Course Outline
Introduction
Kubernetes API and Security Features Overview
- Accessing HTTPS endpoints, Kubernetes API, nodes, and containers.
- Understanding Kubernetes Authentication and Authorization mechanisms.
Understanding Cluster Attack Vectors
- Methods hackers use to locate your etcd port, Kubernetes API, and other services.
- Techniques for executing code inside containers.
- Strategies for privilege escalation.
- Case Study: Analysis of the Tesla Kubernetes cluster exposure.
Setting Up Kubernetes
- Selecting the appropriate distribution.
- Installation procedures for Kubernetes.
Managing Credentials and Secrets
- The lifecycle of credentials.
- Deep dive into secrets management.
- Strategies for credential distribution.
Managing Access to the Kubernetes API
- Encrypting API traffic using TLS.
- Implementing authentication protocols for API servers.
- Defining authorization rules for various roles.
Managing User and Workload Capabilities
- Understanding Kubernetes policy frameworks.
- Restricting resource consumption.
- Limiting container privileges.
- Controlling network access.
Node Access Control
- Isolating workload access.
Securing Cluster Components
- Restricting access to etcd.
- Disabling unnecessary features.
- Modifying, removing, or revoking credentials and tokens.
Securing Container Images
- Managing Docker and Kubernetes images.
- Creating secure container images.
Controlling Cloud Resource Access
- Understanding cloud platform metadata.
- Limiting permissions for cloud resources.
Assessing Third-Party Integrations
- Minimizing permissions granted to third-party software.
- Evaluating components capable of creating pods.
Establishing a Security Policy
- Reviewing the existing security profile.
- Designing a security model.
- Considerations for cloud-native security.
- Additional best practices.
Encrypting Data at Rest
- Encrypting backups.
- Disk encryption strategies.
- Encrypting secret resources within etcd.
Monitoring and Auditing
- Enabling audit logging.
- Auditing and governing the software supply chain.
- Subscribing to security alerts and updates.
Summary and Conclusion
Requirements
- Prior experience working with Kubernetes is required.
Target Audience
- DevOps engineers.
- Software developers.
Testimonials (3)
About the microservices and how to maintenance kubernetes
Yufri Isnaini Rochmat Maulana - Bank Indonesia
Course - Advanced Platform Engineering: Scaling with Microservices and Kubernetes
How trainer deliver knowledge so effectively
Vu Thoai Le - Reply Polska sp. z o. o.
Course - Certified Kubernetes Administrator (CKA) - exam preparation
The knowledge and exchanges with Augustin
