This book is a comprehensive guide tailored to help you develop the core skills necessary to succeed in the rapidly evolving field of DevOps and DevSecOps. It covers the intersection of development, security, and operations, equipping you with both the technical expertise and soft skills required for this role. Apart from the necessary theory, it provides a large number of examples as well as hands-on labs to familiarize you with practical applications.

The book begins with essential soft skills, introducing you to frameworks like Agile and Lean along with Scrum and Kanban. To better explain the topic and practical applicatins, an example Python project of an executable package is included. Then the book take you into a deepdive, demonstrating the process of gradually improving the project adding the explained topics as new features avoiding unnecessary rework. The book also covers security topics including source code compliance analysis and vulnerabilities scans, system security, data encryption and identity validation using GPG, X.509 certificates and PKI.

The book delves on the most commonly used protocols (HTTP, TLS, LDAP), providing also an overview of service protocols such as SOAP and REST. Along with this it also covers containers (Docker, Podman), with an overview of Kubernetes and Helm, and a hands-on lab for installing Rancher and Deploying Gitea on top of it. Gitea is also exploited to delve into Git. The book ends showing how to operate with Ansible using playbooks, roles and collections. After reading this book you will be able to solve complex challenges, create secure and maintainable solutions, and become a trusted and respected member of any DevSecOps team.

The book will not only teach you the technical concepts of DevSecOps but also to help you develop the professional mindset that will make you a sought-after DevSecOps expert. You will be able to solve complex challenges, create secure and maintainable solutions, and become a trusted and respected member of any DevSecOps team.

Whether you are an experienced engineer aiming to transition into DevSecOps or a student looking to build a career, this book provides a comprehensive, hands-on, and actionable guide to becoming a skilled DevSecOps professional.

You Will Learn:

• Understand the fundamental concepts of DevSecOps and hands-on skills in development, security, and operations
• Write effective, secure and reliable automations to support not only CI/CD, but the complete software lifecycle
• How to use key tools and technologies in DevSecOps, including Git, Ansible, Kubernetes, and more
• Essential soft skills like being a good team member and frameworks like Lean and Agile
  Who is this book for: Aspiring DevOps and DevSecOps professionals, engineers looking to transition into Dev\Ops roles, and anyone seeking a strong foundation in the practices and tools of the DevSecOps field.

Learn the must-know of broadly used frameworks such as Agile and Lean Gain expertise in setting up and operating a CI/CD Become proficient in all three aspects of DevSecOps

Autorentext

Marco Antonio Carcano is a professional with more than 27 years of professional experience mostly spent on Linux. After an initial time as a developer, he gradually moved to the systems field working most of the time in supporting the financial field as a System Engineer, System Architect and Solutions Architect. His current role is DevOps engineer at a visionary corporate in the software industry.

Inhalt

Part I. Holistic Skills Set. 1. Team Working.- 2. Solutions' Lifecycle.- 3. An overview of Agile and Lean.- 4. An overview of Scrum and Kanban.- PART II. Operating With The System.- 5. The BASH Shell And Command Line Utilities.- PART III. Basic Data Formats.- 6. Key-values, INI and CSV.- PART IV. Data Processing.- 7. Regular Expressions (RegEX).- 8. Working with Grep.- 9. Working with Sed.- 10. Working with AWK.- PART V. Structured Data Processing.- 11. XML with XPath, XMLStarlet and Python.- 12. JSON with Jq and Python.- 13. YAML with Yq and Python.- PART VI. Developing a Python Project.- 14. Unit Tests.- 15. Packaging As Wheel.- 16. Managing The Build With GNU Make.- 17. Packaging As RPM.- 18. Setup Git And The pre-commit Framework.- 19. Auditing Source Code Compliance.- 20. Scanning Vulnerabilities.- PART VII. Security.- 21. Systems Security.- 22. Securing Data and Validating Identity Through GPG.- 23. X.509 Certificates And PKI.- PART VIII. Common Protocols.- 24. HTTP.- 25. TLS.- 26. LDAP.- PART IX. Working With Containers.- 27. The Containers Ecosystem.- 28. Docker And Podman.- 29. Deploying Pulp3 Using Docker Compose.- PART X. Service Protocols.- 30. SOAP and REST.- PART XI. Orchestrating Containers.- 31. Kubernetes, Helm And Rancher.- PART XII. CI/CD Toolchain.- 32. Deploying Gitea Using The Helm Chart.- 33. CI/CD And Continuous Delivery.- 34. Working With Gitea Actions Workflows.- PART XIII. Version Control.- 35. Version Management With Git.- PART XIV. Remote Configuration Management.- 36. An Overview of SSH.- 37. Ansible Playbooks, Roles and Collections.- Conclusion.