# KodeKloud: Beta Courses DevSecOps - Kubernetes DevOps & Security

## DevSecOps - Kubernetes DevOps & Security

### Introduction

- [Welcome and Course Introduction](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Introduction/Welcome-and-Course-Introduction/page.md): This course covers best practices for DevSecOps on Kubernetes, including environment setup, pipeline building, and advanced security techniques.
- [Section 1 Topics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Introduction/Section-1-Topics/page.md): This section defines DevSecOps, contrasts it with traditional DevOps, and identifies key security checkpoints in the Software Development Lifecycle.
- [DevOps vs DevSecOps](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Introduction/DevOps-vs-DevSecOps/page.md): This article compares DevOps and DevSecOps, highlighting the benefits of integrating security into the CI/CD pipeline for improved efficiency and risk management.
- [Security Aspects](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Introduction/Security-Aspects/page.md): This guide covers integrating security into the software development lifecycle to reduce risk and enhance delivery speed.
- [Tools Explored in this course](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Introduction/Tools-Explored-in-this-course/page.md): This course explores essential security tools for hardening CI/CD pipelines in a DevSecOps context.

### DevSecOps Pipeline

- [Section 3 Topics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Section-3-Topics/page.md): This lesson strengthens CI/CD workflows by integrating security measures like testing stages and vulnerability scans.
- [Git Hooks and Talisman Introduction](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Git-Hooks-and-Talisman-Introduction/page.md): This article explains using Git hooks and Talisman to prevent accidental commits of sensitive data in your codebase.
- [Demo Talisman](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Talisman/page.md): This lesson demonstrates installing Talisman, scanning for secrets, and configuring exceptions on a developer workstation.
- [Mutation Tests PIT Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Mutation-Tests-PIT-Basics/page.md): This article explains mutation testing in Spring Boot using PIT to assess and improve unit test quality.
- [Demo Mutation Tests PIT](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Mutation-Tests-PIT/page.md): This tutorial covers integrating PIT Mutation Testing into a Spring Boot project and configuring Jenkins for automated reporting.
- [SonarQube SAST](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/SonarQube-SAST/page.md): This article explores Static Application Security Testing using SonarQube for identifying security vulnerabilities in source code before runtime.
- [Demo SonarQube](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-SonarQube/page.md): This guide explains integrating SonarQube static analysis into a Jenkins pipeline for a Spring Boot application.
- [Demo SonarQube Quality Gate](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-SonarQube-Quality-Gate/page.md): This tutorial explains integrating SonarQube quality gates into a Jenkins pipeline for automated build validation based on code quality metrics.
- [Demo SonarQube Authentication Clarification](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-SonarQube-Authentication-Clarification/page.md): This guide explains how to streamline SonarQube authentication in Jenkins pipelines using two methods for improved security.
- [Vulnerabilities Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Vulnerabilities-Basics/page.md): This lesson defines vulnerabilities and explores their relationship to exploits, threats, and risks while outlining a process for scanning, assessing, and remediating them.
- [Dependency Check Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Dependency-Check-Basics/page.md): This lesson explores OWASP Dependency-Check, an open-source tool for detecting and managing security vulnerabilities in open-source dependencies.
- [Demo Dependency Check](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Dependency-Check/page.md): This article covers integrating the OWASP Dependency-Check Maven plugin into a Spring Boot project for automated vulnerability scanning in Jenkins.
- [Demo Refactoring Jenkins](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Refactoring-Jenkins/page.md): This tutorial streamlines a Jenkins Declarative Pipeline by consolidating multiple post actions into a single pipeline-level section for improved readability and maintenance.
- [Trivy Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Trivy-Basics/page.md): This guide explains how to use Trivy, a vulnerability scanner for container images and artifacts, covering installation, scanning, and output formats.
- [Demo Trivy Image Scan Docker 1](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Trivy-Image-Scan-Docker-1/page.md): This tutorial demonstrates using Trivy to scan container images for vulnerabilities in Docker.
