Этот материал находится в платной подписке. Оформи премиум подписку и смотри или слушай Kubernetes CKS 2023 Complete Course + Simulator, а также все другие курсы, прямо сейчас!
Премиум
  • Урок 1. 00:02:31
    Welcome
  • Урок 2. 00:00:30
    Best Video Quality
  • Урок 3. 00:10:17
    K8s Security Best Practices
  • Урок 4. 00:02:43
    Cluster Specification
  • Урок 5. 00:03:48
    Practice - Create GCP Account
  • Урок 6. 00:04:54
    Practice - Configure "gcloud" command
  • Урок 7. 00:08:40
    Practice - Create Kubeadm Cluster in GCP
  • Урок 8. 00:01:01
    Practice - Firewall rules for NodePorts
  • Урок 9. 00:01:40
    Notice: Always stop your instances
  • Урок 10. 00:01:10
    Containerd Course Upgrade
  • Урок 11. 00:01:04
    Recap
  • Урок 12. 00:01:22
    How to get Access
  • Урок 13. 00:12:18
    Intro
  • Урок 14. 00:05:56
    Practice - Find various K8s certificates
  • Урок 15. 00:01:12
    Recap
  • Урок 16. 00:10:18
    Intro
  • Урок 17. 00:06:03
    Container Tools Introduction
  • Урок 18. 00:03:34
    Practice - The PID Namespace
  • Урок 19. 00:00:43
    Recap
  • Урок 20. 00:00:43
    Cluster Reset
  • Урок 21. 00:04:10
    Introduction 1
  • Урок 22. 00:05:05
    Introduction 2
  • Урок 23. 00:03:54
    Practice - Default Deny
  • Урок 24. 00:06:16
    Practice - Frontend to Backend traffic
  • Урок 25. 00:07:27
    Practice - Backend to Database traffic
  • Урок 26. 00:01:01
    Recap
  • Урок 27. 00:04:10
    Introduction
  • Урок 28. 00:01:10
    Practice - Install Dashboard
  • Урок 29. 00:04:40
    Practice - Outside Insecure Access
  • Урок 30. 00:03:35
    Practice - RBAC for the Dashboard
  • Урок 31. 00:01:42
    Recap
  • Урок 32. 00:00:43
    K8s Docs in correct Version
  • Урок 33. 00:03:57
    Introduction
  • Урок 34. 00:07:40
    Practice - Create an Ingress
  • Урок 35. 00:08:54
    Practice - Secure an Ingress
  • Урок 36. 00:00:27
    Recap
  • Урок 37. 00:03:05
    Introduction
  • Урок 38. 00:02:03
    Practice: Access Node Metadata
  • Урок 39. 00:04:28
    Practice: Protect Node Metadata via NetworkPolicy
  • Урок 40. 00:00:36
    Recap
  • Урок 41. 00:02:25
    Introduction
  • Урок 42. 00:05:18
    Practice - CIS in Action
  • Урок 43. 00:03:51
    Practice - kube-bench
  • Урок 44. 00:01:52
    Recap
  • Урок 45. 00:01:15
    Introduction
  • Урок 46. 00:03:28
    Practice - Download and verify K8s release
  • Урок 47. 00:05:13
    Practice - Verify apiserver binary running in our cluster
  • Урок 48. 00:00:32
    Recap
  • Урок 49. 00:09:11
    Intro
  • Урок 50. 00:05:01
    Practice - Role and Rolebinding
  • Урок 51. 00:04:02
    Practice - ClusterRole and ClusterRoleBinding
  • Урок 52. 00:04:16
    Accounts and Users
  • Урок 53. 00:09:26
    Practice - CertificateSigningRequests
  • Урок 54. 00:01:01
    Recap
  • Урок 55. 00:01:21
    Intro
  • Урок 56. 00:08:59
    Practice - Pod uses custom ServiceAccount
  • Урок 57. 00:03:23
    Practice - Disable ServiceAccount mounting
  • Урок 58. 00:02:43
    Practice - Limit ServiceAccounts using RBAC
  • Урок 59. 00:01:08
    Recap
  • Урок 60. 00:04:24
    Introduction
  • Урок 61. 00:04:08
    Practice - Anonymous Access
  • Урок 62. 00:04:09
    Practice - Insecure Access
  • Урок 63. 00:03:40
    Practice - Manual API Request
  • Урок 64. 00:06:35
    Practice - External Apiserver Access
  • Урок 65. 00:02:03
    NodeRestriction AdmissionController
  • Урок 66. 00:03:46
    Practice - Verify NodeRestriction
  • Урок 67. 00:00:51
    Recap
  • Урок 68. 00:06:33
    Introduction
  • Урок 69. 00:03:38
    Practice - Create outdated cluster
  • Урок 70. 00:06:21
    Practice - Upgrade controlplane node
  • Урок 71. 00:03:58
    Practice - Upgrade node
  • Урок 72. 00:01:08
    Recap
  • Урок 73. 00:03:39
    Introduction
  • Урок 74. 00:05:35
    Practice - Create Simple Secret Scenario
  • Урок 75. 00:05:43
    Practice - Hack Secrets in Container Runtime
  • Урок 76. 00:03:48
    Practice - Hack Secrets in ETCD
  • Урок 77. 00:05:21
    ETCD Encryption
  • Урок 78. 00:18:42
    Practice - Encrypt ETCD
  • Урок 79. 00:04:51
    Recap
  • Урок 80. 00:06:36
