Advanced Azure DevSecOps Course with Real-Time Projects

Explore the software development life cycle and SDLC models, including waterfall, agile, scrum, and Kanban. Then understand what DevOps is and walk through the DevOps life cycle and daily workflows.

Understand the software development life cycle (SDLC) as a structured framework with planning, designing, implementation, testing (automation and manual), deployment, and maintenance to deliver high quality software and shorten time.

Explore the waterfall model as a linear, sequential software development life cycle approach where each phase depends on the previous one, highlighting its suitability for small projects and change constraints.

Explore agile methodology as an iterative approach that uses 2 to 8 weeks per iteration, with requirement gathering, design, development, testing, maintenance, and client feedback.

This lecture outlines the 12 agile principles, highlighting customer satisfaction, changing requirements, frequent delivery of software, communication, face-to-face collaboration, measured progress, good design, and how agile methods derive from them.

Explore scrum methodology as an agile framework and learn the roles of the scrum master and product owner, who remove impediments, facilitate sprint events, and align work with stakeholder expectations.

Explore the scrum workflow, including the product owner, scrum master, and cross-trained team, and artifacts—product backlog, sprint backlog, increment—and ceremonies like sprint planning and daily scrum.

Kanban is a lean scheduling system for agile and DevOps software projects, using virtual cards on a visual board to move work from backlog to completed and match capacity.

Explore how DevOps blends people, process, and tools to deliver continuous value through the life cycle stages like planning, development, testing, release and deployment, monitoring, and feedback.

Explore module two of Azure DevOps by creating a project and organization, learning work item management, agile process, user stories, backlogs, and the end-to-end Azure Boards demo.

Sign in to Azure DevOps, create your organization, and start practicing for free with 1800 pipeline minutes and 2 GB of storage.

Sign in to Azure portal, create a subscription (free trial or pay as you go), and submit the Azure DevOps parallelism form to receive 1800 free pipeline minutes.

Learn how Azure DevOps unites people, process, and tools to plan smarter, collaborate effectively, and deliver software faster, with Azure Boards, Azure Repos, Azure Pipelines, Test Plans, and Azure Artifacts.

Sign in to Azure DevOps, create an organization and a project, choose Git and four work item types (basic, scrum, agile, CMMi), and explore dashboards, wiki, and pipelines for visibility.

Discover Azure boards, a web-based tool to plan, track, and discuss work for agile, scrum, and kanban backlogs using boards, sprints, and queries.

Explore how backlogs organize work items into epics, features, user stories, and tasks within Azure Boards, using a shopping portal as the context.

Explore work item types in Azure boards, compare basic, scrum, agile, and CMMi processes, and learn how backlog items, sprints, and issue tracking support real-time project management.

Learn to manage Azure DevOps boards, work items—epics, features, and user stories—navigate backlogs, define iterations, and link parent-child items with CI/CD pipelines.

Master work item management in Azure DevOps: create tasks for user stories, estimate with story points, import backlogs via CSV, and coordinate Kanban boards, iterations, and areas for project tracking.

Learn to manage sprints, backlogs, and capacity, create tasks, and monitor progress with burndown, burn up, CFD, and velocity charts while building dashboards and queries.

Use delivery plans to visualize backlogs across multiple projects and teams for Scrum master and project owners, and use analytics with Power BI for forecasting in Azure DevOps.

Learn to create a custom work item process in Azure DevOps by inheriting templates, adding fields and new work item types, deployable in a new project with recovery options.

Master version control basics, git setup, and a hands-on demo of 50 local commands, then explore Azure Repos, branching, merging strategies, and advanced topics.

Install git on Mac, Windows, and Linux using standalone installers or package managers, use git bash for commands, and verify with git version.

Explore version control, also known as source control, for tracking and managing code changes in centralized or distributed systems, preventing conflicts and enabling global collaboration and disaster recovery.

Compare centralized and distributed version control, where a central server stores all code and developers commit to the main branch, while distributed systems enable local clones and flexible workflows.

