Oreilly – Kubernetes Network and Cluster Hardening 2025-4

Description

Kubernetes Network and Cluster Hardening Course. Led by Chris Jackson, this course provides the security skills necessary to harden your Kubernetes infrastructure at both the network and cluster levels. This comprehensive video training provides practical knowledge of critical defenses, including implementing effective network policies, securing inbound traffic using TLS, protecting node metadata, and restricting API access. It also covers advanced techniques for securing Kubernetes dashboards, minimizing external access, and validating platform binaries. Each lesson is accompanied by hands-on demonstrations so participants can confidently apply these best practices to real-world Kubernetes deployments. Designed for professionals with a working knowledge of Linux, an understanding of container concepts, and a basic Kubernetes knowledge equivalent to a CKA credential, this course aims to improve the resiliency and reliability of clusters. This content will be useful for improving the security of existing Kubernetes environments or preparing for the Kubernetes Security Specialist exam.

What you will learn

• Network Security: How to set up effective network policies to control the flow of traffic in and out of a Kubernetes cluster.
• Ingress protection: Methods for securing ingress traffic using TLS and other security mechanisms.
• API Access Management: How to restrict access to the Kubernetes cluster API to prevent potential attacks.
• Node Metadata Security: How to protect node metadata to prevent sensitive information from being exposed.
• Protecting Dashboards: Learn advanced methods for securing Kubernetes dashboards and restricting external access.
• Access Reduction: Applying techniques to minimize the attack surface and reduce the need for external access.
• Authentication: Methods for verifying platform binaries to ensure their authenticity and non-tampering.
• Hardening Best Practices: Gain practical knowledge to harden Kubernetes infrastructure against threats and attacks in real-world environments.

This course is suitable for people who:

• DevOps professionals and SRE engineers responsible for securing the Kubernetes infrastructure.
• Cybersecurity engineers who want to specialize their knowledge in Kubernetes cluster and network security.
• Candidates for the CKS (Certified Kubernetes Security Specialist) certification exam who are looking for practical knowledge to succeed in the exam.
• Anyone looking to improve the resilience and reliability of their Kubernetes clusters through advanced security measures.

Kubernetes Network and Cluster Hardening Course Specifications

• Publisher:  Oreilly
• Instructor: Chris Jackson
• Training level: Advanced
• Training duration: 4 hours

Course topics

Course images