Watch KodeKloud – Certified Kubernetes Security Specialist (CKS) Free Online - Full Video Classroom | MJ Accedemy

KodeKloud – Certified Kubernetes Security Specialist (CKS) 2024-4

Download Course (Free)

Lecture 4/85

00:00/00:00

Lecture 4 of 85

The Attack 0806

Download Course (Free)

Course Content

0 / 85 completed

Section 1: Introduction2 videos

Exam Information 0147

Course Introduction 0855

11m

Section 2: Understanding the Kubernetes Attack Surface2 videos

The 4C’s of Cloud Native security 0313

The Attack 0806

23mNow Playing

Section 3: Cluster Setup and Hardening31 videos

Section Introduction 0115

What are CIS Benchmarks 0552

CIS benchmark for Kubernetes 0241

Kubebench 0115

Kubernetes Security Primitives 0318

TLS Introduction 0128

Authentication 0534

Service Accounts 1434

19m

TLS in Kubernetes 0748

11m

TLS Basics 2003

27m

TLS in Kubernetes – Certificate Creation 1055

22m

View Certificate Details 0431

Certificates API 0607

API Groups 0552

KubeConfig 0832

15m

RBAC 0428

Authorization 0730

Cluster Roles and Role Bindings 0433

Kubelet Security 1448

24m

Kubectl Proxy Port Forward 0648

10m

Kubernetes Dashboard 0613

12m

Securing Kubernetes Dashboard 0138

Kubernetes Software Versions 0254

Verify platform binaries before deploying 0211

Cluster Upgrade Process 1111

13m

Network Policy 0751

16m

Developing Network Policies 1136

15m

Docker Service Configuration 0657

11m

Docker – Securing the Daemon 0725

11m

Demo – Cluster Upgrade 1137

1h 5m

Ingress 2234

37m

Section 4: System Hardening20 videos

Section Introduction 0130

Minimize host OS footprint Intro 0051

Least Privilege Principle 0516

Limit Node Access 0548

SSH Hardening 0549

Privilege Escalation in Linux 0305

Remove Obsolete Packages and Services 0256

Restrict Kernel Modules 0231

Identify and Disable Open Ports 0221

Minimize IAM roles 0546

Minimize external access to the network 0212

UFW Firewall Basics 0555

Linux Syscalls 0420

AquaSec Tracee 0320

Restrict syscalls using seccomp 0837

AppArmor 0409

Implement Seccomp in Kubernetes 0751

10m

Linux Capabilities 0405

AppArmor in Kubernetes 0244

Creating AppArmor Profiles 0511

Section 5: Minimize Microservice Vulnerabilities16 videos

Section Introduction 0054

Security Contexts 0152

Admission Controllers 0807

14m

Validating and Mutating Admission Controllers 1026

17m

Open Policy Agent OPA 0948

14m

Pod Security Policies Optional 0739

12m

OPA in Kubernetes 0945

22m

Container Sandboxing 0653

Manage Kubernetes secrets 0820

13m

gVisor 0455

Runtime Classes 0317

kata Containers 0225

Using Runtimes in Kubernetes 0223

Demo Encrypting Secret Data at Rest 1847

58m

One way SSL vs Mutual SSL 0437

Implement pod to pod encryption by use of mTLS 0635

10m

Section 6: Supply Chain Security6 videos

Section Introduction 0030

Image Security 0443

Minimize base image footprint 0724

12m

Use static analysis of user workloads egKubernetes resources Docker files 0246

Whitelist Allowed Registries – Image Policy Webhook 0516

Scan images for known vulnerabilities Trivy 0834

16m

Section 7: Monitoring Logging and Runtime Security8 videos

Section Introduction 0050

Perform behavioral analytics of syscall process 0447

Falco Overview and Installation 0253

Use Falco to Detect Threats 0839

Falco Configuration Files 0654

Ensure Immutability of Containers at Runtime 0518

Mutable vs Immutable Infrastructure 0450

Use Audit Logs to monitor access 1018

12m

About this Lecture

Section: Understanding the Kubernetes Attack Surface • Size: 50.71 MB • Duration: 23m

