Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction to DevSecOps
- The critical role of security integration in the DevOps process
- Core principles and practical approaches to DevSecOps
Continuous Integration (CI) Security
- Securing code repositories through GitLab and Jenkins integration
- Performing automated code quality and security analysis via SonarQube
- Incorporating static code analysis into the Jenkins CI pipeline
Container Security with Docker
- Building secure Docker images
- Managing image repositories using Harbor
- Best practices for vulnerability scanning and image version management
Establishing Secure CI/CD Pipelines
- Configuring Jenkins for comprehensive security integration
- Executing SonarQube analyses
- Generating and securing Docker images
Securing Deployment with Kubernetes
- Security best practices for Kubernetes orchestration
- The role of the Kubernetes Orchestrator in secure, progressive deployments
- Implementing RBAC (Role-Based Access Control) and securing service-to-service communication
Integrating RabbitMQ, PostgreSQL, and MongoDB
- Securing communication between distributed services
- Data security best practices for PostgreSQL and MongoDB
- Hardening RabbitMQ to ensure secure messaging
Identity and Access Management via Keycloak
- Configuring Keycloak for user authentication and authorization
- Managing identities within Kubernetes clusters
Implementing Security in Kubernetes
- Securely deploying applications on Kubernetes
- Integrating Keycloak with Docker and Kubernetes for unified identity management
Monitoring and Auditing in DevSecOps
- Tools and techniques for continuous monitoring
- Auditing deployments and maintaining regulatory compliance
- Practical strategies for automating rollbacks upon security failures
Conclusion and Future Steps
Requirements
- Familiarity with the DevOps workflow
- Foundational knowledge of Docker containers and Kubernetes orchestration
Target Audience
- DevOps professionals
Testimonials (2)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
