null Book

Chapter 1: Cluster Setup-Use Network security policies to restrict cluster level access

Chapter 2: Cluster Setup-Use CIS benchmark to review the security configuration of Kubernetes components (etcd, kubelet, kubedns, kubeapi)

Chapter 3: Cluster Setup-Properly set up Ingress with TLS

Chapter 4: Cluster Setup-Protect node metadata and endpoints

Chapter 5: Cluster Setup-Verify platform binaries before deploying

Chapter 6: Cluster Hardening-Use Role Based Access Controls to minimize exposure

Chapter 7: Cluster Hardening-Exercise caution in using service accounts e.g. disable defaults, minimize permissions on newly created ones

Chapter 8: Cluster Hardening-Restrict access to Kubernetes API

Chapter 9: Cluster Hardening-Upgrade Kubernetes to avoid vulnerabilities

Chapter 11: System Hardening-Using least-privilege identity and access management

Chapter 12: System Hardening-Minimize external access to the network

Chapter 13: System Hardening-Appropriately use kernel hardening tools such as AppArmor, seccomp

Chapter 14: Minimize Microservice Vulnerabilities-Use appropriate pod security standards

Chapter 15: Minimize Microservice Vulnerabilities-Manage Kubernetes secrets

Chapter 16: Minimize Microservice Vulnerabilities-Understand and implement isolation techniques (multi-tenancy, sandboxed containers, etc.)

Chapter 17: Minimize Microservice Vulnerabilities-Implement Pod-to-Pod encryption using Cilium

Chapter 18: Supply Chain Security-Minimize base image footprint

Chapter 19: Supply Chain Security-Understand your supply chain (e.g. SBOM, CI/CD, artifact repositories)

Chapter 20: Supply Chain Security-Secure your supply chain (permitted registries, sign and validate artifacts, etc.)

Chapter 21: Supply Chain Security-Perform static analysis of user workloads and container images (e.g. Kubesec, KubeLinter)

Chapter 22: Monitoring, Logging and Runtime Security-Perform behavioral analytics to detect malicious activities

Chapter 23: Monitoring, Logging and Runtime Security-Detect threats within physical infrastructure, apps, networks, data, users and workloads

Chapter 24: Monitoring, Logging and Runtime Security-Investigate and identify phases of attack and bad actors within the environment

Chapter 25: Monitoring, Logging and Runtime Security-Ensure immutability of containers at runtime

Chapter 26: Monitoring, Logging and Runtime Security-Use Kubernetes audit logs to monitor acce

Unlimited Learning, One Price
$299 / INR 23,999