Kubernetes Security Fundamentals (LFS460)

Introduction

- The Linux Foundation{
- The Linux Foundation{ Training
- The Linux Foundation{ Certifications
- The Linux Foundation{ Digital Badges
- Laboratory Exercises, Solutions and Resources
- Things Change in Linux and Open Source Projects
- E-Learning Course: LFS260
- Platform Details

Cloud Security Overview

- Multiple Projects
- What is Security?
- Assessment
- Prevention
- Detection
- Reaction
- Classes of Attackers
- Types of Attacks
- Attack Surfaces
- Hardware and Firmware Considerations
- Security Agencies
- Manage External Access
- Labs

Preparing to Install

- Image Supply Chain
- Runtime Sandbox
- Verify Platform Binaries
- Minimize Access to GUI
- Policy Based Control
- Labs

Installing the Cluster

- Update Kubernetes
- Tools to Harden the Kernel
- Kernel Hardening Examples
- Mitigating Kernel Vulnerabilities
- Labs

Securing the kube-apiserver

- Restrict Access to API
- Enable Kube-apiserver Auditing
- Configuring RBAC
- Pod Security Admission
- Minimize IAM Roles
- Protecting etcd
- CIS Benchmark
- Using Service Accounts
- Labs

Networking

- Firewalling Basics
- Network Plugins
- Mitigate Brute Force Login Attempts
- Ingress Objects
- Pod to Pod Encryption
- Restrict Cluster Level Access
- Labs

Workload Considerations

- Minimize Base Image
- Static Analysis of Workloads
- Runtime Analysis of Workloads
- Container Immutability
- Mandatory Access Control
- SELinux
- AppArmor
- Generate AppArmor Profiles
- Labs

Issue Detection

- Understanding Phases of Attack
- Preparation
- Understanding an Attack Progression
- During an Incident
- Handling Incident Aftermath
- Intrusion Detection Systems
- Threat Detection
- Behavioral Analytics
- Labs

Domain Reviews

- Preparing for the Exam
- Labs

Closing and Evaluation Survey

- Evaluation Survey

May 2024

The quality and duration of the course was satisfactory. Regular lab exercises were conducted to maintain participant engagement. Fazlur ensured that adequate breaks were provided for official work, bio breaks, and other needs.

It was an excellent interactive session. The facilitator engaged well. He is very humble in answering all the questions for all the folk who come from different backgrounds, enabling them to understand the basics.

The instructor's explanation of things was excellent. The lab material and the server setup were also easy to access and play around with.

The way the trainer explained the topics was great. He also provided reference links for better understanding, which helped a lot.

Trainer Fazlur Rahman Khan communicated clearly, and helped us understand difficult concepts in a simple way. His ability to simplify complex topics made learning engaging and effective.

Stay Up to Date