Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction to DevSecOps
- The critical role of security integration within the DevOps process.
- Core principles and operational practices of DevSecOps.
Security in Continuous Integration (CI)
- Securing code repositories through GitLab and Jenkins integration.
- Performing automated code quality and security analysis with SonarQube.
- Embedding static code analysis into the Jenkins CI pipeline.
Container Security with Docker
- Building secure Docker images.
- Managing Docker image repositories using Harbor.
- Adopting best practices for vulnerability scanning and image version control.
Building Secure CI/CD Pipelines
- Configuring Jenkins for security integration.
- Executing SonarQube analysis.
- Generating and securing Docker images.
Securing Deployments with Kubernetes
- Security best practices for Kubernetes orchestration.
- The role of the Kubernetes Orchestrator in secure progressive deployments.
- Implementing Role-Based Access Control (RBAC) and securing service-to-service communication.
Integrating RabbitMQ, PostgreSQL, and MongoDB
- Establishing secure communication between services.
- Data security protocols for PostgreSQL and MongoDB.
- Hardening RabbitMQ to ensure secure messaging.
Identity and Access Management via Keycloak
- Configuring Keycloak for user authentication and authorization.
- Managing identity within Kubernetes clusters.
Implementing Security within Kubernetes
- Deploying applications securely on Kubernetes.
- Integrating Keycloak with Docker and Kubernetes for unified identity management.
Monitoring and Auditing in DevSecOps
- Utilizing continuous monitoring tools and techniques.
- Auditing deployments and maintaining regulatory compliance.
- A practical guide to automating rollbacks in the event of security failures.
Summary and Next Steps
Requirements
- Familiarity with the DevOps workflow.
- Foundational working knowledge of Docker containers and Kubernetes orchestration.
Target Audience
- DevOps professionals.
Testimonials (2)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
