Book Image

Secure Continuous Delivery on Google Cloud

By : Giovanni Galloro, Nathaniel Avery, David Dorbin
Book Image

Secure Continuous Delivery on Google Cloud

By: Giovanni Galloro, Nathaniel Avery, David Dorbin

Overview of this book

Continuous delivery, a cornerstone of modern software engineering, facilitates quick and secure software delivery using a robust toolkit encompassing automated builds, testing, source code management, artifact storage, and deployment. Whether you integrate tools from different providers or use a set of managed services from a single cloud provider, the goal is to streamline setup, integration, and management. This book focuses on continuous delivery on Google Cloud. Starting with an introduction to continuous delivery and secure software supply chain concepts, this book uses hands-on exercises to demonstrate how to continuously test your application with Skaffold and Cloud Code, leverage AI-assisted code generation with Cloud Code and Cloud Workstations, and automate your continuous integration with Cloud Build. You’ll see how to store and scan your software artifacts on Artifact Registry, orchestrate deployments with Cloud Deploy, and release your software on GKE and Cloud Run, configured to admit only trusted code. Using an example application, you’ll implement tools for creating an end-to-end delivery pipeline using Google Cloud services. By the end of this book, you’ll be able to build a secure software delivery pipeline from development to production using Google Cloud managed services and best practices.
Table of Contents (19 chapters)
1
Part 1:Introduction and Code Your Application
6
Part 2: Build and Package Your Application
9
Part 3: Deploy and Run Your Application
13
Part 4: Hands-On Secure Pipeline Delivery and Looking Forward

Part 1:Introduction and Code Your Application

This part is an overview of continuous delivery, its underlying principles and practices, and best practices for protecting software artifacts from security threats along the software supply chain. In this part, you’ll also learn about Skaffold, Cloud Code, and Cloud Workstations, three tools that can help developers to be more productive, stay in the flow, and optimize their feedback loop.

This part has the following chapters:

  • Chapter 1, Introducing Continuous Delivery and Software Supply Chain Security
  • Chapter 2, Using Skaffold for Development, Build, and Deploy
  • Chapter 3, Developing and Testing with Cloud Code
  • Chapter 4, Securing your Code with Cloud Workstations