Merci d'avoir envoyé votre demande ! Un membre de notre équipe vous contactera sous peu.
Merci d'avoir envoyé votre réservation ! Un membre de notre équipe vous contactera sous peu.
Plan du cours
Introduction to DevSecOps
- The importance of integrating security into the DevOps process
- Key principles and practices of DevSecOps
Continuous Integration (CI) Security
- Securing code repositories (GitLab integration with Jenkins)
- Automated code quality and security analysis using SonarQube
- Implementing static code analysis as part of Jenkins CI pipeline
Container Security with Docker
- Creating secure Docker images
- Managing Docker image repositories with Harbor
- Best practices for vulnerability scanning and image version control
Setting up Secure CI/CD Pipelines
- Configure Jenkins for security integration
- Run a SonarQube analysis
- Generate and secure Docker images
Securing the Deployment Process with Kubernetes
- Security practices for Kubernetes orchestration
- Role of Kubernetes Orchestrator in secure progressive deployment
- Implementing RBAC (Role-Based Access Control) and securing service communication
Integrating RabbitMQ, PostgreSQL, and MongoDB
- Secure communication between services
- Data security practices for PostgreSQL and MongoDB
- Hardening RabbitMQ for secure messaging
Identity and Access Management with Keycloak
- Configuring Keycloak for user authentication and authorization
- Managing identity for Kubernetes clusters
Implementing Security in Kubernetes
- Deploy applications securely on Kubernetes
- Integrate Keycloak with Docker and Kubernetes for identity management
Monitoring and Auditing in DevSecOps
- Continuous monitoring tools and techniques
- Auditing deployments and maintaining compliance
- Practical guide to automating rollback on security failures
Summary and Next Steps
Pré requis
- An understanding of the DevOps process
- Basic working knowledge of Docker containers and Kubernetes orchestration
Audience
- DevOps professionals
14 Heures
Nos clients témoignent (1)
Il y avait de nombreux exercices pratiques supervisés et assistés par le formateur.
Aleksandra - Fundacja PTA
Formation - Mastering Make: Advanced Workflow Automation and Optimization
Traduction automatique