BPB Publications Implementing DevSecOps with Docker and Kubernetes

This book discusses many strategies that can be used by developers to improve their DevSecOps and container security skills. It is intended for those who are active in software development. After reading this book, readers will discover how Docker and Kubernetes work from a security perspective. The book begins with a discussion of the DevSecOps tools ecosystem, the primary container platforms and orchestration tools that you can use to manage the lifespan and security of your apps. Among other things, this book discusses best practices for constructing Docker images, discovering vulnerabilities, and better security. The book addresses how to examine container secrets and networking. Backed with examples, the book demonstrates how to manage and monitor container-based systems, including monitoring and administration in Docker.In the final section, the book explains Kubernetes' architecture and the critical security threats inherent in its components. Towards the end, it demonstrates how to utilize Prometheus and Grafana to oversee observability and monitoring in Kubernetes management.TABLE OF CONTENTS1. Getting Started with DevSecOps2. Container Platforms3. Managing Containers and Docker Images4. Getting Started with Docker Security5. Docker Host Security6. Docker Images Security7. Auditing and Analyzing Vulnerabilities in Docker Containers8. Managing Docker Secrets and Networking9. Docker Container Monitoring10. Docker Container Administration11. Kubernetes Architecture12. Kubernetes Security13. Auditing and Analyzing Vulnerabilities in Kubernetes14. Observability and Monitoring in Kubernetes