI, Azure DevOps and Jenkins.

Containers and environments

Docker configuration Quickstart containers, IDE integration, custom pip requirements and persistent configuration. Kubernetes Helm, health probes, ConfigMap-driven configuration and what a second replica requires. ODB configuration The operational database - SQLite, MySQL and PostgreSQL, including TLS connections. Environment variables The reference of environment variables - ports, databases, passwords and platform settings. Architecture How to design production setups, from single-server to multi-server environments.

Day-2 operations

Production checklist What to confirm before an environment takes real traffic - one page, one pass. Starting and stopping The Docker commands, what persists across container replacements and what to check afterwards. Updating environments Replacing a container with a newer image, and what to confirm before you do. Backup What to back up, how to restore it, and what not to bother backing up. Ports and network What listens where, which ports to publish and which outbound access the platform needs.

Security

Security overview Platform access, API traffic, checklists and compliance - the whole security area in one place. Security checklist The checklist of what to change, close and verify before an environment takes production traffic. Dashboard authentication The admin account and Microsoft Entra ID single sign-on with group-based access. Rate limiting and firewall Burst control, request caps, IP filtering, time-based rules and silent drops. SSL/TLS Configure custom or auto-generated TLS certificates for servers and the Dashboard. Cryptography and secrets Generate secrets, encrypt data and hash passwords with the platform's crypto API.

Observability

Audit log Record API traffic across REST, SOAP, IMAP and pub/sub, with database storage. Alerting Rules over the audit log that tell you a connection is down, slow or failing. Monitoring with Prometheus The /metrics endpoint, RED metrics, scraping configuration and PromQL queries. Traffic analytics Built-in screens with top channels and consumers, trends, drill-down and CSV exports. Logging Log streaming and aggregation, log-level environment variables and per-run scheduler logs. Health checks The ping endpoints of each component, and proactive checks of outgoing connections.