Mô tả

This course is specifically designed for the aspirants who intend to give the "Certified Kubernetes Security Specialist" certification as well as for individuals who intend to gain a strong foundation in Kubernetes Security.

One of the pre-requisites for the course is the candidate's prior understanding on the topics discussed in the CKA certification.

We begin the journey with setting up a Hardened Kubernetes cluster from absolute scratch and then the deep dive journey into various K8s + Security begins.

This course also has an exam preparation section with a series of practice tests to verify the candidate's understanding of the topics discussed and verify if the candidate is ready to give the official certification exams.

Keeping the standards high similar to other best-seller courses of Zeal, this course has a perfect balance, and every topic is explained in a simplified way with practical scenarios.

With tons of practicals, easy-to-understand videos, and a dedicated exam preparation section, this course is all you need to gain a deeper understanding of Kubernetes and ace the official Certified Kubernetes Security Specialist" certification.

With this exciting set of learnings and practicals, I look forward to seeing you in this course and be part of your journey into Kubernetes and getting CKS certified.

Bạn sẽ học được gì

Kubernetes Security

Yêu cầu

  • Certified Kubernetes Administrator

Nội dung khoá học

8 sections

Introduction

4 lectures
Introduction to the Course
04:17
Course Lecture Format
03:36
Document - Link to Code Repository
00:00
Our Community
00:12

Domain 1 - Cluster Setup

31 lectures
Overview of CIS Benchmarks for Hardening
10:15
Kubernetes CIS Benchmarks
06:03
Our Lab Architecture
04:55
Document Lecture
00:06
Creating Infrastructure for Labs
05:28
ETCD Security Guidelines
12:20
Configuring ETCD Binaries
03:45
Understanding Asymmetric Key Encryption
11:22
Revising SSL/TLS
17:07
Overview of Certificate Authority
05:16
In-Transit Encryption with HTTPS
12:51
Overview of Certificate Based Authentication
04:35
Client Authentication in ETCD
06:42
Integrating Systemd with ETCD
04:11
API Server Security Guidelines
06:05
Configuring API Server
06:56
Transport Security for API Server
06:53
Access Control
04:47
Static Token File Authentication
06:32
Downsides of Static Token File Authentication
03:48
Implementing X509 Client Authentication
03:51
Downsides of X509 Client Authentication
03:05
Overview of OIDC Authentication
04:28
Authorization
07:36
Encryption Provider
10:19
Implementing Auditing
07:22
Setting up kubeadm cluster
06:32
Revising Taints and Tolerations
04:12
Kubelet Security
11:50
Verifying Platform Binaries
03:59
Notes - Cluster Setup
00:00

Domain 2 - Cluster Hardening

12 lectures
Creating User for RBAC
10:25
Role Based Access Controls (RBAC)
12:39
ClusterRole and ClusterRoleBinding
06:57
Revising Ingress
08:39
Understanding Ingress Resource and Ingress Controllers
10:36
Creating Ingress and Ingress Controller
06:42
Ingress Security
07:18
Overview of Service Accounts
09:20
Service Accounts - Points to Note
06:47
Service Account Security
09:15
Upgrading kudeadm Clusters
10:56
Notes - Cluster Hardening
00:00

Domain 3 - Minimize Microservice Vulnerabilities

12 lectures
Admission Controllers
12:08
Security Contexts
10:54
Revising Privileged Container
06:46
Running Privileged PODS in Kubernetes
04:57
Hack Misconfigured Cluster
08:30
ImagePullPolicy in Kubernetes
06:31
Admission Controller - AlwaysPullImages
05:34
Admission Controller - ImagePolicyWebhook
04:03
Custom WebHook Integration with Admission Controller
09:01
Basics of Kubernetes Secrets
14:37
Mounting Secrets in Pods
06:01
Notes - Minimize Microservice Vulnerabilities
00:00

Domain 4 - System Hardening

11 lectures
Overview of AppArmor
12:40
Integration of AppArmor with Kubernetes
04:47
OCI and Container Runtimes
09:21
Configuring containerd and runc
08:31
Container Runtime Interface
05:03
Overview of Container Runtime Sandboxes
07:18
Implementing RunTimeClass - gVisor
09:18
Kubeadm and Calcio
03:02
Understanding Network Policies - Part 01
18:49
Understanding Network Policies - Part 02
12:02
Notes - System Hardening
00:00

Domain 5 - Supply Chain Security

6 lectures
Vulnerability, Exploit and Payload
05:57
Container Security Scanning
04:33
Scan images for known vulnerabilities
03:50
Scanning K8s Clusters for Security Best Practices
04:44
Overview of Static Analysis
04:13
Notes - Supply Chain Security
00:00

Domain 6 - Monitoring, Logging and Runtime Security

7 lectures
Overview of Falco
07:16
Introduction to Sysdig
11:23
Creating Custom Falco Rules
11:14
Falco Rule Writing - Exam Perspective
05:43
Audit Logging In-Detail
23:41
Immutability at Container Runtime
01:42
Notes - Monitoring, Logging and Runtime Security
00:00

Exam Preparation Section

10 lectures
Our Community
00:12
Overview of CKS Exams
05:49
Important Pointers for Exams - Part 01
07:32
Important Pointers for Exams - Part 02
02:29
Notes - Exam Preparation Section
00:00
Exam Preparation Practice Tests
03:16
Practice Test Solution - Part 01
01:18
Practice Test Solution - Part 02
01:23
Practice Test Solution - Part 03
00:42
Practice Test Solution - Part 04
01:04

Đánh giá của học viên

Chưa có đánh giá
Course Rating
5
0%
4
0%
3
0%
2
0%
1
0%

Bình luận khách hàng

Viết Bình Luận

Bạn đánh giá khoá học này thế nào?

image

Đăng ký get khoá học Udemy - Unica - Gitiho giá chỉ 50k!

Get khoá học giá rẻ ngay trước khi bị fix.