- [Demo Trivy Image Scan Docker 2](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Trivy-Image-Scan-Docker-2/page.md): This guide demonstrates using Trivy to scan Docker base images for vulnerabilities and select the most secure option for a Spring Boot application.
- [OPA Conftest Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/OPA-Conftest-Basics/page.md): This guide explains using Open Policy Agent and Conftest to enforce Docker best practices through policy-as-code.
- [Demo OPA Conftest Docker](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-OPA-Conftest-Docker/page.md): This tutorial demonstrates how to enforce Dockerfile security best practices using Open Policy Agents Conftest.
- [Kubernetes Security Concepts](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Kubernetes-Security-Concepts/page.md): This guide covers Kubernetes security concepts, vulnerabilities, and policy enforcement using tools to harden clusters and CI/CD pipelines.
- [Demo OPA Conftest Kubernetes](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-OPA-Conftest-Kubernetes/page.md): Integrate OPA Conftest into a Jenkins pipeline to enforce policy-as-code for Kubernetes, preventing misconfigurations and security vulnerabilities.
- [Demo Kubernetes Deployment Rollout](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Kubernetes-Deployment-Rollout/page.md): This guide enhances a Jenkins pipeline to deploy a Kubernetes application with rollout checks and automatic rollback on failure.
- [Kubesec Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Kubesec-Basics/page.md): KubeSec is an open-source Kubernetes security scanner that analyzes manifests for vulnerabilities and provides a security score and recommendations.
- [Demo Kubesec](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Kubesec/page.md): This article explains how to scan Kubernetes resource definitions for security best practices using Kubesec.
- [Demo Fixing Script and Read Only Root File System](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Fixing-Script-and-Read-Only-Root-File-System/page.md): This tutorial covers troubleshooting a Deployment script in Kubernetes and enabling a read-only root filesystem without disrupting writable paths.
- [Demo Trivy Kubernetes](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Trivy-Kubernetes/page.md): This tutorial demonstrates integrating Trivy security scans into a Kubernetes CI/CD pipeline for vulnerability management and deployment.
- [Demo Integration Tests](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Integration-Tests/page.md): This guide explains how to add integration testing to a Jenkins Pipeline for a Kubernetes system using curl commands.
- [DAST Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/DAST-Basics/page.md): This article explains Dynamic Application Security Testing (DAST), its characteristics, advantages, limitations, and how it differs from Static Application Security Testing (SAST).
- [OWASP ZAP Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/OWASP-ZAP-Basics/page.md): This lesson explores using OWASP ZAP for dynamic application security testing of a Spring Boot REST API, covering scan types, Docker usage, and result interpretation.
- [Demo OWASP ZAP](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-OWASP-ZAP/page.md): This article provides a guide for automating API security scans using OWASP ZAP with a Spring Boot application.
- [Demo OWASP ZAP Jenkins Scan](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-OWASP-ZAP-Jenkins-Scan/page.md): Integrate OWASP ZAP security testing into Jenkins CI/CD workflow using OpenAPI spec for scanning and reporting vulnerabilities.
- [Demo OWASP ZAP Fixing Issue](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-OWASP-ZAP-Fixing-Issue/page.md): This guide walks you through remediating the missing X-Content-Type-Options header in HTTP responses for a Spring Boot application.
- [Demo OWASP ZAP Ignore Test Cases](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-OWASP-ZAP-Ignore-Test-Cases/page.md): This article demonstrates upgrading Spring Security, configuring OWASP ZAP to ignore warnings, and adjusting Dependency-Check thresholds for continuous security in CI/CD pipelines.
- [Demo Slack Notification Legacy App](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Demo-Slack-Notification-Legacy-App/page.md): Learn to integrate Slack with Jenkins for automated build notifications, enhancing alerts with rich formatting and job details.
- [Tools and Technologies for other Programming Languages](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/Tools-and-Technologies-for-other-Programming-Languages/page.md): Overview of static analysis and security scanning tools for various programming languages in DevSecOps workflows.
- [End of Section 3 and Promote to PROD namespace](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevSecOps-Pipeline/End-of-Section-3-and-Promote-to-PROD-namespace/page.md): This article discusses the final steps in a DevSecOps pipeline, including security measures and a manual approval stage for production deployments.

