Course Outline
Introduction to DevSecOps
- The critical role of security integration within the DevOps process.
- Core principles and operational practices of DevSecOps.
Security in Continuous Integration (CI)
- Securing code repositories through GitLab and Jenkins integration.
- Performing automated code quality and security analysis with SonarQube.
- Embedding static code analysis into the Jenkins CI pipeline.
Container Security with Docker
- Building secure Docker images.
- Managing Docker image repositories using Harbor.
- Adopting best practices for vulnerability scanning and image version control.
Building Secure CI/CD Pipelines
- Configuring Jenkins for security integration.
- Executing SonarQube analysis.
- Generating and securing Docker images.
Securing Deployments with Kubernetes
- Security best practices for Kubernetes orchestration.
- The role of the Kubernetes Orchestrator in secure progressive deployments.
- Implementing Role-Based Access Control (RBAC) and securing service-to-service communication.
Integrating RabbitMQ, PostgreSQL, and MongoDB
- Establishing secure communication between services.
- Data security protocols for PostgreSQL and MongoDB.
- Hardening RabbitMQ to ensure secure messaging.
Identity and Access Management via Keycloak
- Configuring Keycloak for user authentication and authorization.
- Managing identity within Kubernetes clusters.
Implementing Security within Kubernetes
- Deploying applications securely on Kubernetes.
- Integrating Keycloak with Docker and Kubernetes for unified identity management.
Monitoring and Auditing in DevSecOps
- Utilizing continuous monitoring tools and techniques.
- Auditing deployments and maintaining regulatory compliance.
- A practical guide to automating rollbacks in the event of security failures.
Summary and Next Steps
Requirements
- Familiarity with the DevOps workflow.
- Foundational working knowledge of Docker containers and Kubernetes orchestration.
Target Audience
- DevOps professionals.
Testimonials (3)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
Jacek - Softsystem
Course - DevOps Engineering Foundation (DOEF)®
real life examples