Compare distributed version control with centralized systems, and learn how local repositories, commits, and pushes synchronize with a remote repository such as git. Explore offline work and local history.

Explore git, a distributed version control tool, and learn the three stages: working directory, staging area, and local repository, plus core commands like init, add, and commit with descriptive messages.

Master basic git commands, branch management, and switching between master and develop. Learn merging, resetting, reverting, cherry-picking, tagging, and stash workflows to support production and feature work.

Demonstrates creating and adding a remote to Azure Repos, pushing local history to a remote, and using git clone, fetch, pull, and push with origin.

Learn how to clone and authenticate to Azure Repos using SSH or HTTPS, generate and manage RSA key pairs, and set up credentials for seamless push and pull.

Push local branches to a remote Azure Repos, create and switch branches like release and feature, and integrate work items while exploring commits, tags, and pull request concepts.

Explore pull requests, merging and squash options, default and compare branches, reviewers, and work items. Learn no fast forward and squash histories, preserving or simplifying history via pull requests only.

Explore merge types in Azure Repos through pull requests from develop to UAT and master, focusing on rebase with cherry pick, linear history, and semi-linear and no fast-forward merges.

Explore git cherry picking and revert in Azure portal, comparing reset versus revert, and learn to create PRs with temporary branches to selectively merge changes like page.html into develop.

Define Azure branch policies to enforce pull requests with required reviewers, work item linkage, comment resolution, squash merges, and build status checks, enabling automatic approvals.

Explore git flow and trunk-based branching, defining branch roles (main, develop, feature, release, hotfix), and align them with CI/CD pipelines and deployment to production.

Learn how Git hooks with talisman protect repositories by scanning for secrets like keys and tokens, using pre-commit and pre-push checks, with a hands-on installation and demo.

Explore module four of the advanced azure devsecops course by building classic build and release pipelines for an asp.net core app, and compare continuous integration, delivery, and deployment approaches.

See how continuous integration automates build and test pipelines, creates artifacts, and runs security checks, publishing to container registries and deployment targets like VMs, Azure web apps, and Kubernetes.

Discover agent pools as computing infrastructures with agents that run one job at a time, and compare Microsoft hosted versus self-hosted agents for pipelines.

Master self-hosted Azure DevOps agents by provisioning an Ubuntu VM, creating a Linux agent pool, configuring the agent with a pat, and validating with a simple yaml pipeline.

Learn to create a classic Azure DevOps build pipeline for an ASP.NET core web app using dotnet 6, with git workflow, Visual Studio, NuGet restore, and artifact drop.

Discover how Azure DevOps build triggers enable true continuous integration by using branch and path filters, and learn about schedule, pipeline completion, and PR completion triggers.

Learn to debug a failed build pipeline by examining logs, viewing raw logs, and identifying whether the issue is in the agent pool or the application, then adjust agent configuration.

Learn how Azure Active Directory, now Entra ID, handles authentication and authorization with RBAC across subscriptions, and how a service principal enables secure connections to Azure DevOps.

Compare service principal and managed identity in Azure, detailing creation, lifecycle, permissions, secret rotation, and cross-resource usage for secure cloud access.

Create a service connection between Azure Pipelines and Azure cloud using a service principal, configured manually at the subscription level with ARM, enabling release pipelines.

Explore deploying a dotnet web app to Azure App Service with a release pipeline, using CI/CD and Azure DevOps, and monitoring with Application Insights.

Explore how continuous delivery automates deployments to lower environments with manual approvals for stage and production, versus continuous deployment that automatically releases every passing change to all environments.

Compare monolithic and microservice architectures, showing monoliths as single, tightly coupled deployments and microservices as loosely coupled components communicating via APIs for scalable, agile development.

Explore pre and post conditions in release pipelines, using approvers and gates to pause, evaluate, and control deployments across dev, QA, and prod.

