Questions tagged [devsecops]

Use this tag for questions about DevOps and Security

Filter by
Sorted by
Tagged with
47 votes
7 answers
4k views

What are best and comprehensive practices to consider when running docker in production?

Finally, you are so much in love with Docker that you want to move your online business-critical production systems with sensitive customer data to a Docker Swarm. Some might even already have done so....
Ta Mu's user avatar
  • 6,802
3 votes
3 answers
94 views

How to raise awareness about the security risk involved with running Docker?

I'm in the process of preparing a Docker course for students with little to no familiarities with containers, the underlying OS mechanisms involved, and their implied limitations. In many Docker ...
Sylvain Leroux's user avatar
2 votes
3 answers
115 views

What are trusted providers that offer wildcard certificates and associated costs to be used in an Orchestration Platform like Kubernetes?

Currently, certbot and nginx are used to create a trusted webpage. Recently, an attempt was made to move the images to a kubernetes cluster on google cloud platform. A guide was found to configure an ...
030's user avatar
  • 13.1k
0 votes
2 answers
336 views

CIS Benchmark for Docker and Docker Bench for Security: why, how and when?

I just learned about Docker Bench for Security and CIS Benchmark for Docker Community Edition. Why, how and when am I supposed to use these tools?
Sylvain Leroux's user avatar