Introduction
Kubernetes network and cluster hardening: Introduction
()
1. Network Security Policies
Learning objectives
()
Network security overview
()
Pod communication policies
()
Segmentation
()
2. Properly Setup Ingress with TLS
Learning objectives
()
Understanding Ingress
()
Creating Ingress objects
()
Ingress security options
()
Testing Ingress access
()
3. Protect Node Metadata and Endpoints
Learning objectives
()
Understanding Kubelet
()
Network policies
()
Node metadata protection
()
Implement Kubelet authentication
()
Test Kubelet and node metadata security
()
4. Kubernetes Dashboard Security
Learning objectives
()
K8s dashboard architecture
()
Dashboard installation
()
Role Based Access Control (RBAC)
()
5. Restrict Access to Kubernetes API
Kubernetes API fundamentals
()
Kubernetes cccess control
()
API server configuration
()
API server hardening
()
Verify access control policies
()
6. Minimize External Access to the Network
Learning objectives
()
Understanding external access to Kubernetes
()
Finding open ports
()
Host firewall configuration
()
Test host firewall
()
7. Verify Platform Binaries Before Deploying
Learning objectives
()
Understanding platform binary integrity
()
Download the latest Kubernetes release
()
Verify binary checksum
()
Summary
Kubernetes network and cluster hardening: Summary
()