Secure Continuous Delivery on Google Cloud
Implement an automated and secure software delivery pipeline on Google Cloud using native services
Published on 23. September 2024
304 pages
978-1-80512-764-2 (ISBN)
Description
Build an end-to-end continuous delivery pipeline on Google Cloud and secure your software supply chain using GCP tools and services including Cloud Code, Cloud Workstations, Cloud Build, Artifact Registry, and Cloud Deploy
Key Features
Gain hands-on experience building an end-to-end software delivery pipeline using Google Cloud services
Deploy your applications on GKE, Cloud Run, and across hybrid and multi-cloud environments
Secure pipelines with artifact scanning, dependency vulnerability checks, signed provenance, and admission control
Purchase of the print or Kindle book includes a free PDF eBook
Book DescriptionContinuous delivery, a cornerstone of modern software engineering, facilitates quick and secure software delivery using a robust toolkit encompassing automated builds, testing, source code management, artifact storage, and deployment. Whether you integrate tools from different providers or use a set of managed services from a single cloud provider, the goal is to streamline setup, integration, and management. This book focuses on continuous delivery on Google Cloud. Starting with an introduction to continuous delivery and secure software supply chain concepts, this book uses hands-on exercises to demonstrate how to continuously test your application with Skaffold and Cloud Code, leverage AI-assisted code generation with Cloud Code and Cloud Workstations, and automate your continuous integration with Cloud Build. You'll see how to store and scan your software artifacts on Artifact Registry, orchestrate deployments with Cloud Deploy, and release your software on GKE and Cloud Run, configured to admit only trusted code. Using an example application, you'll implement tools for creating an end-to-end delivery pipeline using Google Cloud services. By the end of this book, you'll be able to build a secure software delivery pipeline from development to production using Google Cloud managed services and best practices.What you will learn
Create an end-to-end continuous delivery pipeline using Cloud Build, Artifact Registry, and Cloud Deploy
Develop, build, and deploy container-based applications with Skaffold and Cloud Code
Experiment with AI-assisted code generation in Cloud Code
Automate continuous integration with Cloud Build triggers
Automate deployment on GKE and Cloud Run through Cloud Deploy
Enhance pipeline security with Artifact Analysis, Binary Authorization, and SLSA
Apply best practices, including logging and monitoring
Who this book is forThis book is for DevOps, Platform, and Cloud Engineers tasked with managing application deployment and creating continuous delivery pipelines who want to automate workflows in a fully managed, scalable, and secure platform. Software developers involved in application delivery and interested in harnessing Google Cloud tools to optimize development flow status and feedback loop will also find this book useful. Prior knowledge of Google Cloud fundamentals (including Cloud APIs and IAM), software delivery, containerization, and Kubernetes will enhance the reading experience.
Key Features
Gain hands-on experience building an end-to-end software delivery pipeline using Google Cloud services
Deploy your applications on GKE, Cloud Run, and across hybrid and multi-cloud environments
Secure pipelines with artifact scanning, dependency vulnerability checks, signed provenance, and admission control
Purchase of the print or Kindle book includes a free PDF eBook
Book DescriptionContinuous delivery, a cornerstone of modern software engineering, facilitates quick and secure software delivery using a robust toolkit encompassing automated builds, testing, source code management, artifact storage, and deployment. Whether you integrate tools from different providers or use a set of managed services from a single cloud provider, the goal is to streamline setup, integration, and management. This book focuses on continuous delivery on Google Cloud. Starting with an introduction to continuous delivery and secure software supply chain concepts, this book uses hands-on exercises to demonstrate how to continuously test your application with Skaffold and Cloud Code, leverage AI-assisted code generation with Cloud Code and Cloud Workstations, and automate your continuous integration with Cloud Build. You'll see how to store and scan your software artifacts on Artifact Registry, orchestrate deployments with Cloud Deploy, and release your software on GKE and Cloud Run, configured to admit only trusted code. Using an example application, you'll implement tools for creating an end-to-end delivery pipeline using Google Cloud services. By the end of this book, you'll be able to build a secure software delivery pipeline from development to production using Google Cloud managed services and best practices.What you will learn
Create an end-to-end continuous delivery pipeline using Cloud Build, Artifact Registry, and Cloud Deploy
Develop, build, and deploy container-based applications with Skaffold and Cloud Code
Experiment with AI-assisted code generation in Cloud Code
Automate continuous integration with Cloud Build triggers
Automate deployment on GKE and Cloud Run through Cloud Deploy
Enhance pipeline security with Artifact Analysis, Binary Authorization, and SLSA
Apply best practices, including logging and monitoring
Who this book is forThis book is for DevOps, Platform, and Cloud Engineers tasked with managing application deployment and creating continuous delivery pipelines who want to automate workflows in a fully managed, scalable, and secure platform. Software developers involved in application delivery and interested in harnessing Google Cloud tools to optimize development flow status and feedback loop will also find this book useful. Prior knowledge of Google Cloud fundamentals (including Cloud APIs and IAM), software delivery, containerization, and Kubernetes will enhance the reading experience.