### Kubernetes Operations and Security

- [Section 4 Topics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Section-4-Topics/page.md): This article discusses enhancing a DevSecOps pipeline by integrating security, observability, and notification features into a CI/CD workflow.
- [CIS Benchmarking and Kube bench](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/CIS-Benchmarking-and-Kube-bench/page.md): This guide covers CIS Benchmarking for Kubernetes and demonstrates using Kube-bench to validate cluster security posture.
- [Demo Kube bench](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Kube-bench/page.md): This article explains how to use kube-bench to run CIS Kubernetes Benchmark tests on a cluster, covering installation, execution, and CI/CD integration.
- [Pod Pod Communication Need for mTLS](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Pod-Pod-Communication-Need-for-mTLS/page.md): This guide explains the risks of unencrypted pod-to-pod traffic and how Istio simplifies end-to-end encryption using mutual TLS.
- [Istio Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Istio-Basics/page.md): Istio is an open-source service mesh that simplifies connecting, securing, managing, and monitoring microservices.
- [Demo Istio Installation](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Istio-Installation/page.md): Learn to install and verify Istio 1.9.0 on Kubernetes with demo profile and explore observability add-ons like Kiali, Prometheus, Grafana, and Jaeger.
- [Demo Istio Injecting SideCar Container](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Istio-Injecting-SideCar-Container/page.md): This guide explains how to automatically inject an Envoy sidecar into a Kubernetes pod for traffic management and telemetry using Istio.
- [Promoting App to Prod and Visualize using Kiali](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Promoting-App-to-Prod-and-Visualize-using-Kiali/page.md): This tutorial teaches how to deploy a Kubernetes application to production using Jenkins and visualize it with Kiali.
- [Istio mTLS Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Istio-mTLS-Basics/page.md): This article explains how Istio's mutual TLS secures communication between microservices in Kubernetes.
- [Demo Istio mTLS](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Istio-mTLS/page.md): This tutorial teaches how to enforce mutual TLS between Kubernetes workloads using Istio’s PeerAuthentication API.
- [Demo Istio Ingress Gateway and Virtual Service](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Istio-Ingress-Gateway-and-Virtual-Service/page.md): Learn to use Istio’s Ingress Gateway and VirtualService to expose and control traffic for a Kubernetes-based DevSecOps application.
- [Kubernetes Monitoring Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Kubernetes-Monitoring-Basics/page.md): This guide explores essential Kubernetes monitoring concepts, built-in tools, and an advanced stack using Prometheus and Grafana for comprehensive observability.
- [Prometheus Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Prometheus-Basics/page.md): Learn to set up a monitoring stack with Prometheus, Grafana, and Alertmanager, covering architecture, data visualization, and alerting.
- [Demo Prometheus Grafana](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Prometheus-Grafana/page.md): This guide explains how to monitor Kubernetes using Prometheus, Grafana, and Alertmanager, including setup, metrics querying, visualization, and alert configuration.
- [Falco Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Falco-Basics/page.md): Falco is an open-source runtime security tool that detects unexpected application behavior and alerts on threats in real-time.
- [Demo Falco Installation View in Terminal](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Falco-Installation-View-in-Terminal/page.md): This hands-on guide teaches how to install Falco on Ubuntu, generate security alerts, and view them in the terminal.
- [Demo Falco UI HELM](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Falco-UI-HELM/page.md): This guide explains how to extend Falco alerts with Falco Sidekick and visualize them using a Web UI on a Kubernetes cluster.
- [Demo Falco Slack Notifications](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Falco-Slack-Notifications/page.md): Learn to send Falco security alerts to a Slack channel using Falco Sidekick and Slack Incoming Webhooks.
- [Demo KubeScan](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-KubeScan/page.md): This guide explains how to deploy OctarineSec KubeScan for continuous assessment and monitoring of Kubernetes workloads.
- [Demo Integration Tests Prod](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Integration-Tests-Prod/page.md): This guide explains how to add integration testing to a Jenkins pipeline after deploying an application in production.
- [Demo Slack Jenkins Custom App](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Slack-Jenkins-Custom-App/page.md): Learn to send interactive Slack notifications from Jenkins using attachments, custom emojis, and buttons through a step-by-step guide.
- [Demo Slack Attachments](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Slack-Attachments/page.md): Learn to send rich Slack notifications from Jenkins pipelines using attachments and Block Kit for enhanced message layouts and interactivity.
- [Demo Slack Get Failed Stage Name](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Kubernetes-Operations-and-Security/Demo-Slack-Get-Failed-Stage-Name/page.md): Learn to identify failed stages in Jenkins Pipelines and send notifications to Slack without redundant failure blocks.

