Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

DevSecOps with Azure, GitHub Action, GitOps and AKS

Name: DevSecOps with Azure, GitHub Action, GitOps and AKS
Rating: 4.6 (101 reviews)

DevSecOps for a Gaming Project using GitOps (ArgoCD), Azure Cloud (AKS) and GitHub Actions with Trivy, SonarQube

Created byA Security Guru, Raghu The Security Expert

Last updated 10/2025

English

English [Auto],

What you'll learn

Learn to Deploy a Game on Azure Kubernetes Service
Learn to use GitOps principles while implementing DevSecOps pipeline
Learn to implement DevSecOps pipeline for a popular Game using GitHub Actions
Learn to integrate SonarQube deployed on EC2 instance in the DevSecOps pipeline
Learn to implement Container Security for Game using GitHub Actions
Learn to Dockerize Game and build the project

Course content

9 sections • 29 lectures • 3h 21m total length

Introduction and Agenda8:30
Build an end-to-end DevSecOps pipeline for a browser Mario game using GitHub Actions, GitOps principles, and Azure Kubernetes Service, with Argo CD deployment, SonarQube, and Trivy.

What is GitOps?5:08
Discover how gitops uses git as the single source of truth to automate CI, CD, and security, deploying infrastructure and apps via pull-based pipelines with Kubernetes.
How GitOps is different from DevOps and DevSecOps?5:27
Discover how GitOps prioritizes deployments and declarative config in version control as the single source of truth, unlike DevOps and DevSecOps with broader lifecycle and security focus.

Let's understand different parts of DevSecOps Case Study4:40
Understand a DevSecOps case study using GitHub Actions and GitOps to deploy a Mario Brothers game on Azure Kubernetes Service with SonarQube tests and Argo CD pipelines to Docker Hub.
Hands On: Let's Create a Azure Cloud account6:30
Sign up for an Azure free account by creating a Microsoft account, verifying email and phone, and using the Azure portal to access 12 months of services and 13,300 credits.
Hands On: Let's create Kubernetes Cluster using Azure Kubernetes Service12:59
Learn to create a Kubernetes cluster on the Azure portal, configure resource groups and node pools, and validate quotas and deployment.
Hands On: Let's install ArgoCD on Azure Kubernetes Cluster10:10
Install Argo CD on an Azure Kubernetes cluster, set up the Argo CD namespace, expose the server with a load balancer, and log in with admin password to enable GitOps.

Hands On: Let's install SonarQube on AWS EC2 instance11:32
Install SonarQube on an AWS EC2 instance using Docker, pull the 9.9 community image, map port 9000, adjust security group, and log in with admin/admin.
Hands On: Let's Clone Mario GitHub repo on local system5:02
Implement a DevSecOps pipeline for a Super Mario game using GitOps and GitHub Actions, including Sonar Cube integration, static testing, and container scanning.
Hands On: Part 1 - Integrate SonarQube for SAST in DevSecOps Pipeline4:45
Integrate SonarQube for SAST in a DevSecOps pipeline using GitHub actions, configuring workflows, secrets, and sonar properties to run static analysis on the Super Mario game project.
Hands On: Part 2 - Integrate SonarQube for SAST in DevSecOps Pipeline4:22
Integrate SonarQube in a devsecops pipeline by adding yaml github action workflow, performing a SonarQube sas scan on the main branch with checkout and secrets for host URL and token.
Hands On: Part 3 - Integrate SonarQube for SAST in DevSecOps Pipeline7:41
Create a Sonar Cube project and a sonar-project.properties file, generate a project token, and configure GitHub secrets to enable a SAST scan in the DevSecOps pipeline.
Hands On: Part 4 - Integrate SonarQube for SAST in DevSecOps Pipeline6:13
Pushes code via GitHub actions, integrates SonarQube for SAST in a DevSecOps pipeline, and reviews security hotspots, code smells, and vulnerabilities in the Super Mario project.
Hands On: Implement Quality Gates for SAST in DevSecOps pipeline6:20
Implement a custom SonarQube quality gate in a DevSecOps pipeline, set it as default, and enable a GitOps YAML gate check to fail builds when line coverage falls below 90%.

Hands On: Create a DockerHub account and DockerHub repository3:10
Create a Docker Hub account and public repository for the Super Mario game image, then build, push, and deploy the Docker image to an Azure Kubernetes cluster via GitOps.
Hands On: Write a Dockerfile for Mario Game Project5:04
Dockerize Super Mario project by building a Dockerfile on Alpine with Tomcat, copy the web app, expose port 8080, and run Tomcat for Azure Kubernetes deployment in a GitOps pipeline.
Hands On: Part 1 - Build and Push Mario Docker Image to DockerHub Repo8:29
Build and push a Super Mario docker image to Docker Hub using a GitHub action triggered on main, including docker login, build, and push steps with a static tag.
Hands On: Part 2 - Build and Push Mario Docker Image to DockerHub Repo8:37
Demonstrates building and pushing a Mario Docker image to Docker Hub using GitHub Actions, including creating Docker Hub secrets and logging in.
Hands On: Implement Dynamic Tagging for Mario Docker Image7:08
Dynamically tag the Super Mario Docker image by reading version.txt, incrementing it via a GitHub Action, and pushing the updated image to Docker Hub.

