Certified Kubernetes Security Specialist 2023

Certified Kubernetes Security Specialist 2023
Last updated 7/2022
MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz

Master Course to prepare for CKS certification.

What you’ll learn

Kubernetes Security

Requirements

Certified Kubernetes Administrator

Description

Overview

Section 1: Introduction

Lecture 1 Introduction to the Course

Lecture 2 Course Lecture Format

Lecture 3 Document – Link to Code Repository

Lecture 4 Our Community

Section 2: Domain 1 – Cluster Setup

Lecture 5 Overview of CIS Benchmarks for Hardening

Lecture 6 Kubernetes CIS Benchmarks

Lecture 7 Our Lab Architecture

Lecture 8 Document Lecture

Lecture 9 Creating Infrastructure for Labs

Lecture 10 ETCD Security Guidelines

Lecture 11 Configuring ETCD Binaries

Lecture 12 Understanding Asymmetric Key Encryption

Lecture 13 Revising SSL/TLS

Lecture 14 Overview of Certificate Authority

Lecture 15 In-Transit Encryption with HTTPS

Lecture 16 Overview of Certificate Based Authentication

Lecture 17 Client Authentication in ETCD

Lecture 18 Integrating Systemd with ETCD

Lecture 19 API Server Security Guidelines

Lecture 20 Configuring API Server

Lecture 21 Transport Security for API Server
Lecture 22 Access Control

Lecture 23 Static Token File Authentication

Lecture 24 Downsides of Static Token File Authentication

Lecture 25 Implementing X509 Client Authentication

Lecture 26 Downsides of X509 Client Authentication

Lecture 27 Overview of OIDC Authentication

Lecture 28 Authorization

Lecture 29 Encryption Provider

Lecture 30 Implementing Auditing

Lecture 31 Setting up kubeadm cluster

Lecture 32 Revising Taints and Tolerations

Lecture 33 Kubelet Security

Lecture 34 Verifying Platform Binaries

Lecture 35 Notes – Cluster Setup

Section 3: Domain 2 – Cluster Hardening

Lecture 36 Creating User for RBAC

Lecture 37 Role Based Access Controls (RBAC)

Lecture 38 ClusterRole and ClusterRoleBinding

Lecture 39 Revising Ingress

Lecture 40 Understanding Ingress Resource and Ingress Controllers

Lecture 41 Creating Ingress and Ingress Controller

Lecture 42 Ingress Security

Lecture 43 Overview of Service Accounts

Lecture 44 Service Account Security

Lecture 45 Upgrading kudeadm Clusters

Lecture 46 Notes – Cluster Hardening

Section 4: Domain 3 – Minimize Microservice Vulnerabilities

Lecture 47 Admission Controllers

Lecture 48 Security Contexts

Lecture 49 Revising Privileged Container

Lecture 50 Running Privileged PODS in Kubernetes

Lecture 51 Hack Misconfigured Cluster

Lecture 52 ImagePullPolicy in Kubernetes

Lecture 53 Admission Controller – AlwaysPullImages

Lecture 54 Admission Controller – ImagePolicyWebhook

Lecture 55 Custom WebHook Integration with Admission Controller

Lecture 56 Overview of Kubernetes Secrets

Lecture 57 Mounting Secrets in Pods

Lecture 58 Notes – Minimize Microservice Vulnerabilities

Section 5: Domain 4 – System Hardening

Lecture 59 Overview of AppArmor

Lecture 60 Integration of AppArmor with Kubernetes

Lecture 61 OCI and Container Runtimes

Lecture 62 Configuring containerd and runc

Lecture 63 Container Runtime Interface

Lecture 64 Overview of Container Runtime Sandboxes

Lecture 65 Implementing RunTimeClass – gVisor

Lecture 66 Kubeadm and Calcio

Lecture 69 Notes – System Hardening

Section 6: Domain 5 – Supply Chain Security

Lecture 70 Vulnerability, Exploit and Payload

Lecture 71 Container Security Scanning

Lecture 72 Scan images for known vulnerabilities

Lecture 73 Scanning K8s Clusters for Security Best Practices

Lecture 74 Overview of Static Analysis

Lecture 75 Notes – Supply Chain Security

Section 7: Domain 6 – Monitoring, Logging and Runtime Security

Lecture 76 Overview of Falco

Lecture 77 Introduction to Sysdig

Lecture 78 Creating Custom Falco Rules

Lecture 79 Falco Rule Writing – Exam Perspective

Lecture 80 Audit Logging In-Detail

Lecture 81 Immutability at Container Runtime

Lecture 82 Notes – Monitoring, Logging and Runtime Security

Section 8: Exam Preparation Section

Lecture 83 Our Community

Lecture 84 Overview of CKS Exams

Lecture 87 Notes – Exam Preparation Section

Lecture 88 Exam Preparation Practice Tests

Individuals who aim to learn about Kubernetes Security,Individuals aiming to get certified on the Certified Kubernetes Security Specialist certification.