Our offices

  • Exceev Consulting
    61 Rue de Lyon
    75012, Paris, France
  • Exceev Technology
    332 Bd Brahim Roudani
    20330, Casablanca, Morocco

Follow us

Preferences

Brand kit

Cloud, infrastructure & networks - Kubernetes Security Fundamentals (LFS460) Training

A practical course focused on Kubernetes Security Fundamentals (LFS460) Training. Participants build skills across three priorities: Presentation of cloud security, Preparation of installation, Installation of cluster.

Duration
4 days - 28 hours
Format
Practical course, in person or live online
Reference
EXCEEV-DEVOPS-0009
Delivery language
French

Detailed programme

Presentation of cloud security
  • Multiple projects.
  • What is security?
  • Evaluation, prevention, detection and response.
  • Attackers' classes, types of attacks and attack surfaces.
  • Equipment and firmware considerations.
  • Security agencies.
  • Manage external access.
Preparation of installation
  • Image supply chain.
  • Run Sandbox.
  • Check the platform binaries.
  • Minimize access to the graphical interface.
  • Policy-based control.
Installation of cluster
  • Update to Kubernetes.
  • Tools to strengthen the kernel.
  • Examples of kernel strengthening.
  • Mitigation of kernel vulnerabilities.
Security of Kube-Api server
  • Restrict access to API.
  • Enable the Kube-apipserver audit.
  • Configuration of RBAC.
  • Security clearance of pods.
  • Minimize IAM roles.
  • Protection of etcd.
  • Benchmark CIS.
  • Use of service accounts.
Network setup
  • Background information on firewalls.
  • Network plugins.
  • Minimize attempts to connect by raw force.
  • Entry objects.
  • Pod to pod encryption.
  • Restrict access to the cluster.
Considerations related to workload
  • Minimize the basic image.
  • Static workload analysis.
  • Workload performance analysis.
  • Immutability of containers.
  • Mandatory access control.
  • SELINUX.
  • AppArmor.
  • Generate AppArmor profiles.
Problem Detection
  • Understand the phases of an attack.
  • Preparation.
  • Understand the progression of an attack.
  • Manage an incident.
  • Manage the consequences of an incident.
  • Intrusion detection systems.
  • Threat detection.
  • Behavioural analysis.
Domain Assessment
  • Preparation for examination.
  • Practical work.

Tell us about your project

Our offices

  • Exceev Consulting
    61 Rue de Lyon
    75012, Paris, France
  • Exceev Technology
    332 Bd Brahim Roudani
    20330, Casablanca, Morocco