Interview questions on DevSecOps For Kubernetes - Hands On Example

Security is highly discussed topic in interviews. Specially if you are in a system design discussion, you are expected to know all the available options which your underline cloud vendor provides.Be it AWS, Azure or GCP, they all provide high level of security on different layers of the infrastructure. Role level, resource level, instance level, network level, client level, everything is well documented and instructed.The point of our discussion for today is something which is very specific to organisations which are security driven. Many fintech organisations in the current age and time implement a structure around implementing security on top of third party clients and binaries.With new issues showing up every day on open source clients, fintech and security ( DevSecOps ) driven organisations hardly allow its users to use open source clients and binaries.We are taking one such example, where the interviewer is asking us to build a custom client / binary to interact with Kubernetes API-Server.
The question is not to see how good a binary you can develop (we are not even required to import the k8s client api), it's only to see if you can implement encapsulation around 3rd part applications. There are many ways in which this can be done, I’m taking the simplest form. This is an example which you can also practise and develop.

[@syedzaneb5196]

👍

[@vaibhavjain1in]

Hi bro, thank you so much for this video. I am newbie for DevOps and struggling with hands on experience but I am interested to know what course or cert I should do to become DevSecOps?

[@devops_with_syed]

Try to first understand the basics of devops and security separately. Take small git hub projects as reference and start implementing small projects yourself. I wont recommend any combined course. You should first be able to understand these two concepts in isolation