Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction to DevSecOps
- The importance of integrating security into the DevOps process.
- Key principles and practices of DevSecOps.
Continuous Integration (CI) Security
- Securing code repositories (GitLab integration with Jenkins).
- Automated code quality and security analysis using SonarQube.
- Implementing static code analysis as part of the Jenkins CI pipeline.
Container Security with Docker
- Creating secure Docker images.
- Managing Docker image repositories with Harbor.
- Best practices for vulnerability scanning and image version control.
Setting up Secure CI/CD Pipelines
- Configure Jenkins for security integration.
- Run a SonarQube analysis.
- Generate and secure Docker images.
Securing the Deployment Process with Kubernetes
- Security practices for Kubernetes orchestration.
- Role of the Kubernetes Orchestrator in secure progressive deployment.
- Implementing RBAC (Role-Based Access Control) and securing service communication.
Integrating RabbitMQ, PostgreSQL, and MongoDB
- Secure communication between services.
- Data security practices for PostgreSQL and MongoDB.
- Hardening RabbitMQ for secure messaging.
Identity and Access Management with Keycloak
- Configuring Keycloak for user authentication and authorization.
- Managing identity for Kubernetes clusters.
Implementing Security in Kubernetes
- Deploy applications securely on Kubernetes.
- Integrate Keycloak with Docker and Kubernetes for identity management.
Monitoring and Auditing in DevSecOps
- Continuous monitoring tools and techniques.
- Auditing deployments and maintaining compliance.
- Practical guide to automating rollback on security failures.
Summary and Next Steps
Requirements
- Familiarity with the DevOps process.
- Basic working knowledge of Docker containers and Kubernetes orchestration.
Audience
- DevOps professionals.
14 Hours
Testimonials (2)
The knowledge and experience of the consultant, as theoretical topics are addressed by applying them to the reality of processes. The course contains a highly valuable program in information technology management.
Luis Castro Gamboa - Cooperativa De Ahorro Y Credito Ande No. 1 R.L.
Course - Site Reliability Engineering (SRE) Foundation®
Machine Translated
That it was very clear in each specification
Ricardo Ramirez - AMX CONTENIDO
Course - DevOps Leader (DOL)®
Machine Translated