Hands On: Part 1 - Implement Container Scan for Mario Game6:41
Implement a container security scan for the Super Mario Docker image within a DevSecOps pipeline, pulling from Docker Hub, applying a quality gate with a Trivy scan to gate builds.
Hands On: Part 2 - Implement Container Scan for Mario Game6:13
Run a container scan on the Super Mario Docker image with Trivy in a GitHub actions DevSecOps workflow, adjust exit codes, and prepare deployment on Azure Kubernetes Service.

Hands On: Part 1 - Deploy Mario Game on Azure Kubernetes Cluster using ArgoCD6:38
Deploy a Super Mario Docker image to Azure Kubernetes Service using Argo CD and GitOps. Enable auto sync, place deployment.yaml at the repo root, and verify deployments every few minutes.
Hands On: Part 2 - Deploy Mario Game on Azure Kubernetes Cluster using ArgoCD12:37
Deploy the Super Mario docker image to Azure Kubernetes Service using Argo CD, creating a deployment.yaml in the GitHub repo and exposing it via a load balancer on port 8600.

Understanding End to End DevSecOps pipeline for Mario Game5:09
Implement an end-to-end DevSecOps pipeline for a Mario Brothers game using GitOps, GitHub Actions, SonarQube, Docker, Argo CD, and Azure Kubernetes Service for automated CI, security, and deployment.
Hands On: Part 1 - Implement End to End DevSecOps pipeline for Mario Game10:18
Implement end-to-end DevSecOps pipeline using GitOps, update game controls to S key, build and tag a docker image, run sonar cube, and deploy to Azure Kubernetes Service with Argo CD.
Hands On: Part 2 - Implement End to End DevSecOps pipeline for Mario Game9:52
Develop end-to-end devsecops for Mario game by orchestrating gitops workflows, sast Sonarqube scans, docker build and push, container image scan with Trivy, and dynamic deployment.yaml and version.txt updates.
Hands On: Part 3 - Implement End to End DevSecOps pipeline for Mario Game8:57
Implement an end-to-end DevSecOps pipeline for a Mario game using GitOps with GitHub Actions, Sonar Cube scans, Docker image tagging, and Argo CD deployments on Azure Kubernetes Service.

Requirements

Basic Git Commands
Basic Cloud Knowledge
Interest to learn about DevSecOps and GitOps

Description

Course Updates:

v 1.0 - May 2024

Added DevSecOps Handbook document in Section 9

Course Description:

Embark on a transformative journey to master the seamless integration of Development, Security, and Operations in the world of cloud computing. Welcome to "DevSecOps with Azure Cloud, GitOps, and GitHub Actions with deployment on AKS," an intensive and hands-on course designed to empower you with the essential skills needed to thrive in the rapidly evolving landscape of modern software development.

Key Highlights:

GitOps Principles:
- Discover the revolutionary paradigm of GitOps, where version control systems, particularly Git, become the backbone of your operations. Explore the benefits of declarative configuration and collaborative workflows.
GitHub Actions Unleashed:
- Unleash the potential of GitHub Actions to automate your workflows. Learn to build, test, and deploy applications seamlessly, reducing manual intervention and accelerating your development lifecycle.
DevSecOps Best Practices:
- Elevate your security posture by integrating security practices into every stage of your development pipeline. Understand and implement DevSecOps best practices to safeguard your applications from the ground up.
Real-world Scenarios and Case Studies:
- Apply your knowledge to real-world scenarios and industry-relevant case studies. Gain insights into successful DevSecOps implementations and learn from the experiences of leading organizations.
Collaborative Learning Environment:
- Engage in collaborative and interactive learning environments. Participate in discussions, and hands-on labs that simulate real-world challenges faced by DevSecOps professionals.

Who Should Attend:

Developers keen on enhancing their understanding of secure development practices.
Operations professionals looking to streamline and automate deployment processes.
Security enthusiasts aiming to integrate security seamlessly into the development lifecycle.

Prerequisites:

Basic understanding of Azure Cloud and Git.
Familiarity with software development and deployment processes.

Transform your career by enrolling in "DevSecOps with Azure Cloud, GitOps, and GitHub Actions." Equip yourself with the skills that leading organizations demand in the era of secure and collaborative software development. Join us on this exciting journey to become a DevSecOps champion!

Who this course is for:

Developers
Security Engineers
DevOps Engineers
DevSecOps Engineers

DevSecOps with Azure, GitHub Action, GitOps and AKS

What you'll learn

Explore related topics

Course content

Introduction1 lecture • 9min

Basics of GitOps, DevOps and DevSecOps2 lectures • 11min

DevSecOps Case Study and Prerequisites4 lectures • 34min

Integrate Static Application Security Testing for Mario Project using DevSecOps7 lectures • 46min

Let's Dockerize Mario Game Project and store Mario Docker image in DockerHub5 lectures • 32min

Let's implement Container Scan for Mario Game2 lectures • 13min

Let's Deploy Mario Docker Game on Azure Kubernetes Cluster2 lectures • 19min

Implement End to End DevSecOps pipeline for Mario Game after making code changes4 lectures • 34min

Next Steps2 lectures • 4min

Requirements

Description

Who this course is for: