Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Cluster Setup
- Apply Network security policies to limit cluster-level access
- Leverage CIS benchmarks to audit the security configurations of Kubernetes components (etcd, kubelet, kubedns, kubeapi)
- Configure Ingress objects appropriately with security controls
- Safeguard node metadata and endpoints
- Limit the usage of, and access to, GUI elements
- Validate platform binaries prior to deployment
Cluster Hardening
- Restrict access to the Kubernetes API
- Employ Role Based Access Controls to reduce exposure
- Exercise caution with service accounts, such as disabling defaults and minimising permissions on newly created accounts
- Keep Kubernetes updated regularly
System Hardening
- Reduce the host OS footprint to lower the attack surface
- Minimise IAM roles
- Limit external access to the network
- Utilise kernel hardening tools such as AppArmor and seccomp appropriately
Reducing Microservice Vulnerabilities
- Establish appropriate OS-level security domains, for example using PSP, OPA, or security contexts
- Manage Kubernetes secrets effectively
- Utilise container runtime sandboxes in multi-tenant settings (e.g. gvisor, kata containers)
- Implement pod-to-pod encryption via mTLS
Supply Chain Security
- Reduce the base image footprint
- Secure the supply chain by whitelisting permitted image registries, signing, and validating images
- Apply static analysis to user workloads (e.g. Kubernetes resources, Dockerfiles)
- Scan images for known vulnerabilities
Monitoring, Logging, and Runtime Security
- Conduct behavioural analytics of system call processes and file activities at the host and container levels to identify malicious actions
- Identify threats within physical infrastructure, applications, networks, data, users, and workloads
- Detect all phases of an attack, irrespective of its location or method of propagation
- Carry out in-depth analytical investigations to identify malicious actors within the environment
- Guarantee the immutability of containers during runtime
- Utilise Audit Logs to oversee access
Requirements
- CKA (Certified Kubernetes Administrator) certification
Target Audience
- Professionals practising in Kubernetes
21 Hours
Testimonials (3)
basic understanding of container/kubernetes and how they interact features of the openshift plattform
Eric Scholze - NOW IT GmbH
Course - Introduction to Containers, Kubernetes & OpenShift
About the microservices and how to maintenance kubernetes
Yufri Isnaini Rochmat Maulana - Bank Indonesia
Course - Advanced Platform Engineering: Scaling with Microservices and Kubernetes
The training met expectations with its clear explanations, real-world examples, and hands-on labs that made complex topics easy to understand. It provided valuable insights into container orchestration, security, scaling and many other advanced topics.
