Course Outline
DevSecOps Overview
- Strategic importance of embedding security controls throughout the DevOps lifecycle
- Core principles and operational practices for DevSecOps
Continuous Integration (CI) Security Protocols
- Hardening code repositories through GitLab and Jenkins integration
- Automated assessment of code quality and security via SonarQube
- Incorporating static application security testing (SAST) into Jenkins CI pipelines
Container Security Implementation with Docker
- Constructing secure Docker images for government environments
- Governing Docker image repositories utilizing Harbor
- Establishing best practices for vulnerability scanning and image lifecycle management
Establishing Secure CI/CD Pipelines
- Configuring Jenkins to enforce security integration standards
- Executing comprehensive SonarQube security analyses
- Generating and safeguarding Docker images during the build process
Kubernetes Deployment Security Controls
- Adhering to security standards for Kubernetes orchestration
- Leveraging Kubernetes Orchestrator for secure progressive delivery
- Implementing Role-Based Access Control (RBAC) and securing inter-service communication
Integration of RabbitMQ, PostgreSQL, and MongoDB
- Ensuring secure data transmission between microservices
- Implementing robust data security measures for PostgreSQL and MongoDB
- Hardening RabbitMQ to guarantee secure message queue operations
Identity and Access Management via Keycloak
- Configuring Keycloak for centralized user authentication and authorization
- Managing digital identities within Kubernetes cluster environments
Application Security in Kubernetes
- Executing secure deployment of applications on Kubernetes infrastructure
- Integrating Keycloak with Docker and Kubernetes to unify identity management
DevSecOps Monitoring and Audit Frameworks
- Utilizing continuous monitoring tools and methodologies for security oversight
- Conducting deployment audits to maintain regulatory compliance
- Implementing automated rollback mechanisms in response to security incidents
Conclusion and Implementation Roadmap
Requirements
- Familiarity with the DevOps workflow and processes
- Basic operational knowledge of Docker containers and Kubernetes orchestration
Target Audience
- DevOps professionals and systems engineers
Testimonials (2)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
