Kubernetes Security Training Course
Kubernetes offers features for securing a cluster and its applications. The out-of-the-box settings, however, may not provide full protection from hackers and unintentionally harmful actors.
This instructor-led, live training (online or onsite) is aimed at engineers who wish to secure a Kubernetes cluster beyond the default security settings.
By the end of this training, participants will be able to:
- Understand the vulnerabilities that are exposed by a default Kubernetes installation.
- Prevent unauthenticated access to the Kubernetes API, database, and other services.
- Protect a Kubernetes cluster from accidental or malicious access.
- Put together a comprehensive security policy and set of best practices.
Format of the Course
- Interactive lecture and discussion.
- Lots of exercises and practice.
- Hands-on implementation in a live-lab environment.
Course Customization Options
- To request a customized training for this course, please contact us to arrange.
Course Outline
Introduction
Overview of the Kubernetes API and Security Features
- Access to HTTPS endpoints, Kubernetes API, nodes, and containers
- Kubernetes Authentication and Authorization features
How Hackers Attack Your Cluster
- How hackers find your etcd port, Kubernetes API, and other services
- How hackers execute code inside your container
- How hackers escalate their privileges
- Case study: How Tesla exposed its Kubernetes cluster
Setting up Kubernetes
- Choosing a distribution
- Installing Kubernetes
Using Credentials and Secrets
- The credentials life cycle
- Understanding secrets
- Distributing credentials
Controlling Access to the Kubernetes API
- Encrypting API traffic with TLS
- Implementing authentication for API servers
- Implementing authorization for different roles
Controlling User and Workload Capabilities
- Understanding Kubernetes policies
- Limiting resource usage
- Limiting container privileges
- Limiting network access
Controlling access to nodes
- Separating workload access
Protecting Cluster Components
- Restricting access to etcd
- Disabling features
- Changing, removing and revoking credentials and tokens
Securing Container Image
- Managing Docker and Kubernetes images
- Building secure images
Controlling Access to Cloud Resources
- Understanding cloud platform metadata
- Limiting permissions to cloud resources
Evaluating Third Party Integrations
- Minimizing the permissions granted to third party software
- Evaluating components that can create pods
Establishing a Security Policy
- Reviewing the existing security profile
- Creating a security model
- Cloud native security considerations
- Other best practices
Encrypting Inactive Data
- Encrypting backups
- Encrypting the entire disk
- Encrypting secret resources in etcd
Monitoring Activity
- Enabling audit logging
- Auditing and governing the software supply chain
- Subscribing to security alerts and updates
Summary and Conclusion
Requirements
- Previous experience working with Kubernetes
Audience
- DevOps engineers
- Developers
Open Training Courses require 5+ participants.
Kubernetes Security Training Course - Booking
Kubernetes Security Training Course - Enquiry
Kubernetes Security - Consultancy Enquiry
Consultancy Enquiry
Testimonials (5)
he was patience and understood that we fall behind
Albertina - REGNOLOGY ROMANIA S.R.L.
Course - Deploying Kubernetes Applications with Helm
How Interactive Reda would explain the information and get us to participate. He would also mention interesting facts along the way and share all the knowledge he has. Reda has excellent communication skills which makes online training really effective.
Janine - BMW SA
Course - Kubernetes Advanced
Interactive approach to conducting training.
Krzysztof Kupisz - Kredyt Inkaso S.A. Centrum Operacyjne w Lublinie
Course - Managing Kubernetes with Rancher
Machine Translated
The training was more practical
Siphokazi Biyana - Vodacom SA
Course - Kubernetes on AWS
Learning about Kubernetes.
Felix Bautista - SGS GULF LIMITED ROHQ
Course - Kubernetes on Azure (AKS)
Provisional Courses
Related Courses
Docker, Kubernetes and OpenShift 3 for Administrators
35 HoursIn this instructor-led, live training in Poland, participants will learn how to manage Red Hat OpenShift Container Platform.
By the end of this training, participants will be able to:
- Create, configure, manage, and troubleshoot OpenShift clusters.
- Deploy containerized applications on-premise, in public cloud or on a hosted cloud.
- Secure OpenShift Container Platform
- Monitor and gather metrics.
- Manage storage.
Docker and Kubernetes: Building and Scaling a Containerized Application
21 HoursIn this instructor-led, live training in Poland (onsite or remote), participants will learn how to create and manage Docker containers, then deploy a sample application inside a container. Participants will also learn how to automate, scale, and manage their containerized applications within a Kubernetes cluster. Finally, the training goes on to more advanced topics, walking participants through the process of securing, scaling and monitoring a Kubernetes cluster.
By the end of this training, participants will be able to:
- Set up and run a Docker container.
- Deploy a containerized server and web application.
- Build and manage Docker images.
- Set up a Docker and Kubernetes cluster.
- Use Kubernetes to deploy and manage a clustered web application.
- Secure, scale and monitor a Kubernetes cluster.
Docker (introducing Kubernetes)
14 HoursThe objective of this practical course is to provide all the tools that address the practical aspects of Docker and Kubernetes, in order that the participants can count on the necessary skills for the proper management of the program.
Docker and Kubernetes
21 HoursTraining objectives: Acquire theoretical and operational skills on Docker and Kubernetes.
Docker, Kubernetes and OpenShift 3 for Developers
35 HoursIn this instructor-led, live training in Poland, participants will learn how to use OpenShift Container Platform to deploy containerized applications.
By the end of this training, participants will be able to:
- Create and configure an OpenShift setup.
- Quickly deploy applications on-premise, in public cloud or on a hosted cloud.
