Kubernetes training · Foundations and advanced security

Master Kubernetes security mechanisms, from the image to the cluster. Through a structured progression combining theory, demonstrations and labs, learn to secure your containers, workloads and Kubernetes environments in ways you can apply in production.

CLD-310 · Advanced · 1 to 3 days · 10 participants max. · Theory, demos and labs

Why train in Kubernetes security?

Kubernetes speeds up application deployment, but it also brings new security challenges around images, containers, identities, the network and cluster configuration. This course helps you understand these risks and master Kubernetes' native protection mechanisms, whatever your environment, on-premises or cloud.

The course follows a complete progression, from Linux foundations to Kubernetes orchestration. You will understand how each layer contributes to overall security and learn to protect images, containers, workloads and the cluster as a whole.

Three formats let you match the depth and the amount of practice to your goals: theoretical fundamentals in 1 day, theory and demonstrations in 2 days, or the full path with labs in 3 days. The configurations, policies and controls covered are designed to carry straight into your production environments.

rbac.yamlnetworkpolicy.yamlnamespace.yaml1apiVersion: networking.k8s.io/v12kind: NetworkPolicy3metadata:4 name: payments-default-deny5 namespace: payments6spec:7 podSelector: {}8 policyTypes:9 - Ingress10 - EgressAll traffic deniedby default$ kubectl apply -f pod-debug.yaml -n paymentsError from server (Forbidden): error when creating"pod-debug.yaml": pods "debug" is forbidden: violatesPodSecurity "restricted:latest": privileged (container"debug" must not set securityContext.privileged=true)

On the programme

  • RBAC
  • Network Policies
  • Pod Security
  • StackRox & Aqua Security
  • DevSecOps

What you will be able to put into practice

By the end of the course, you will be able to:

  • Understand

    the architecture and foundations of Kubernetes to identify the security mechanisms specific to each component.

  • Secure

    images, containers and workloads by applying the right controls at each stage of their lifecycle.

  • Strengthen

    the security of a Kubernetes cluster with configurations and practices suited to enterprise environments.

  • Define

    effective security policies aligned with operational needs, risks and production constraints.

  • Implement

    Kubernetes' native mechanisms such as RBAC, Network Policies and Pod Security to control access and limit the attack surface.

  • Evaluate

    what specialist solutions such as StackRox and Aqua Security bring, by understanding the technical mechanisms they rely on.

  • Integrate

    Kubernetes security into a DevSecOps approach to automate controls and build them into the application lifecycle for good.

The format in practice

Duration

1 to 3 days

1, 2 or 3 days

Group size

10 max.

10 participants max. per trainer

Format

  • 1 day: fundamentals
  • 2 days: theory and demos
  • 3 days: full path with labs

Prerequisites

  • Linux and networking basics
  • Familiarity with containerisation
  • A VMware- or VirtualBox-ready workstation with local network access
CLD-310AdvancedKubernetes · Foundations &advanced security

Certification

Certificate of attendance

Each participant receives this digital badge in their name, level 3 of 3 in the Cloud series.

Assessment

  • Continuous assessment during demonstrations and labs
  • Final practical scenario in the 3-day format

Who it is for

  • Systems and security administrators
  • Architects
  • DevOps and DevSecOps engineers
  • Developers and integrators
  • Auditors

Methods

  • Structured progression
  • Live demonstrations
  • Labs on a cluster
  • Cases that carry straight into production

Materials

  • Course materials
  • Preconfigured virtual machines
  • Resources available for 30 days

Practice

  • Secure architecture
  • Cloud-native security

Secure your Kubernetes environments end to end

Let's build a path around your architecture, your Kubernetes environment and your teams' level, to strengthen the security of your cloud-native platforms for the long term.