Explore pipeline variables in Azure DevOps, including predefined and custom variables, environment scope, variable groups, and strategies to reuse values across build and release pipelines.

Explain deployment groups as a logical set of target machines with agents, enabling parallel deployments across dev, test, and production environments from a single release pipeline.

Learn how task groups encapsulate common tasks into a single reusable unit for classic build and release pipelines, enabling central updates across many pipelines.

Configure and publish packages with Azure Artifacts, create private feeds, and integrate NuGet, npm, and Maven into your CI/CD pipelines by packaging, pushing, and consuming libraries securely.

Explore module five and the second Java-based project, establish Maven prerequisites, and build a yaml-based Java Maven pipeline with JUnit, JaCoCo, SonarQube, vulnerability scanning, and deployment in Azure DevOps.

Explore Maven, the Apache build and project management tool, and its pom.xml configuration, lifecycle phases from validation to deployment, for Java and Spring Boot projects.

Master the maven lifecycle from scratch, learning core commands (validate, compile, test, package, site, clean) to build, test, and package a java application and generate artifacts.

Explain the two-tier Java Spring Boot application with home, compare, and incremental pages, its interaction with a Node.js calculation service, and microservice deployment with containers in Kubernetes using YAML.

Master YAML basics by exploring data serialization, mapping and lists, data types, and key syntax rules like spaces over tabs and three dashes for boundaries.

Create a Java Maven spring boot project with modules and unit tests, configure a git repository, and build a YAML Azure DevOps pipeline to package artifacts.

Debug a java maven build pipeline in yaml, fix pom.xml location in java_project, and validate a jar artifact with 100% junit tests, while previewing unit tests, code coverage, and SonarQube.

Discover unit test cases in a Java Maven project, using JUnit to test smallest units and YAML-driven builds, and understand regression testing, code coverage, and DevOps ownership of test pipeline.

Explore code coverage as a white-box testing metric for Java Maven projects, and learn how Jacoco integrates with continuous integration pipelines to generate reports and guide adding unit tests.

Explore static code analysis with SonarQube, identifying defects, security vulnerabilities, and quality issues in code without execution, and understand its architecture, integration with CI/CD, and quality gates.

Create a virtual machine, install Docker, and deploy a SonarQube server via a Docker image to enable code scanning and CI/CD integration.

Integrate SonarQube with Azure DevOps pipeline for a Java Maven project, configuring service connections, Maven analysis, JDK 17, JaCoCo, and enforcing quality gates that fail the build on issues.

Automate vulnerability scanning to identify security weaknesses across applications and infrastructure, using Mend Bolt in the CI/CD pipeline within Azure DevOps to detect CVEs and license compliance.

Integrate Mend Bolt scanning into the CI pipeline, configure Azure DevOps with Azure Active Directory (Microsoft Entra ID), and generate vulnerability and license-compliance reports with CVSS and CVE details.

Explore deploying a Java Maven application with a YAML-based Azure DevOps pipeline, comparing run once, rolling, and canary strategies for zero downtime when possible.

Explore lifecycle hooks in deployment, including pre deploy, route traffic, and post deploy steps, with deployment jobs and YAML tasks to manage canary and rollback on Azure web app.

Deploys a Java Maven application to Azure Web App via a YAML pipeline, showcasing multi-stage CI/CD with Azure CLI infrastructure, resource group, App Service, and environment-based release.

Explore YAML templating in Azure DevOps, learn to replace task groups with reusable templates, enabling parameterized, maintainable pipelines through centralized templates and variable groups.

Compare Dacpac and backpack packaging for sql database automation, covering data tier applications vs backups, schema and data handling, ddl support, and ci/cd pipeline integration.

Set up a cloud sql server and database, enable firewall rules, and create a dacpac with visual studio to outline a ci/cd pipeline for automated deployment.

Create a git repository and a Visual Studio database project from the dacpac, then set up Azure DevOps ci/cd with release to Azure SQL and key vault integration.