Deploying Kubernetes Applications with Helm
7 HoursThis instructor-led, live training in Poland (online or onsite) is aimed at engineers who wish to use Helm to streamline the process of installing and managing Kubernetes applications.
By the end of this training, participants will be able to:
- Install and configure Helm.
- Create reproducible builds of Kubernetes applications.
- Share applications as Helm charts.
- Run third-party applications saved as Helm charts.
- Manage releases of Helm packages.
Kubernetes from Basic to Advanced
14 HoursIn this instructor-led, live training in Poland (onsite or remote), participants will learn how to deploy a collection of sample servers inside containers, then automate, scale, and manage their containerized servers within a Kubernetes cluster. The training goes on to more advanced topics, walking participants through the process of securing, networking and monitoring a Kubernetes cluster.
By the end of this training, participants will be able to:
- Set up and run a Docker container.
- Deploy containerized databases and servers.
- Set up a Docker and Kubernetes cluster.
- Use Kubernetes to deploy and manage different environments under the same cluster.
- Secure, scale and monitor a Kubernetes cluster.
Kubernetes Advanced
14 HoursThis instructor-led, live training (online or onsite) is aimed at engineers wishing to automate, secure, and monitor containerized applications in a large-scale Kubernetes cluster.
By the end of this training, participants will be able to:
- Use Kubernetes to deploy and manage different environments under the same cluster
- Secure, scale and monitor a Kubernetes cluster
Format of the Course
- Interactive lecture and discussion
- Lots of exercises and practice
- Hands-on implementation in a live-lab environment
Course Customization Options
- To request a customized training for this course, please contact us to arrange.
Kubernetes on AWS
14 HoursEKS is a self-managed Kubernetes-as-a-service offering from AWS. EKS is fully scalable and customizable and allows a Kubernetes deployment to mimic and/or integrate with an existing on-premise Kubernetes setup.
In this instructor-led, live training, participants will learn how to set up and manage a production-scale container environment using Kubernetes on EKS.
By the end of this training, participants will be able to:
- Configure and manage Kubernetes on EKS
- Migrate an existing Kubernetes environment from on-premise to AWS cloud
- Integrate Kubernetes with third-party continuous integration (CI) software
- Ensure high availability and disaster recovery in Kubernetes
- Understand and adopt the tools available to efficiently manage EKS
Audience
- Developers
- System Administrators
- DevOps Engineers
Format of the Course
- Part lecture, part discussion, exercises and heavy hands-on practice in a live-lab environment.
Note
- To request a customized training for this course, please contact us to arrange.
Kubernetes on Azure (AKS)
14 HoursIn this instructor-led, live training in Poland (online or onsite), participants will learn how to set up and manage a production-scale container environment using Kubernetes on AKS.
By the end of this training, participants will be able to:
- Configure and manage Kubernetes on AKS.
- Deploy, manage and scale a Kubernetes cluster.
- Deploy containerized (Docker) applications on Azure.
- Migrate an existing Kubernetes environment from on-premise to AKS cloud.
- Integrate Kubernetes with third-party continuous integration (CI) software.
- Ensure high availability and disaster recovery in Kubernetes.
Kubernetes Design Patterns
21 HoursThe evolution of microservices and containers in recent years has significantly changed how we design, develop, deploy and run software. Modern applications must be optimized for scalability, elasticity, failure, and change. Driven by these new demands, modern architectures require a different set of patterns and practices. In this training, we examine ways to identify, understand and adjust to these new requirements.
Audience
This training is intended for people who are somewhat familiar with container technology and with Kubernetes concepts but are perhaps lacking the real world experience. It is based on use cases, and lessons learnt from real life projects with the intention of making people inspired to create and manage even better cloud native applications.
- Developers
- Operations
- DevOps
- QA Engineers
- IT Project Managers
Format of the Course
- Interactive lecture and discussion
- Lots of exercises and practice
- Handson implementation in a live-lab environment
Course Customization Options
- To request a customized training for this course, please contact us to arrange.
Introduction to Minikube and Kubernetes
21 HoursThis instructor-led, live training in Poland (online or onsite) is aimed at beginner-level to intermediate-level software developers and DevOps professionals who wish to learn how to set up and manage a local Kubernetes environment using Minikube.
By the end of this training, participants will be able to:
- Install and configure Minikube on their local machine.
- Understand the basic concepts and architecture of Kubernetes.
- Deploy and manage containers using kubectl and the Minikube dashboard.
- Set up persistent storage and networking solutions for Kubernetes.
- Utilize Minikube for developing, testing, and debugging applications.
Minikube for Developers
14 HoursThis instructor-led, live training in Poland (online or onsite) is aimed at intermediate-level developers and DevOps engineers who wish to use Minikube as a part of their development workflow.
By the end of this training, participants will be able to:
- Set up and manage a local Kubernetes environment using Minikube.
- Understand how to deploy, manage, and debug applications on Minikube.
- Integrate Minikube into their continuous integration and deployment pipelines.
- Optimize their development process using Minikube's advanced features.
- Apply best practices for local Kubernetes development.
Monitoring Kubernetes with Prometheus
7 HoursThis instructor-led, live training in Poland (online or onsite) is aimed at system administrators and developers who wish to use Prometheus to monitor Kubernetes clusters.
By the end of this training, participants will be able to:
- Install and configure Prometheus.
- Monitor dynamic cloud environments.
- Gain better insight into their Kubernetes clusters.
- Set up alerts that are precise and insightful.
Managing Kubernetes with Rancher
14 HoursThis instructor-led, live course in Poland provides participants with an overview of Rancher and demonstrates through hands-on practice how to deploy and manage a Kubernetes cluster with Rancher.