Course Outline
Introduction to DevSecOps
- The critical role of security integration in the DevOps process
- Core principles and practical approaches to DevSecOps
Continuous Integration (CI) Security
- Securing code repositories through GitLab and Jenkins integration
- Performing automated code quality and security analysis via SonarQube
- Incorporating static code analysis into the Jenkins CI pipeline
Container Security with Docker
- Building secure Docker images
- Managing image repositories using Harbor
- Best practices for vulnerability scanning and image version management
Establishing Secure CI/CD Pipelines
- Configuring Jenkins for comprehensive security integration
- Executing SonarQube analyses
- Generating and securing Docker images
Securing Deployment with Kubernetes
- Security best practices for Kubernetes orchestration
- The role of the Kubernetes Orchestrator in secure, progressive deployments
- Implementing RBAC (Role-Based Access Control) and securing service-to-service communication
Integrating RabbitMQ, PostgreSQL, and MongoDB
- Securing communication between distributed services
- Data security best practices for PostgreSQL and MongoDB
- Hardening RabbitMQ to ensure secure messaging
Identity and Access Management via Keycloak
- Configuring Keycloak for user authentication and authorization
- Managing identities within Kubernetes clusters
Implementing Security in Kubernetes
- Securely deploying applications on Kubernetes
- Integrating Keycloak with Docker and Kubernetes for unified identity management
Monitoring and Auditing in DevSecOps
- Tools and techniques for continuous monitoring
- Auditing deployments and maintaining regulatory compliance
- Practical strategies for automating rollbacks upon security failures
Conclusion and Future Steps
Requirements
- Familiarity with the DevOps workflow
- Foundational knowledge of Docker containers and Kubernetes orchestration
Target Audience
- DevOps professionals
Testimonials (3)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
Jacek - Softsystem
Course - DevOps Engineering Foundation (DOEF)®
real life examples
