Corporate DevSecOps - Kubernetes Pipeline Security Training Course

1. Introduction 

1. DevOps vs DevSecOps
2. Importance of security in DevOps

1. Git repository management

1. Setting up Git repository
2. Introduction to Git Hooks and Talisman

2. Continuous integration with Jenkins

1. Jenkins introduction
2. Installing and configuring Jenkins plugins
3. Jenkins pipeline setup

3. Docker and Kubernetes basics

1. Docker fundamentals
2. Introduction to Kubernetes

1. Secure coding practices

1. Mutation testing with PIT
2. Code quality analysis with SonarQube
3. Dependency check for vulnerability scanning

2. Container security

1. Introduction to Trivy for image scanning
2. Policy enforcement with OPA conftest
3. Implementing Kubernetes security best practices

3. Dynamic Application Security Testing (DAST)

1. Introduction to OWASP ZAP
2. Integrating OWASP ZAP with Jenkins
3. Remediation strategies for OWASP ZAP findings

4. Notifications and monitoring

1. Setting up Slack notifications
2. Integration tests and incident response

1. CIS benchmarking and compliance

1. Understanding CIS benchmarking and Kube-bench
2. Implementing Kube-bench for security audits

2. Service Mesh with Istio

1. Istio installation and configuration
2. Implementing mTLS for secure communication
3. Monitoring with Prometheus and Grafana

3. Runtime security with Falco

1. Installation and configuration of Falco
2. Implementing Falco alerts and notifications

4. Continuous security testing

1. Implementing KubeScan for security scanning
2. Integration tests in production environment

1. Secrets management with Vault

1. Installation and configuration of HashiCorp Vault
2. Managing secrets engine and policies

2. Vault integration with applications

1. Integrating vault with applications
2. Utilizing vault annotations and templates

1. Secure configuration management

1. Managing environment variables securely
2. Working with ConfigMaps and secrets in Kubernetes

2. Mounting variables as volumes

1. Implementing mount variable as volume for secure access