labs

ENTR

DevSecOps Labs

Hands-on labs for DevOps and DevSecOps practices - CI/CD, observability and security in depth.

Before you start

Clone the repo so you have all the lab files locally:

git clone https://github.com/yasinoz/devsecops.git

Environment setup guide

CI/CD Pipeline

Build automation with Jenkins, container images and release pipelines.

  1. Automation with Jenkins45 dkdockerbeta
  2. Building Container Images40 dkdockerbeta
  3. Accessing Images on Registries30 dkdockerbeta
  4. Multi-Stage Builds40 dkdockerbeta
  5. Building Apps with Compose45 dkdockerbeta
  6. Building Docker Images with Jenkins60 dkdockerbeta

Observability

Metrics, logs and distributed traces - knowing what your system is doing.

  1. Collecting Metrics with Prometheus45 dkdockerbeta
  2. Exporting Metrics40 dkdockerbeta
  3. Visualizing Metrics with Grafana40 dkdockerbeta
  4. Storing Logs in Elasticsearch45 dkdockerbeta
  5. Searching Logs with Kibana45 dkdockerbeta
  6. Distributed Tracing45 dkdockerbeta
  7. Visualizing Traces with Jaeger35 dkdockerbeta

Security in Depth

Shifting security left - static analysis, scanning, golden images and policy enforcement.

  1. Static Code Analysis45 dkdockerbeta
  2. Security Scanning45 dkdockerbeta
  3. Golden Image Libraries50 dkdockerbeta
  4. GitOps with ArgoCD60 dkdockerkubernetesbeta
  5. Enforcing Workload Policies60 dkdockerkubernetesbeta
  6. Container Security Controls50 dkdockerkubernetesbeta

Source: GitHub