Course Outline
Introduction
Overview of Kubernetes API and Security Features
- Access to HTTPS endpoints, Kubernetes API, nodes, and containers
- Kubernetes Authentication and Authorization mechanisms
Understanding How Hackers Attack Your Cluster
- Methods hackers use to locate your etcd port, Kubernetes API, and other services
- Techniques for executing code within your containers
- Methods for escalating privileges
- Case Study: Analysis of Tesla’s exposed Kubernetes cluster
Setting Up Kubernetes
- Selecting the appropriate distribution
- Installing Kubernetes
Utilising Credentials and Secrets
- The lifecycle of credentials
- Understanding secrets
- Distributing credentials effectively
Managing Access to the Kubernetes API
- Securing API traffic using TLS
- Implementing authentication for API servers
- Configuring role-based authorisation
Managing User and Workload Capabilities
- Understanding Kubernetes policies
- Restricting resource consumption
- Limiting container privileges
- Controlling network access
Managing Node Access
- Separating workload access controls
Protecting Cluster Components
- Restricting access to etcd
- Disabling unnecessary features
- Modifying, removing, and revoking credentials and tokens
Securing Container Images
- Managing Docker and Kubernetes images
- Building secure images
Managing Access to Cloud Resources
- Understanding cloud platform metadata
- Restricting permissions for cloud resources
Evaluating Third-Party Integrations
- Minimising permissions granted to third-party software
- Assessing components capable of creating pods
Establishing a Security Policy
- Reviewing the existing security profile
- Developing a security model
- Considering cloud-native security requirements
- Adopting other best practices
Encrypting Data at Rest
- Encrypting backups
- Encrypting the entire disk
- Encrypting secret resources within etcd
Monitoring Activity
- Enabling audit logging
- Auditing and governing the software supply chain
- Subscribing to security alerts and updates
Summary and Conclusion
Requirements
- Prior experience working with Kubernetes
Audience
- DevOps Engineers
- Developers
Testimonials (3)
About the microservices and how to maintenance kubernetes
Yufri Isnaini Rochmat Maulana - Bank Indonesia
Course - Advanced Platform Engineering: Scaling with Microservices and Kubernetes
How trainer deliver knowledge so effectively
Vu Thoai Le - Reply Polska sp. z o. o.
Course - Certified Kubernetes Administrator (CKA) - exam preparation
The knowledge and exchanges with Augustin
