Publisher's Synopsis
Building and securely deploying container-based applications with Docker and Kubernetes using open source tools.Key FeaturesReal-world examples of vulnerability analysis in Docker containers.Includes recommended practices for Kubernetes and Docker with real execution of commands.Includes essential monitoring tools for Docker containers and Kubernetes configuration.DescriptionThis book discusses many strategies that can be used by developers to improve their DevSecOps and container security skills. It is intended for those who are active in software development. After reading this book, readers will discover how Docker and Kubernetes work from a security perspective.The book begins with a discussion of the DevSecOps tools ecosystem, the primary container platforms and orchestration tools that you can use to manage the lifespan and security of your apps. Among other things, this book discusses best practices for constructing Docker images, discovering vulnerabilities, and better security. The book addresses how to examine container secrets and networking. Backed with examples, the book demonstrates how to manage and monitor container-based systems, including monitoring and administration in Docker.In the final section, the book explains Kubernetes' architecture and the critical security threats inherent in its components. Towards the end, it demonstrates how to utilize Prometheus and Grafana to oversee observability and monitoring in Kubernetes management.What you will learnFamiliarize yourself with Docker as a platform for container deployment.Learn how Docker can control the security of images and containers.Discover how to safeguard and monitor your Docker environment for vulnerabilities.Explore the Kubernetes architecture and best practices for securing your Kubernetes environment.Learn and explore tools for monitoring and administering Docker containers.Learn and explore tools for observing and monitoring Kubernetes environments.Who this book is forThis book is intended for DevOps teams, cloud engineers, and cloud developers who wish to obtain practical knowledge of DevSecOps, containerization, and orchestration systems like Docker and Kubernetes. Knowing the fundamentals of Docker and Kubernetes would be beneficial but not required.Table of Contents1. Getting Started with DevSecOps2. Container Platforms3. Managing Containers and Docker Images4. Getting Started with Docker Security5. Docker Host Security6. Docker Images Security7. Auditing and Analyzing Vulnerabilities in Docker Containers8. Managing Docker Secrets and Networking9. Docker Container Monitoring10. Docker Container Administration11. Kubernetes Architecture12. Kubernetes Security13. Auditing and Analyzing Vulnerabilities in Kubernetes14. Observability and Monitoring in KubernetesRead more
