Это пробный урок. Оформите подписку, чтобы получить доступ ко всем материалам курса. Премиум

  1. Урок 1. 00:02:31
    Welcome
  2. Урок 2. 00:00:30
    Best Video Quality
  3. Урок 3. 00:10:17
    K8s Security Best Practices
  4. Урок 4. 00:02:43
    Cluster Specification
  5. Урок 5. 00:03:48
    Practice - Create GCP Account
  6. Урок 6. 00:04:54
    Practice - Configure "gcloud" command
  7. Урок 7. 00:08:40
    Practice - Create Kubeadm Cluster in GCP
  8. Урок 8. 00:01:01
    Practice - Firewall rules for NodePorts
  9. Урок 9. 00:01:40
    Notice: Always stop your instances
  10. Урок 10. 00:01:10
    Containerd Course Upgrade
  11. Урок 11. 00:01:04
    Recap
  12. Урок 12. 00:01:22
    How to get Access
  13. Урок 13. 00:12:18
    Intro
  14. Урок 14. 00:05:56
    Practice - Find various K8s certificates
  15. Урок 15. 00:01:12
    Recap
  16. Урок 16. 00:10:18
    Intro
  17. Урок 17. 00:06:03
    Container Tools Introduction
  18. Урок 18. 00:03:34
    Practice - The PID Namespace
  19. Урок 19. 00:00:43
    Recap
  20. Урок 20. 00:00:43
    Cluster Reset
  21. Урок 21. 00:04:10
    Introduction 1
  22. Урок 22. 00:05:05
    Introduction 2
  23. Урок 23. 00:03:54
    Practice - Default Deny
  24. Урок 24. 00:06:16
    Practice - Frontend to Backend traffic
  25. Урок 25. 00:07:27
    Practice - Backend to Database traffic
  26. Урок 26. 00:01:01
    Recap
  27. Урок 27. 00:04:10
    Introduction
  28. Урок 28. 00:01:10
    Practice - Install Dashboard
  29. Урок 29. 00:04:40
    Practice - Outside Insecure Access
  30. Урок 30. 00:03:35
    Practice - RBAC for the Dashboard
  31. Урок 31. 00:01:42
    Recap
  32. Урок 32. 00:00:43
    K8s Docs in correct Version
  33. Урок 33. 00:03:57
    Introduction
  34. Урок 34. 00:07:40
    Practice - Create an Ingress
  35. Урок 35. 00:08:54
    Practice - Secure an Ingress
  36. Урок 36. 00:00:27
    Recap
  37. Урок 37. 00:03:05
    Introduction
  38. Урок 38. 00:02:03
    Practice: Access Node Metadata
  39. Урок 39. 00:04:28
    Practice: Protect Node Metadata via NetworkPolicy
  40. Урок 40. 00:00:36
    Recap
  41. Урок 41. 00:02:25
    Introduction
  42. Урок 42. 00:05:18
    Practice - CIS in Action
  43. Урок 43. 00:03:51
    Practice - kube-bench
  44. Урок 44. 00:01:52
    Recap
  45. Урок 45. 00:01:15
    Introduction
  46. Урок 46. 00:03:28
    Practice - Download and verify K8s release
  47. Урок 47. 00:05:13
    Practice - Verify apiserver binary running in our cluster
  48. Урок 48. 00:00:32
    Recap
  49. Урок 49. 00:09:11
    Intro
  50. Урок 50. 00:05:01
    Practice - Role and Rolebinding
  51. Урок 51. 00:04:02
    Practice - ClusterRole and ClusterRoleBinding
  52. Урок 52. 00:04:16
    Accounts and Users
  53. Урок 53. 00:09:26
    Practice - CertificateSigningRequests
  54. Урок 54. 00:01:01
    Recap
  55. Урок 55. 00:01:21
    Intro
  56. Урок 56. 00:08:59
    Practice - Pod uses custom ServiceAccount
  57. Урок 57. 00:03:23
    Practice - Disable ServiceAccount mounting
  58. Урок 58. 00:02:43
    Practice - Limit ServiceAccounts using RBAC
  59. Урок 59. 00:01:08
    Recap
  60. Урок 60. 00:04:24
    Introduction
  61. Урок 61. 00:04:08
    Practice - Anonymous Access
  62. Урок 62. 00:04:09
    Practice - Insecure Access
  63. Урок 63. 00:03:40
    Practice - Manual API Request
  64. Урок 64. 00:06:35
    Practice - External Apiserver Access
  65. Урок 65. 00:02:03
    NodeRestriction AdmissionController
  66. Урок 66. 00:03:46
    Practice - Verify NodeRestriction
  67. Урок 67. 00:00:51
    Recap
  68. Урок 68. 00:06:33
    Introduction
  69. Урок 69. 00:03:38
    Practice - Create outdated cluster
  70. Урок 70. 00:06:21
    Practice - Upgrade controlplane node
  71. Урок 71. 00:03:58
    Practice - Upgrade node
  72. Урок 72. 00:01:08
    Recap
  73. Урок 73. 00:03:39
    Introduction
  74. Урок 74. 00:05:35
    Practice - Create Simple Secret Scenario
  75. Урок 75. 00:05:43
    Practice - Hack Secrets in Container Runtime
  76. Урок 76. 00:03:48
    Practice - Hack Secrets in ETCD
  77. Урок 77. 00:05:21
    ETCD Encryption
  78. Урок 78. 00:18:42
    Practice - Encrypt ETCD
  79. Урок 79. 00:04:51
    Recap
  80. Урок 80. 00:06:36
    Introduction
  81. Урок 81. 00:03:06
    Practice - Container calls Linux Kernel
  82. Урок 82. 00:03:26
    Open Container Initiative OCI
