Course Outline
Introduction to DevSecOps
- The significance of integrating security into the DevOps process
- Core principles and practices of DevSecOps
Continuous Integration (CI) Security
- Securing code repositories (integrating GitLab with Jenkins)
- Automated code quality and security analysis using SonarQube
- Incorporating static code analysis into the Jenkins CI pipeline
Container Security with Docker
- Building secure Docker images
- Managing Docker image repositories with Harbor
- Best practices for vulnerability scanning and image version control
Establishing Secure CI/CD Pipelines
- Configuring Jenkins for security integration
- Executing SonarQube analysis
- Creating and securing Docker images
Securing the Deployment Process with Kubernetes
- Security practices for Kubernetes orchestration
- The role of the Kubernetes Orchestrator in secure progressive deployment
- Implementing RBAC (Role-Based Access Control) and securing service communication
Integrating RabbitMQ, PostgreSQL, and MongoDB
- Secure communication between services
- Data security practices for PostgreSQL and MongoDB
- Hardening RabbitMQ for secure messaging
Identity and Access Management with Keycloak
- Configuring Keycloak for user authentication and authorization
- Managing identity for Kubernetes clusters
Implementing Security in Kubernetes
- Securely deploying applications on Kubernetes
- Integrating Keycloak with Docker and Kubernetes for identity management
Monitoring and Auditing in DevSecOps
- Continuous monitoring tools and techniques
- Auditing deployments and maintaining compliance
- Practical guide to automating rollback upon security failures
Summary and Next Steps
Requirements
- Familiarity with the DevOps process
- Foundational knowledge of Docker containers and Kubernetes orchestration
Target Audience
- DevOps professionals
Testimonials (2)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
