Introduction
Kubernetes microservices security essentials: Introduction
()
1. Use Appropriate Pod Security Standards
Learning objectives
()
Understanding Pod security
()
Configure security contexts
()
Pod security admission
()
OPA Gatekeeper
()
2. Managing Kubernetes Secrets
Learning objectives
()
Understanding Kubernetes Secrets
()
Creating and using a Secret
()
Using Secrets in pods
()
Encrypting Secrets at rest
()
3. Implement Container Isolation Techniques
Learning objectives
()
Containing containers
()
Sandboxed pods
()
Using gVisor
()
Using Kata containers
()
4. Implement Pod-to-Pod Encryption with Cilium
Learning objectives
()
Introduction to Cilium and mTLS
()
Using Cilium for pod-to-pod encryption
()
Deploying and verifying mTLS with Cilium
()
5. Secure Your Software Supply Chain
Learning objectives
()
Software supply chain risks
()
Protect image registry access
()
Require signed images
()
Policy enforcement: Image policy webhook
()
Policy enforcement: Validating admission policy
()
6. Scan Images for Known Vulnerabilities
Learning objectives
()
Scanning for vulnerable images
()
Using Trivy to identify vulnerable containers
()
Using the Trivy Operator
()
Using Trivy and Kyverno for SBOM attestation
()
Summary
Kubernetes microservices security essentials: Summary
()