An introductory lab to installing Rancher and using it to administrate your Kubernetes environment

This is a comprehensive lab centered around demonstrating how to enable teams to develop secure code vs. defending deployed applications via CI/CD pipelines with various different examples of security tests.

This lab shows developers how to deploy their applications to Red Hat OpenShift Container Platform 4 (OpenShift), the premier Enterprise-level container platform based on Kubernetes. Leveraging the Source-to-Image feature, the lab provides hands-on instructions on migrating non-containerized, and various levels of containerized applications to OpenShift.

This lab demonstrates the use case for securing a Open Banking transaction initiated by a PSU (Payment Service User) by logging into the TPP (Third Party App).

Introducing security best practices during the early stages of software development and deployment can bring great benefits and helps improve the overall security posture of the application. Adopting agile methodologies can also improve the collaboration between teams and incorporate the DevSecOps practices within an organization, this can help an organization to achieve the GitOps principle and make their transition towards IaC. This lab focuses on the concept of declarative Adv. WAF policy lifecycle in a automated CI/CD pipeline. This pipeline uses automation tools such as Terraform and Ansible to manage the state of the devices.

The purpose of this lab is to demo how NGINX Controller API Management Module and NGINX App Protect can secure the OAuth Authorization Code flow, which is core to Open Banking specifications. The NGINX App Protect will be deployed as an Ingress Controller for Kubernetes and will provide both negative and positive security by ingesting the OpenAPI declaration file. The NGINX API Gateway will be controlled by NGINX Controller, will publish the application API based on the same OpenAPI declaration file, will provide JWT authentication and authorization and enforce rate limiting. The deployment and configuration of these elements will be performed automatically through a CI/CD pipeline. ELK dashboards will be used for visualization purposes and, lastly, a DAST tool will also be run as part of the CI/CD pipeline. BIG-IP APM is deployed as both Authorization Server with OpenID Connect support and as OAuth Client, in separate instances.

VMware Tanzu Kubernetes Grid simplifies Kubernetes for developers, enabling them to run the same K8's across private data center, public clouds and edge locations for a consistent, secure experience. Day 1 and beyond operations are greatly simplified with complete, easy to upgrade K8's runtimes with fully validated components. WWT has designed this lab to demonstrate TKG from the viewpoint of a typical developer whose focus lies mainly in deploying and running their application, as well as the VMware administrator whose focus is on the infrastructure and operations that enable and support TKG.

NGINX accelerates content and application delivery, improves security and facilitates availability and scalability for the busiest applications on the Internet today. In this lab, we will discover the most common implementations of the NGINX software and its integration with automation platforms.