Kubernetes makes it easy to deploy at scale and just as easy to deploy insecurely at scale. This Kubernetes security training teaches you how containers and clusters are attacked and how to harden them, from image builds to cluster configuration.
Who should attend
- DevOps, platform and site reliability engineers
- Cloud and security engineers
- Penetration testers moving into containers
- Developers deploying to Kubernetes
- Teams running managed clusters on AWS, Azure or Google Cloud can combine this with our Cloud Penetration Testing Training.
Prerequisites
Participants should be comfortable with the Linux command line and have basic hands-on experience with containers and Kubernetes, such as deploying a workload with kubectl. No prior security experience is required.
What you will learn
- Container and Kubernetes architecture from a security perspective
- Securing container images and build processes
- API server and control plane exposure
- RBAC: roles, service accounts and common over-privilege
- Workload risks: privileged containers, host mounts and escape paths
- Network policies and segmentation between workloads
- Secrets management in Kubernetes
- Admission control and policy enforcement
- Node and kubelet security
- Detecting and responding to suspicious activity in clusters
- Using the CIS Kubernetes Benchmark and MITRE ATT&CK for Containers as references
Hands-on labs
Participants work in a lab cluster with intentional weaknesses, practicing both attack paths and defensive fixes: escaping a privileged container, abusing an over-privileged service account, then closing each gap with RBAC, network policies and admission control.
What you receive
- Course materials and lab access
- A Kubernetes hardening checklist
- A certificate of attendance
Frequently asked questions
Learn to secure your clusters
Contact us for dates, pricing and corporate options.
