How to secure your CI/CD pipeline with Docker EE Platform
This document discusses how to secure a CI/CD pipeline with Docker EE Platform. It covers challenges with agility vs stability in development and operations. It also discusses cloud provisioning and microservices, and challenges around isolation, dependencies, and hybrid applications. The document then demonstrates using Dockerfile and docker-compose to build and deploy a voting app, and discusses challenges of running containers at scale. It also addresses security vs agility tradeoffs and ensuring authenticity of container images to prevent potential downtime. Finally, it demonstrates secure container orchestration with UCP, building and pushing images to DTR for scanning and promotion, and deploying containers with images and layer 7 routing.
How to secure your CI/CD pipeline with Docker EE Platform
- 1. How to secure your CI/CD pipeline with Docker EE Platform Sameer Kumar
- 2. Agility Vs Stability Dev • Developing new requirements without breaking things • Tracking dependencies becomes challenging • Continuous integration Ops • Deploying new packages with dependencies • Coping up with continuous deployment • Scaling becomes complex with complexity of application 6/6/2018 Tech Insights – The Digital Transformation Series 2
- 3. Cloud provisioning and Microservices Dev • Develop smaller services • Make changes without breaking other services • Micro-services with loose contract Ops • Provisioning made easy • Scale-out on demand • Scale smaller services easily 6/6/2018 Tech Insights – The Digital Transformation Series 3 Challenges • Isolation – Provisioning VM/Servers per service • Package and library dependency • Hybrid Application and Stack
- 4. Build, Ship, Run! Any App, Anywhere! 6/6/2018 Tech Insights – The Digital Transformation Series 4
- 5. Demo 1 – Dockerfile and docker-compose • Build using Dockerfile • Deploy voting app using docker-compose • Scale-able deployment with Docker Swarm services • Voting app with Swarm Services 6/6/2018 Tech Insights – The Digital Transformation Series 5
- 6. Challenges of running containers on Sacle 6/6/2018 Tech Insights – The Digital Transformation Series 6
- 7. Security Vs Agility 6/6/2018 Tech Insights – The Digital Transformation Series 7
- 8. Authenticity of Images Potential downtime 6/6/2018 Tech Insights – The Digital Transformation Series 8
- 9. Secure container orchestration with UCP 6/6/2018 Tech Insights – The Digital Transformation Series 9
- 10. Demo 2a – Swarm orchestration with UCP 6/6/2018 Tech Insights – The Digital Transformation Series 10
- 11. Demo 2b – Kube orchestration with UCP 6/6/2018 Tech Insights – The Digital Transformation Series 11
- 12. Demo 3a – Secure image repository 6/6/2018 Tech Insights – The Digital Transformation Series 12 • Build using Dockerfile • Push to DTR • Image Scanning with DTR • Image promotion/mirroring
- 13. Demo 3b – Deploying containers with images 6/6/2018 Tech Insights – The Digital Transformation Series 13
- 14. Demo 4 – Deployment with Layer 7 Routing 6/6/2018 Tech Insights – The Digital Transformation Series 14
- 15. Thank you!