Kubernetes Network and Cluster Hardening by Pearson

Course details

Enhance your Kubernetes security through critical network and cluster hardening components. This course teaches you network policies, TLS ingress security, node metadata protection, and API access restrictions. Discover methods to safeguard dashboards, minimize external network access, and verify platform binary integrity. Build your understanding of API fundamentals and access control. Plus, learn practical techniques for implementing best practices in real-world Kubernetes deployments, improving your security skills, and preparing yourself for the Certified Kubernetes Security Specialist (CKS) certification. Designed for system administrators, developers, and IT professionals with Linux, container, and Kubernetes experience, this course offers comprehensive training to boost infrastructure reliability and harden clusters against threats.

Concepts

Introduction

Kubernetes network and cluster hardening - Introduction

Network Security Policies

Learning objectives
Network security overview
Pod communication policies
Segmentation

Properly Setup Ingress with TLS

Learning objectives
Understanding Ingress
Creating Ingress objects
Ingress security options
Testing Ingress access

Protect Node Metadata and Endpoints

Learning objectives
Understanding Kubelet
Network policies
Node metadata protection
Implement Kubelet authentication
Test Kubelet and node metadata security

Kubernetes Dashboard Security

Learning objectives
K8s dashboard architecture
Dashboard installation
Role Based Access Control (RBAC)

Restrict Access to Kubernetes API

Learning objectives
Kubernetes API fundamentals
Kubernetes cccess control
API server configuration
API server hardening
Verify access control policies

Minimize External Access to the Network

Learning objectives
Understanding external access to Kubernetes
Finding open ports
Host firewall configuration
Test host firewall

Verify Platform Binaries Before Deploying

Learning objectives
Understanding platform binary integrity
Download the latest Kubernetes release
Verify binary checksum

Summary

Kubernetes network and cluster hardening - Summary