Course Summary

Certified Kubernetes Security Specialist (CKS), Kubernetes is one of the highest trending technology in Cloud Computing as of today. Kubernetes had the fastest growth in job searches, over 173% from a year before as reported recently by a survey conducted by Indeed. Learn, practice, and get certified on Kubernetes with hands-on labs right in your browser. Learning Kubernetes is essential for any DevOps professional. DevOps engineers are always in demand. Currently, the average Silicon Valley salary for a DevOps engineer is 20% higher than what a software engineer makes. DevOps engineers make an average of $140,000 to $200,000 annually. And One of the most in-demand skills is Kubernetes Administration. Kubernetes is an open-source system for automating the deployment, scaling, and management of containerized applications. It was originally designed by Google and is now maintained by the Cloud Native Computing Foundation. Kubernetes is at the cutting edge of application deployment. To elevate your DevOps career, learn how to effectively deploy applications on Kubernetes. This course helps you gain the knowledge required to secure cloud-native applications on a Kubernetes cluster. A series of well-designed lectures with animation and illustration help you understand complex concepts easily.

Course Content

0 / 85 completed

Section 1: Introduction2 videos

Exam Information 0147

Course Introduction 0855

11m

Section 2: Understanding the Kubernetes Attack Surface2 videos

The 4C’s of Cloud Native security 0313

The Attack 0806

23mNow Playing

Section 3: Cluster Setup and Hardening31 videos

Section Introduction 0115

What are CIS Benchmarks 0552

CIS benchmark for Kubernetes 0241

Kubebench 0115

Kubernetes Security Primitives 0318

TLS Introduction 0128

Authentication 0534

Service Accounts 1434

19m

TLS in Kubernetes 0748

11m

TLS Basics 2003

27m

TLS in Kubernetes – Certificate Creation 1055

22m

View Certificate Details 0431

Certificates API 0607

API Groups 0552

KubeConfig 0832

15m

RBAC 0428

Authorization 0730

Cluster Roles and Role Bindings 0433

Kubelet Security 1448

24m

Kubectl Proxy Port Forward 0648

10m

Kubernetes Dashboard 0613

12m

Securing Kubernetes Dashboard 0138

Kubernetes Software Versions 0254

Verify platform binaries before deploying 0211

Cluster Upgrade Process 1111

13m

Network Policy 0751

16m

Developing Network Policies 1136

15m

Docker Service Configuration 0657

11m

Docker – Securing the Daemon 0725

11m

Demo – Cluster Upgrade 1137

1h 5m

Ingress 2234

37m

Section 4: System Hardening20 videos

Section Introduction 0130

Minimize host OS footprint Intro 0051

Least Privilege Principle 0516

Limit Node Access 0548

SSH Hardening 0549

Privilege Escalation in Linux 0305

Remove Obsolete Packages and Services 0256

Restrict Kernel Modules 0231

Identify and Disable Open Ports 0221

Minimize IAM roles 0546

Minimize external access to the network 0212

UFW Firewall Basics 0555

Linux Syscalls 0420

AquaSec Tracee 0320

Restrict syscalls using seccomp 0837

AppArmor 0409

Implement Seccomp in Kubernetes 0751

10m

Linux Capabilities 0405

AppArmor in Kubernetes 0244

Creating AppArmor Profiles 0511

Section 5: Minimize Microservice Vulnerabilities16 videos

Section Introduction 0054

Security Contexts 0152

Admission Controllers 0807

14m

Validating and Mutating Admission Controllers 1026

17m

Open Policy Agent OPA 0948

14m

Pod Security Policies Optional 0739

12m

OPA in Kubernetes 0945

22m

Container Sandboxing 0653

Manage Kubernetes secrets 0820

13m

gVisor 0455

Runtime Classes 0317

kata Containers 0225

Using Runtimes in Kubernetes 0223

Demo Encrypting Secret Data at Rest 1847

58m

One way SSL vs Mutual SSL 0437

Implement pod to pod encryption by use of mTLS 0635

10m

Section 6: Supply Chain Security6 videos

Section Introduction 0030

Image Security 0443

Minimize base image footprint 0724

12m

Use static analysis of user workloads egKubernetes resources Docker files 0246

Whitelist Allowed Registries – Image Policy Webhook 0516

Scan images for known vulnerabilities Trivy 0834

16m

Section 7: Monitoring Logging and Runtime Security8 videos

Section Introduction 0050

Perform behavioral analytics of syscall process 0447

Falco Overview and Installation 0253

Use Falco to Detect Threats 0839

Falco Configuration Files 0654

Ensure Immutability of Containers at Runtime 0518

Mutable vs Immutable Infrastructure 0450

Use Audit Logs to monitor access 1018

12m