### HashiCorp Vault + Kubernetes

- [Kubernetes Secrets its Drawbacks](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/HashiCorp-Vault-Kubernetes/Kubernetes-Secrets-its-Drawbacks/page.md): This article reviews Kubernetes Secrets, their limitations, and how to securely manage sensitive data using HashiCorp Vault.
- [Demo Vault Helm Installation](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/HashiCorp-Vault-Kubernetes/Demo-Vault-Helm-Installation/page.md): This tutorial covers installing HashiCorp Vault on Kubernetes using Helm, including prerequisites, deployment steps, and accessing the Vault UI.
- [Demo Vault Initialization](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/HashiCorp-Vault-Kubernetes/Demo-Vault-Initialization/page.md): This guide explains how to initialize and unseal HashiCorp Vault, including verification in local and Kubernetes environments.
- [Demo Vault Secrets Engine](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/HashiCorp-Vault-Kubernetes/Demo-Vault-Secrets-Engine/page.md): This guide explains how to enable and use the Key-Value version 2 secrets engine in HashiCorp Vault for securely storing and managing secrets.
- [Demo Vault Authorization](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/HashiCorp-Vault-Kubernetes/Demo-Vault-Authorization/page.md): This lesson explores Vault's authorization model and how to define access controls using policies written in HCL.
- [Demo Vault Authentication](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/HashiCorp-Vault-Kubernetes/Demo-Vault-Authentication/page.md): Learn to secure Kubernetes workloads using Vault’s Kubernetes authentication method for validating ServiceAccount JWTs and issuing short-lived Vault tokens.
- [Demo Vault PHP Application](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/HashiCorp-Vault-Kubernetes/Demo-Vault-PHP-Application/page.md): Demonstrates deploying a PHP app on Kubernetes that reads secrets injected into pod filesystem by HashiCorp Vault and displays them in a minimal UI
- [Demo Vault Annotations Template](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/HashiCorp-Vault-Kubernetes/Demo-Vault-Annotations-Template/page.md): This tutorial explores using HashiCorp Vault annotations and templates to inject secrets into Kubernetes Pods via the Vault Agent Injector.
- [Vault How it works Internally](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/HashiCorp-Vault-Kubernetes/Vault-How-it-works-Internally/page.md): This guide explores HashiCorp Vault's internal workflow, including pod injection, Kubernetes authentication, and secret rendering for applications.

### Additional Topics

- [Kubernetes Architecture](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Additional-Topics/Kubernetes-Architecture/page.md): This guide examines Kubernetes usage, core components, and its cluster and control-plane architecture.
- [Demo Prometheus Alert Manager Installation](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Additional-Topics/Demo-Prometheus-Alert-Manager-Installation/page.md): This guide covers installing Alertmanager on a Linux VM and configuring it to send alerts to Slack.
- [Demo Prometheus Alert Manager Alerts Slack Notifications](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/Additional-Topics/Demo-Prometheus-Alert-Manager-Alerts-Slack-Notifications/page.md): This tutorial covers integrating Prometheus with Alertmanager and configuring Slack notifications for alerts.

