Kubernetes Security Basics by Pearson

Course details

Learn how to confidently secure Kubernetes environments in this course with Cisco Distinguished Solutions Engineer Chris Jackson. Get a hands-on approach to Kubernetes security, including foundational concepts, securing clusters, implementing robust access controls, and verifying platform integrity. Get started by building your own Kubernetes lab environment, before embarking on real-world experimentation and learning. Throughout the course, explore critical security practices such as CIS benchmarks for Kubernetes components, role-based access control (RBAC), and more.

An ideal fit for Kubernetes practitioners seeking to enhance their security skills or prepare for the Certified Kubernetes Security Specialist (CKS) exam, this course equips you with foundational skills and technical know-how for managing security within Kubernetes infrastructures.

Concepts

Introduction

Kubernetes security - The basics

Building Your K8s Home Lab

Learning objectives
Lab environment and architecture
Local installation
Cloud installation
Getting your cluster up and running

Kubernetes Security Foundations

Learning objectives
Cloud-native security
Kubernetes architecture
Kubernetes PKI architecture
Threat modeling K8s
Real-world K8s hacks
OWASP Kubernetes Top 10

CIS Benchmark Review of Kubernetes Components

Learning objectives
CIS benchmarks for Kubernetes
Install kube-bench
Checking compliance with kube-bench

Role-Based Access Control (RBAC)

Learning objectives
Understanding Kubernetes RBAC
Creating a user account
Applying roles to a user
Configuring and binding cluster roles
Verifying role rules

Protecting Service Accounts

Learning objectives
Understanding service accounts
Creating a service account
Disable default settings
Verify service account permissions

Verify Platform Binaries before Deploying

Learning objectives
Understanding platform binary integrity
Download the latest Kubernetes release
Verify binary checksum

Conclusion

Course summary