Summary
In this chapter, we learned which services manage containerization in GCP. We deployed our own Docker and Kubernetes clusters. Then, we conducted a security assessment with Trivy.
The default way to deploy a Docker containerization system in GCP uses Cloud Build to simplify the Docker build steps and Cloud Run to help run containerized apps, all while your Docker host runs in GCE.
The simplest way to deploy Kubernetes in GCP is to use GKE.
Trivy is a third-party pentesting application that has lots of great features for vulnerability scanning both Docker and Kubernetes deployments.
In the next and final chapter, I’ll quiz you on what we’ve learned in the previous 12 chapters. Plus, I’ll give you tips for writing and signing pentesting contracts, more tips for writing pentest reports, and introduce you to cloud and pentesting-related certifications that may make you more employable as a cloud pentester.