Discover how to automate a Microsoft SQL database in a CI/CD pipeline, covering dacpac and backpack concepts, DML vs. DDL operations, and Key Vault integration.

Demonstrates testing and deploying sql scripts through an azure ci/cd pipeline, adding scripts to a script folder in Visual Studio database project, building a dacpac, and deploying subject table changes.

Integrate Azure Key Vault with Azure DevOps release pipelines to securely manage secrets like passwords and certificates, and configure access via service principals.

Explore containerization basics, compare machines and containers, and learn how docker images are created, pushed to registries, and deployed with Kubernetes. Review dockerfile basics, docker compose, and the CI/CD workflow.

Examine containerization and how containers bundle an app with its dependencies to run across environments. Discover portability, scalability, fault tolerance, and how Docker and Kubernetes enable agile deployments.

Compare virtual machines and containers to understand isolation, lightweight images, and rapid boot times. Weigh performance against cost, portability, and scalability to decide between virtual machines and containers.

Discover how Docker is a software platform that builds, tests, and quickly deploys applications in standardized containers, packaging code, libraries, and runtime for isolated, scalable environments.

Set up Docker, pull the nginx image, run in detached mode with port binding (8080 to 80), and map volumes for persistent data; debug with logs and inspect.

Learn how a docker file builds images and runs containers by detailing base images, work directories, copying code, exposing ports, and the roles of entrypoint and CMD.

Build a custom dotnet 6.0 app inside a multi-stage dockerfile, restore and publish dependencies, and create a runnable image exposed on container port 5000 with host port 8080 mapping.

Explore how to store a custom docker image in a private registry using acr, authenticate with the cli, tag, and push to repositories for deployment.

learn to orchestrate multi-container apps with docker compose by defining services in a yaml file and managing the full lifecycle with docker compose up and down.

Explore container management with Kubernetes, including architecture, services, persistence, deployment strategies, and taint tolerance, through practical demos and AKS deployment. Build a CI/CD pipeline and deploy dotnet app to AKS.

Learn how container management automates creation, deployment, scaling, and rollouts, and how to perform rollback, load balancing, and monitoring using Kubernetes, Docker Swarm, and OpenShift.

Kubernetes acts as container management and orchestration, automatically bin packing, deploying at scale, managing networks and storage, self-healing, zero downtime rollouts, and secure secrets and configmap in CNCF open source.

Explore the Kubernetes architecture, including control plane components api server, etcd, scheduler, and controllers, plus the worker node with kubelet, kube proxy, and container runtime, and the role of pods.

Set up a production-grade Kubernetes cluster with kubeadm, initializing the control plane, joining workers, and installing a CNI such as VB.Net for pod networking.

Expose your Kubernetes deployment with services, using cluster IP service for internal pod communication, node port for internet access, or a load balancer with an external IP to route traffic.

Discover how Kubernetes labels and selectors group pods and drive deployment and service creation with declarative YAML manifests. Learn how replicas, templates, and kubectl apply enable CI/CD automation.

Explore Kubernetes deployment strategies, comparing rolling update with max unavailable and max surge for zero-downtime updates against recreate, which drops all pods before new ones come up.

Explore Kubernetes persistent volumes with PVs and PVCs, including manual provisioning, binding, and reclaim policies like retain and delete, plus using a pod to persist logs.

Demonstrates taint and tolerance in Kubernetes: taints repel pods from a node, while tolerations in pods allow scheduling on tainted nodes.

Explore Azure Kubernetes Service (AKS) as a fully managed platform for deploying containerized workloads with kubectl, while integrating with Azure networking and a container registry for CI/CD.

Demonstrates setting up an AKS cluster, connecting with Azure CLI and kubectl, using YAML deployments, dynamic PVs with PVCs, storage classes, and CSI drivers; covers basic metrics with kubectl top.

Demonstrates deploying a dotnet application on an AKS cluster via azure CI/CD pipelines, building and pushing a docker image to acr, then deploying with manifest files and a release pipeline.