All prices
More details
Edition
Digital original
Language
English
Place of publication
Birmingham
United Kingdom
Target group
US School Grade: College Graduate Student
Edition type
Digital original
Product notice
Reflowable
File size
15,48 MB
ISBN-13
978-1-80512-764-2 (9781805127642)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Other editions
Additional editions
Giovanni Galloro | David Dorbin | Richard Seroter
Secure Continuous Delivery on Google Cloud
Implement an automated and secure software delivery pipeline on Google Cloud using native services
Book
04/2024
Packt Publishing
€81.10
Shipment within 3-4 weeks
Persons
Galloro Giovanni :
Giovanni Galloro has been working at Google since 2017 as a customer engineer specializing in container-based runtimes, DevOps tools, and application networking. He works with multiple organizations across EMEA, helping them to leverage these capabilities and improve their software delivery practices. Giovanni is a community ambassador for the Continuous Delivery Foundation and is a frequent speaker at developer conferences. Before Google, he worked at Microsoft, Red Hat, VMware, and HP, following the evolution of application platforms over the past 20 years.Avery Nathaniel :
Nathaniel Avery works at Google as an outbound product manager for the Google Cloud Application Ecosystem group, specializing in DevOps tools, and has spoken to many Fortune 500 companies about DevOps tooling solutions. Before joining Google, Nate spent more than 20 years in IT designing, planning, and implementing complex systems, integrating custom-built and COTS applications for federal government customers. Currently, he's working on better ways to build and use cloud resources to help customers deliver better products, safely and securely, without sacrificing velocity.Dorbin David :
David Dorbin has been a technical writer for more than three decades. He's been with Google for more than a dozen years, documenting payment applications, internal tools, and Google Cloud DevOps products. Before Google, he worked with numerous start-ups and established companies, documenting technologies in payment processing, digital publishing and rights management, consumer electronics, and cryptography for financial institutions. In his free time, Dave enjoys playing bass and banjolele (but never at the same time), or doing more damage to his Achilles' heel on the streets and trails of northern New Jersey.
Giovanni Galloro has been working at Google since 2017 as a customer engineer specializing in container-based runtimes, DevOps tools, and application networking. He works with multiple organizations across EMEA, helping them to leverage these capabilities and improve their software delivery practices. Giovanni is a community ambassador for the Continuous Delivery Foundation and is a frequent speaker at developer conferences. Before Google, he worked at Microsoft, Red Hat, VMware, and HP, following the evolution of application platforms over the past 20 years.Avery Nathaniel :
Nathaniel Avery works at Google as an outbound product manager for the Google Cloud Application Ecosystem group, specializing in DevOps tools, and has spoken to many Fortune 500 companies about DevOps tooling solutions. Before joining Google, Nate spent more than 20 years in IT designing, planning, and implementing complex systems, integrating custom-built and COTS applications for federal government customers. Currently, he's working on better ways to build and use cloud resources to help customers deliver better products, safely and securely, without sacrificing velocity.Dorbin David :
David Dorbin has been a technical writer for more than three decades. He's been with Google for more than a dozen years, documenting payment applications, internal tools, and Google Cloud DevOps products. Before Google, he worked with numerous start-ups and established companies, documenting technologies in payment processing, digital publishing and rights management, consumer electronics, and cryptography for financial institutions. In his free time, Dave enjoys playing bass and banjolele (but never at the same time), or doing more damage to his Achilles' heel on the streets and trails of northern New Jersey.
Content
Table of Contents
Introducing Continuous Delivery and Software Supply Chain Security
Using Skaffold for Development, Build, and Deploy
Developing and Testing with Cloud Code
Securing Your Code with Cloud Workstations
Automating Continuous Integration with Cloud Build
Securely Store Your Software on Artifact Registry
Exploring Runtimes - GKE, GKE Enterprise, and Cloud Run
Automating Software Delivery Using Cloud Deploy
Securing Your Runtimes with Binary Authorization
Demonstrating an End-to-End Software Delivery Pipeline
Integrating with Your Organization's Workflows
Diving into Best Practices and Trends in Continuous Delivery
Introducing Continuous Delivery and Software Supply Chain Security
Using Skaffold for Development, Build, and Deploy
Developing and Testing with Cloud Code
Securing Your Code with Cloud Workstations
Automating Continuous Integration with Cloud Build
Securely Store Your Software on Artifact Registry
Exploring Runtimes - GKE, GKE Enterprise, and Cloud Run
Automating Software Delivery Using Cloud Deploy
Securing Your Runtimes with Binary Authorization
Demonstrating an End-to-End Software Delivery Pipeline
Integrating with Your Organization's Workflows
Diving into Best Practices and Trends in Continuous Delivery
