Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Cluster Setup
- Leverage network security policies to limit cluster-level access
- Apply the CIS benchmark to audit the security configuration of core Kubernetes components (etcd, kubelet, kubedns, kubeapi)
- Configure Ingress objects with appropriate security controls
- Safeguard node metadata and endpoints
- Reduce reliance on and access to GUI elements
- Validate platform binaries prior to deployment
Cluster Hardening
- Limit access to the Kubernetes API
- Employ Role-Based Access Controls (RBAC) to reduce exposure
- Manage service accounts carefully, such as disabling defaults and minimizing permissions for new accounts
- Ensure frequent updates to the Kubernetes version
System Hardening
- Reduce the host OS footprint to minimize the attack surface
- Streamline IAM roles
- Limit external network access
- Utilize kernel hardening tools effectively, such as AppArmor and seccomp
Minimizing Microservice Vulnerabilities
- Establish appropriate OS-level security domains using PSP, OPA, or security contexts
- Manage Kubernetes secrets securely
- Deploy container runtime sandboxes in multi-tenant setups (e.g., gvisor, kata containers)
- Implement mTLS for pod-to-pod encryption
Supply Chain Security
- Minimize the size of base images
- Secure the supply chain by whitelisting allowed image registries and signing/validating images
- Perform static analysis on user workloads, including Kubernetes resources and Dockerfiles
- Scan images to identify known vulnerabilities
Monitoring, Logging, and Runtime Security
- Conduct behavioral analytics on syscall processes and file activities at the host and container levels to spot malicious actions
- Identify threats across physical infrastructure, applications, networks, data, users, and workloads
- Detect attacks in all phases, regardless of location or spread
- Carry out deep analytical investigations to identify malicious actors within the environment
- Maintain the immutability of containers during runtime
- Utilize Audit Logs to oversee access patterns
Requirements
- CKA (Certified Kubernetes Administrator) certification
Target Audience
- Kubernetes practitioners
Testimonials (2)
As i said before , for a person like me (no exp. ) this was a gateway to understanding features and functions with these programs/tools & etc. .
Patrick V. Duylovski - UBB + DZI (KBC GROUP)
Course - Docker and Kubernetes
basic understanding of container/kubernetes and how they interact features of the openshift plattform
