Cloud, infrastructure & networks - Kubernetes Security Fundamentals (LFS460) Training
A practical course focused on Kubernetes Security Fundamentals (LFS460) Training. Participants build skills across three priorities: Presentation of cloud security, Preparation of installation, Installation of cluster.
Detailed programme
Presentation of cloud security
- Multiple projects.
- What is security?
- Evaluation, prevention, detection and response.
- Attackers' classes, types of attacks and attack surfaces.
- Equipment and firmware considerations.
- Security agencies.
- Manage external access.
Preparation of installation
- Image supply chain.
- Run Sandbox.
- Check the platform binaries.
- Minimize access to the graphical interface.
- Policy-based control.
Installation of cluster
- Update to Kubernetes.
- Tools to strengthen the kernel.
- Examples of kernel strengthening.
- Mitigation of kernel vulnerabilities.
Security of Kube-Api server
- Restrict access to API.
- Enable the Kube-apipserver audit.
- Configuration of RBAC.
- Security clearance of pods.
- Minimize IAM roles.
- Protection of etcd.
- Benchmark CIS.
- Use of service accounts.
Network setup
- Background information on firewalls.
- Network plugins.
- Minimize attempts to connect by raw force.
- Entry objects.
- Pod to pod encryption.
- Restrict access to the cluster.
Considerations related to workload
- Minimize the basic image.
- Static workload analysis.
- Workload performance analysis.
- Immutability of containers.
- Mandatory access control.
- SELINUX.
- AppArmor.
- Generate AppArmor profiles.
Problem Detection
- Understand the phases of an attack.
- Preparation.
- Understand the progression of an attack.
- Manage an incident.
- Manage the consequences of an incident.
- Intrusion detection systems.
- Threat detection.
- Behavioural analysis.
Domain Assessment
- Preparation for examination.
- Practical work.
Tell us about your project
Our offices
- Exceev Consulting
61 Rue de Lyon
75012, Paris, France - Exceev Technology
332 Bd Brahim Roudani
20330, Casablanca, Morocco