Kubernetes - Admin - Sec
Kubernetes Administration and Security training: target audience
This course is aimed at system administrators, operations engineers, SREs and DevOps/DevSecOps architects who want to understand admin-level operations and discover advanced Kubernetes security concepts.
Master container orchestration administration with Kubernetes!
- 3 days
- 8 participants MAX
- In Geneva or at your premises
Kubernetes - Admin - Sec
Kubernetes Administration and Security training: course outline
Several labs complement the course outline below, alternating between theory and hands-on practice.
- The basics
- What is Kubernetes?
- What is a cluster?
- Distributions
- The CNCF and the open-source ecosystem
- Architecture
- Main components
- How the network layer works
- Installing and upgrading a Kubernetes cluster
- High availability
- Application resilience
- Adding nodes to the cluster
- Kubernetes objects refresher
- The main ones: Pods, ReplicaSets, Deployments, etc.
- Services, Ingress and DNS management
- Volumes and persistent data
- Pod scheduling
- Resources and limits
- Parameters and policies
- Affinity rules
- Taints and tolerations
- CRDs and Operators
- What is a CRD?
- Deploying a CRD
- How an operator works
- Some operators on the market
- Security
- RBAC and permission management
- Hardening containerized images
- Analyzing vulnerabilities in containerized images
- Hardening the cluster
- Detecting risky behavior across Kubernetes
- Securing etcd
- Securing internal connections
- Encrypting connections between Pods
- Introduction to Admission Controllers
- Deploying Policy as Code
- Observability
- Introduction to observability
- Managing probes
- Managing logs
- Metrics and alerts
- Debugging a Pod
- Debugging a Service
Kubernetes - Admin - Sec
Kubernetes Administration and Security training: prerequisites
To get the most out of this course, we recommend having completed our foundational Kubernetes and Docker trainings, along with a good understanding of basic Linux administration and containerization.
Each participant must have a laptop to complete the hands-on labs.
Register for our training course!Each participant must have a laptop to complete the hands-on labs.
