Docker Certified Associate (DCA) BootCamp

Online Instructor-Led Certification BootCamp

Certified Kubernetes Security Specialist (CKS)

Description

This course is designed to equip you with an in-depth understanding of Kubernetes Security. The course is designed absolutely from scratch and provides hands-on exercises for you to experience the nitty-gritty of working with container security in production level.

This course is a perfect fit for aspirants who wish to be a Certified Kubernetes Security Specialist (CKS).

What will you learn?

Who should take up this course?

Want to be a Certified Kubernetes Security Specialist (CKS)

Outline

Cluster Setup

Use Network level policy to restrict cluster level access
Use CIS Benchmark to review the security configuration to Kubernetes component: (Kubeapi, kubedns, kubelet, ETCD)
Properly setup ingress objects with security control
Verify platform binaries before deploying

Cluster Hardening

Restrict access to Kubernetes API
Use role-based access control to minimize exposure
Protect node meta-data and endpoints
Update Kubernetes frequently
TLS in Kubernetes

System Hardening

Least privilege principle
Minimize Host OS footprint
Minimize IAM roles
SSH Hardening
Minimize external access to the network
Appropriately use Kernel hardening tools such as AppArmor, seccop

Minimize Microservice Vulnerabilities

Security Context
Admission Controller
Manage Kubernetes Secrets
Implement pod to pod encryption by use of mTLS
Pod Security policies
Use container runtime sandboxes in multi-tenant environment (gvisor, kata container)

Supply Chain Security

Minimize Base Image footprint
Scan images for known vulnerabilities
Secure your supply chain: whitelist allowed image registries, sign and validate images
Use static analysis of user workloads(Kubernetes resources and dockerfiles)

Logging and Monitoring and Runtime Security

Use audit Logs to monitor access
Ensure Immutability of Container runtime
Detect all phases of attack regardless of where it occurs and how it spread
Detect threats within physical infrastructure, apps, network, data, users and workloads
Perform deep analytical investigation and identification of bad actors within environment
Perform behavioral analytics of syscall process

Pre-requisites

Participants should have working knowledge on Linux OS commands.
Participants should be CKA certified and have good understanding of Containerization and Kubernetes concepts

System Requirements

Operating System – macOS, Windows 7 or above
Putty software to setup SSH connection

Trainer Bio

Mamta Jha – Co-founder, TechScalable

A Cloud Solution Architect with 15+ years of experience in training and consulting experience, has delivered training to corporates like Microsoft, Intuit, RedHat, VMware, HCL, GE, Applied Materials, Dell, Infosys, IBM, Schneider, L&T, TCS, Capgemini, Accenture, Hexaware, PWC, Wipro, Mindtree etc. to name a few. She is certified and delivers trainings in below technologies:

Azure and Google Cloud
DevOps: Git, Jenkins, Ansible, Chef, SonarQube, Artifacts, CI/CD pipeline
Docker and Kubernetes
RedHat OpenShift
RedHat OpenStack
Machine Learning and Artificial Intelligence

Mamta has worked in various production-level projects and has hands-on experience in architecting and implementing solutions.

Worked on various migration projects, wherein migrated from on-prem to AWS/GCP/Azure
Setup Containerised environment for high performance and availability on-prem and Cloud using OpenShift/Kubernetes
Projects implementing CI/CD pipeline for all environments and automating all stages of software development phases using various DevOps tools
Designed and implemented auto-healed, high available cluster using Azure Kubernetes Service / DigitalOcean Kubernetes Service/ Google Kubernetes Engine
Hands-on experience in provisioning and maintaining large OpenStack setup for telecom domain
Designing and implementing predictive analytical methods and/or applications and performing statistical analysis, data mining and retrieval processes on a large amount of data to identify trends, figures and other relevant information

Additional Details

A project will be provided and we will have Q&A after a week of the training.

In case the batch is cancelled, the amount would be credited back to the payee’s account in 5 working days.

[contact-form-7 id=”1025″]

Testimonials

She is having In-depth Knowledge on the subject and excellent presentation skill towards the delivery of the training.

Manjunath N

A very systematic and detailed training program, covered many topics in a short span in time. Personally enjoyed the training a lot. Great Instructor.

Bhaskar

Mamta is the best trainer I came across. Her excellent teaching skills and courteous personality has helped me tremendously. It is comforting to know that whenever I have a question you answer right away. I have learned so much from you and I look forward to learning more. Thank you for being a remarkable teacher and I am very grateful.

Naga Neelam

Mamta was precise and detail-oriented in the training approach. She was able to address many of the queries which were relevant to different practical scenarios. Appreciate all the effort and knowledge provided by the trainer.

Aananth Gopalan

The trainer was very patient to explain basic concepts in an understandable manner to a non-developer. Has tons of experience and patience.

Giridharan Ramaswamy

Fantastic Trainer, very friendly and encouraging. All of the exercises were on a scale of good to excellent. I thoroughly enjoyed your class. The course materials are excellent. Her professional attitude is much appreciated. I have been very pleased with her efforts. Mamta's enthusiasm and passion are exemplary. Some valuable experiences and learning – thank you

Naveen Kumar

It was very interesting and intensive training. Shivam is a very qualified and experienced trainer. Shivam, thank you for your course.

Ruslan Abdrakmanov

He is friendly and very knowledgeable in the subject.

Ilias Shaik

Having Proficient Knowledge in Cloud Technologies, Great to have him. The Best Trainer in my life so far.

Swamy Vallamalla

Yes, It was excellent training by the Trainer. He is always ready to clear the doubts at any time. Overall Perfect.

Arunkumar Manickavasagam