Kubernetes Security: Attacking and Defending Kubernetes

Like many complex systems Kubernetes has historically been insecure by default, and contains a number of "footguns" that make secure deployments difficult. Segregation of duty, least privilege, and a rigorous Continuous Security approach are the foundations of any secure system-however these become more difficult to achieve in distributed systems with many moving parts.
But all is not lost! With an understanding of the foundational layers and principles including micro-segmentation, zero trust, and local PKI, Kubernetes can be secured against the most ardent of attackers.
The course guides attendees through an introduction to Linux container security, and progresses to advanced Kubernetes cluster security. It emphasizes pragmatic threat modelling and risk assessment based on an understanding of the tools and primitives available.
What you'll learn and how you can apply it
By the end of this course, you'll understand
Linux and container security
The Kubernetes attack surface
Automated container security testing and DevSecOps workflows
Open Source security tooling and the vendor landscape
And you'll be able to
Break out of a container
Attack and harden Kubernetes
Security test Kubernetes clusters
This course is for you because.
You're an intermediate to advanced Kubernetes user who wants to strengthen their security understanding
You want to become an SRE, DevOps, or DevSecOps engineer
Prerequisites
Familiarity and comfort with Docker, Kubernetes, and the Linux command line
Screenshots