Containerized Supply Chain Security

Training & Course

Production-ready containerized supply chain security with a Go based scenario.

This course provides a holistic understanding of the containerized software supply chain — from source code to production. Using Go as a primary example, it covers container image creation, supply chain security, Kubernetes deployment, and continuous delivery automation. Most concepts and tools apply equally well to applications written in other languages.

Public Course Dates:

17. & 18.09.25, 09:00 - 17:00

AUD 2'500, incl. GST

Octopus Deploy, Level 4, 199 Grey Street, South Brisbane QLD 4115

Caleb Woodbine

Content:

- Basic Go

- Go for web applications

- 12factor applications

- Building a container image with Docker

- Building a container image with Ko

- Using syft to produce SBOM artifacts

- Using cosign to sign container images

- Using cosign to attest SBOMs

- Demystifying Containers

- Container Runtimes such as Docker or Podman

- Container Networking

- Images & Registries

- Kubernetes Architecture and Control Plane

- Overview Workload Resources

- Deployments and Pods

- Services and Kubernetes Networking

- Namespaces and Kubeconfig Context

- Secrets and Configmaps

- NetworkPolicies

- Ingress and Gateway API

- Introduction to Helm

- Introduction to Kustomize

- Quickstart CI/CD with Containers and Kubernetes (based on *GitLab CI/CD)

- Using cosign to sign container images in GitLab CI

- Using cosign to attest SBOMs in GitLab CI

- CD Pull vs. Push

- Demo: CI/CD with ArgoCD

Disclaimer: The actual course content may vary from the above, depending on the trainer, implementation, duration and constellation of participants.

Whether we call it training, course, workshop or seminar, we want to pick up participants at their point and equip them with the necessary practical knowledge so that they can apply the technology directly after the training and deepen it independently.

Goal:

After completing this course, participants will be able to build applications in Go, deploy them as container in Kubernetes using ArgoCD and verify that the containers running in production are built from CI.

Form:

Through a balanced mixture of theory and practice, our experienced trainer guides the participants through the various topics, accompanied by live demonstrations and practical exercises to deepen understanding.

Target Audience:

Software developers and DevOps engineers who wish to understand the full picture of supply chain and software deployment automation.

Requirements:

Git, Programming, Containers, Basic Networking, DevOps, Minimal Kubernetes.

Preparation:

Every participant will receive a questionnaire and a preparation checklist after registration. We provide a comprehensive laboratory environment for each participant, so that all participants can directly implement their own experiments and even complex scenarios.