Kubernetes Microservices Security Essentials by Pearson

Course details

This course, led by expert instructor Chris Jackson, teaches you how to implement robust security practices for Kubernetes microservices. Learn how to apply pod security standards, manage secrets, and isolate containers. Discover ways you can use tools like Cilium for secure pod-to-pod communication and mTLS for encryption. Explore best practices for securing the software supply chain, protecting image registry access, and requiring signed images. Gain proficiency in identifying vulnerable containers with tools like Trivy and enforcing compliance via policy. Designed for IT professionals, developers, and security experts, this course equips you to manage and secure your Kubernetes environments against evolving threats.

Concepts

Introduction

Kubernetes microservices security essentials - Introduction

Use Appropriate Pod Security Standards

Learning objectives
Understanding Pod security
Configure security contexts
Pod security admission
OPA Gatekeeper

Managing Kubernetes Secrets

Learning objectives
Understanding Kubernetes Secrets
Creating and using a Secret
Using Secrets in pods
Encrypting Secrets at rest

Implement Container Isolation Techniques

Learning objectives
Containing containers
Sandboxed pods
Using gVisor
Using Kata containers

Implement Pod-to-Pod Encryption with Cilium

Learning objectives
Introduction to Cilium and mTLS
Using Cilium for pod-to-pod encryption
Deploying and verifying mTLS with Cilium

Secure Your Software Supply Chain

Learning objectives
Software supply chain risks
Protect image registry access
Require signed images
Policy enforcement - Image policy webhook
Policy enforcement - Validating admission policy

Scan Images for Known Vulnerabilities

Learning objectives
Scanning for vulnerable images
Using Trivy to identify vulnerable containers
Using the Trivy Operator
Using Trivy and Kyverno for SBOM attestation

Summary

Kubernetes microservices security essentials - Summary