### DevOps Pipeline

- [Section 2 Topics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Section-2-Topics/page.md): This section covers setting up infrastructure, installing software, and building a Jenkins pipeline with four stages.
- [Git Repository](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Git-Repository/page.md): Access a GitHub repository containing a Spring Boot microservice, VM configuration templates for Azure and GCP, and automated setup scripts.
- [VM Configuration](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/VM-Configuration/page.md): This guide covers provisioning a DevSecOps Cloud virtual machine, installing tools, and configuring a single-node Kubernetes cluster for CI/CD and containerization learning.
- [Demo Create Free Azure Account](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Demo-Create-Free-Azure-Account/page.md): This hands-on lab guides you through setting up a free Azure account with a 30-day trial and $200 in credits.
- [Demo Create Azure VM](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Demo-Create-Azure-VM/page.md): Learn to provision an Azure Virtual Machine using an ARM template and parameters file from your cloned repository.
- [Demo Installing software in VM](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Demo-Installing-software-in-VM/page.md): This article provides a tutorial for setting up a DevSecOps environment on an Azure VM, including software installation and deployment of an Nginx application.
- [Demo Stopping VM Instance to save Credits](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Demo-Stopping-VM-Instance-to-save-Credits/page.md): This tutorial explains how to stop an Azure VM to save credits during a free trial.
- [Jenkins Introduction](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Jenkins-Introduction/page.md): This article provides an introduction to Jenkins, covering its setup, features, and plugin installation for continuous integration and delivery.
- [Demo Jenkins Plugin Installation](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Demo-Jenkins-Plugin-Installation/page.md): This guide explains how to automate the installation of multiple Jenkins plugins using the Jenkins Remote API.
- [Demo Jenkins Pipeline Checking Versions](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Demo-Jenkins-Pipeline-Checking-Versions/page.md): This guide helps create a Jenkins Pipeline to verify the execution of Git, Maven, Docker, and Kubernetes commands.
- [Understanding the Course Usecase](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Understanding-the-Course-Usecase/page.md): This article explains a microservices architecture using Dockerized Node.js and Spring Boot services with REST API communication.
- [Demo Running Microservices Local Machine](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Demo-Running-Microservices-Local-Machine/page.md): This tutorial demonstrates setting up and running Spring Boot and Node.js microservices locally.
- [Maven Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Maven-Basics/page.md): This guide explains Apache Maven, its role in Java project automation, and how to use its lifecycle and directory conventions for building, testing, and deploying applications.
- [Demo Jenkins Git hub Integration and Maven Build](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Demo-Jenkins-Git-hub-Integration-and-Maven-Build/page.md): Learn to integrate GitHub with Jenkins using webhooks for automated builds and configure a Maven build within a Jenkins pipeline for Java projects.
- [Unit Tests Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Unit-Tests-Basics/page.md): This article covers unit testing practices, running tests with Maven, and measuring code coverage using JaCoCo.
- [Demo Unit Test and JaCoCo](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Demo-Unit-Test-and-JaCoCo/page.md): Learn to configure a Jenkins Pipeline for unit testing Spring Boot applications and generating JaCoCo code coverage reports.
- [Docker Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Docker-Basics/page.md): Learn to containerize applications using Docker by defining environments, building images, pushing to registries, and running containers locally.
- [Demo Docker Build and Push](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Demo-Docker-Build-and-Push/page.md): This article provides a guide to build and push a Docker image using a Jenkins Pipeline with Maven and Spring Boot.
- [Kubernetes Basics](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Kubernetes-Basics/page.md): This article covers the basics of Kubernetes, focusing on core objects like Pods, ReplicaSets, and Deployments for managing containerized applications.
- [Demo Kubernetes Deployment](https://notes.kodekloud.com/docs/DevSecOps-Kubernetes-DevOps-Security/DevOps-Pipeline/Demo-Kubernetes-Deployment/page.md): This tutorial covers a CI/CD workflow for deploying a Spring Boot application to Kubernetes using Jenkins Pipeline.