Linux Foundation Certified Kubernetes Security Fundamentals

About this course:

Kubernetes has become the standard platform for running containerized applications, and that makes it a prime target. A single misconfiguration in a cluster, a vulnerable container image, or an overly permissive access policy can expose an entire environment. Securing Kubernetes takes a deliberate approach that starts before a cluster is built and continues long after workloads are running.

This course gives you the knowledge and skills to maintain security in dynamic, multi-project environments and to address the security concerns of cloud production environments. You’ll start with a cloud security overview, then work through security across the full container supply chain, from preparing and installing a cluster through deployment and ongoing operations.

Course Objectives:

• Understand core cloud security concepts and the Kubernetes threat landscape

• Prepare for and install a Kubernetes cluster with security in mind from the start

• Harden cluster components and keep Kubernetes up to date

• Secure the kube-apiserver and control access with authentication, authorization, and RBAC

• Implement network policies to restrict traffic between pods and namespaces

• Apply Pod Security Admission and other controls to secure workloads

• Minimize vulnerabilities in microservices and container images

• Secure the container supply chain, from image build through deployment

• Monitor and log security events, and detect and respond to suspicious activity in a cluster

• Find and use ongoing sources of security and vulnerability information

• Build the skills tested on the Certified Kubernetes Security Specialist (CKS) exam

Audience:

• Kubernetes administrators who hold the Certified Kubernetes Administrator (CKA) certification

• Cloud security engineers and architects

• DevOps and DevSecOps engineers

• Platform and site reliability engineers (SREs)

• System administrators responsible for containerized environments

• IT professionals responsible for securing cloud production environments

• Anyone preparing for the Certified Kubernetes Security Specialist (CKS) exam

Prerequisites:

To get the most out of this course, you should have:

• A good understanding of Linux, including command-line use and system administration (equivalent to Linux System Administration (LFS307) or Linux for System Engineers (LFS311))

• Solid hands-on experience administering Kubernetes clusters, at the level of the Certified Kubernetes Administrator (CKA) certification

• Familiarity with containers and container images