  83. Урок 83. 00:02:11
    Sandbox Runtime Katacontainers
  84. Урок 84. 00:02:05
    Sandbox Runtime gVisor
  85. Урок 85. 00:03:55
    Practice - Create and use RuntimeClasses
  86. Урок 86. 00:06:04
    Practice - Install and use gVisor
  87. Урок 87. 00:01:08
    Recap
  88. Урок 88. 00:03:19
    Intro and Security Contexts
  89. Урок 89. 00:03:48
    Practice - Set Container User and Group
  90. Урок 90. 00:02:27
    Practice - Force Container Non-Root
  91. Урок 91. 00:01:35
    Privileged Containers
  92. Урок 92. 00:02:51
    Practice - Create Privileged Containers
  93. Урок 93. 00:00:57
    PrivilegeEscalation
  94. Урок 94. 00:01:39
    Practice - Disable PriviledgeEscalation
  95. Урок 95. 00:07:57
    Intro
  96. Урок 96. 00:06:09
    Practice - Create sidecar proxy
  97. Урок 97. 00:01:08
    Recap
  98. Урок 98. 00:00:43
    Cluster Reset
  99. Урок 99. 00:05:59
    Introduction
  100. Урок 100. 00:03:20
    Practice - Install OPA
  101. Урок 101. 00:10:40
    Practice - Deny All Policy
  102. Урок 102. 00:09:21
    Practice - Enforce Namespace Labels
  103. Урок 103. 00:04:32
    Practice - Enforce Deployment replica count
  104. Урок 104. 00:04:14
    Practice - The Rego Playground and more examples
  105. Урок 105. 00:01:38
    Recap
  106. Урок 106. 00:04:50
    Introduction
  107. Урок 107. 00:07:00
    Practice - Reduce Image Footprint with Multi-Stage
  108. Урок 108. 00:08:11
    Practice - Secure and harden Images
  109. Урок 109. 00:01:55
    Recap
  110. Урок 110. 00:06:55
    Introduction
  111. Урок 111. 00:02:13
    Kubesec
  112. Урок 112. 00:03:27
    Practice - Kubesec
  113. Урок 113. 00:01:32
    OPA Conftest
  114. Урок 114. 00:04:08
    Practice - OPA Conftest for K8s YAML
  115. Урок 115. 00:03:22
    Practice - OPA Conftest for Dockerfile
  116. Урок 116. 00:01:19
    Recap
  117. Урок 117. 00:07:05
    Introduction
  118. Урок 118. 00:01:08
    Clair and Trivy
  119. Урок 119. 00:04:21
    Practice - Use Trivy to scan images
  120. Урок 120. 00:01:05
    Recap
  121. Урок 121. 00:03:29
    Introduction
  122. Урок 122. 00:03:59
    Practice - Image Digest
  123. Урок 123. 00:05:40
    Practice - Whitelist Registries with OPA
  124. Урок 124. 00:01:47
    ImagePolicyWebhook
  125. Урок 125. 00:09:53
    Practice - ImagePolicyWebhook
  126. Урок 126. 00:00:39
    Recap
  127. Урок 127. 00:03:23
    Introduction
  128. Урок 128. 00:04:23
    Practice - Strace
  129. Урок 129. 00:07:09
    Practice - Strace and /proc on ETCD
  130. Урок 130. 00:04:46
    Practice - /proc and env variables
  131. Урок 131. 00:04:18
    Practice - Falco and Installation
  132. Урок 132. 00:05:24
    Practice - Use Falco to find malicious processes
  133. Урок 133. 00:04:51
    Practice - Investigate Falco rules
  134. Урок 134. 00:08:44
    Practice - Change Falco Rule
  135. Урок 135. 00:01:31
    Recap
  136. Урок 136. 00:03:35
    Introduction
  137. Урок 137. 00:04:48
    Ways to enforce immutability
  138. Урок 138. 00:03:35
    Practice - StartupProbe changes container
  139. Урок 139. 00:04:52
    Practice - SecurityContext renders container immutable
  140. Урок 140. 00:00:51
    Recap
  141. Урок 141. 00:11:40
    Introduction
  142. Урок 142. 00:05:53
    Practice - Enable Audit Logging in Apiserver
  143. Урок 143. 00:03:06
    Practice - Create Secret and check Audit Logs
  144. Урок 144. 00:10:13
    Practice - Create advanced Audit Policy
  145. Урок 145. 00:01:23
    Recap
  146. Урок 146. 00:02:47
    Introduction
  147. Урок 147. 00:02:44
    AppArmor
  148. Урок 148. 00:06:09
    Practice - AppArmor for curl
  149. Урок 149. 00:05:57
    Practice - AppArmor for Docker Nginx
  150. Урок 150. 00:05:40
    Practice - AppArmor for Kubernetes Nginx
  151. Урок 151. 00:03:34
    Seccomp
  152. Урок 152. 00:02:40
    Practice - Seccomp for Docker Nginx
  153. Урок 153. 00:07:47
    Practice - Seccomp for Kubernetes Nginx
  154. Урок 154. 00:01:33
    Recap
  155. Урок 155. 00:04:54
    Introduction
  156. Урок 156. 00:02:06
    Practice - Systemctl and Services
  157. Урок 157. 00:04:50
    Practice - Install and investigate Services
  158. Урок 158. 00:02:03
    Practice - Disable application listening on port
  159. Урок 159. 00:04:34
    Practice - Investigate Linux Users
  160. Урок 160. 00:01:06
    Recap