    Introduction
  • Урок 81. 00:03:06
    Practice - Container calls Linux Kernel
  • Урок 82. 00:03:26
    Open Container Initiative OCI
  • Урок 83. 00:02:11
    Sandbox Runtime Katacontainers
  • Урок 84. 00:02:05
    Sandbox Runtime gVisor
  • Урок 85. 00:03:55
    Practice - Create and use RuntimeClasses
  • Урок 86. 00:06:04
    Practice - Install and use gVisor
  • Урок 87. 00:01:08
    Recap
  • Урок 88. 00:03:19
    Intro and Security Contexts
  • Урок 89. 00:03:48
    Practice - Set Container User and Group
  • Урок 90. 00:02:27
    Practice - Force Container Non-Root
  • Урок 91. 00:01:35
    Privileged Containers
  • Урок 92. 00:02:51
    Practice - Create Privileged Containers
  • Урок 93. 00:00:57
    PrivilegeEscalation
  • Урок 94. 00:01:39
    Practice - Disable PriviledgeEscalation
  • Урок 95. 00:07:57
    Intro
  • Урок 96. 00:06:09
    Practice - Create sidecar proxy
  • Урок 97. 00:01:08
    Recap
  • Урок 98. 00:00:43
    Cluster Reset
  • Урок 99. 00:05:59
    Introduction
  • Урок 100. 00:03:20
    Practice - Install OPA
  • Урок 101. 00:10:40
    Practice - Deny All Policy
  • Урок 102. 00:09:21
    Practice - Enforce Namespace Labels
  • Урок 103. 00:04:32
    Practice - Enforce Deployment replica count
  • Урок 104. 00:04:14
    Practice - The Rego Playground and more examples
  • Урок 105. 00:01:38
    Recap
  • Урок 106. 00:04:50
    Introduction
  • Урок 107. 00:07:00
    Practice - Reduce Image Footprint with Multi-Stage
  • Урок 108. 00:08:11
    Practice - Secure and harden Images
  • Урок 109. 00:01:55
    Recap
  • Урок 110. 00:06:55
    Introduction
  • Урок 111. 00:02:13
    Kubesec
  • Урок 112. 00:03:27
    Practice - Kubesec
  • Урок 113. 00:01:32
    OPA Conftest
  • Урок 114. 00:04:08
    Practice - OPA Conftest for K8s YAML
  • Урок 115. 00:03:22
    Practice - OPA Conftest for Dockerfile
  • Урок 116. 00:01:19
    Recap
  • Урок 117. 00:07:05
    Introduction
  • Урок 118. 00:01:08
    Clair and Trivy
  • Урок 119. 00:04:21
    Practice - Use Trivy to scan images
  • Урок 120. 00:01:05
    Recap
  • Урок 121. 00:03:29
    Introduction
  • Урок 122. 00:03:59
    Practice - Image Digest
  • Урок 123. 00:05:40
    Practice - Whitelist Registries with OPA
  • Урок 124. 00:01:47
    ImagePolicyWebhook
  • Урок 125. 00:09:53
    Practice - ImagePolicyWebhook
  • Урок 126. 00:00:39
    Recap
  • Урок 127. 00:03:23
    Introduction
  • Урок 128. 00:04:23
    Practice - Strace
  • Урок 129. 00:07:09
    Practice - Strace and /proc on ETCD
  • Урок 130. 00:04:46
    Practice - /proc and env variables
  • Урок 131. 00:04:18
    Practice - Falco and Installation
  • Урок 132. 00:05:24
    Practice - Use Falco to find malicious processes
  • Урок 133. 00:04:51
    Practice - Investigate Falco rules
  • Урок 134. 00:08:44
    Practice - Change Falco Rule
  • Урок 135. 00:01:31
    Recap
  • Урок 136. 00:03:35
    Introduction
  • Урок 137. 00:04:48
    Ways to enforce immutability
  • Урок 138. 00:03:35
    Practice - StartupProbe changes container
  • Урок 139. 00:04:52
    Practice - SecurityContext renders container immutable
  • Урок 140. 00:00:51
    Recap
  • Урок 141. 00:11:40
    Introduction
  • Урок 142. 00:05:53
    Practice - Enable Audit Logging in Apiserver
  • Урок 143. 00:03:06
    Practice - Create Secret and check Audit Logs
  • Урок 144. 00:10:13
    Practice - Create advanced Audit Policy
  • Урок 145. 00:01:23
    Recap
  • Урок 146. 00:02:47
    Introduction
  • Урок 147. 00:02:44
    AppArmor
  • Урок 148. 00:06:09
    Practice - AppArmor for curl
  • Урок 149. 00:05:57
    Practice - AppArmor for Docker Nginx
  • Урок 150. 00:05:40
    Practice - AppArmor for Kubernetes Nginx
  • Урок 151. 00:03:34
    Seccomp
  • Урок 152. 00:02:40
    Practice - Seccomp for Docker Nginx
  • Урок 153. 00:07:47
    Practice - Seccomp for Kubernetes Nginx
  • Урок 154. 00:01:33
    Recap
  • Урок 155. 00:04:54
    Introduction
  • Урок 156. 00:02:06
    Practice - Systemctl and Services
  • Урок 157. 00:04:50
    Practice - Install and investigate Services
  • Урок 158. 00:02:03
    Practice - Disable application listening on port
  • Урок 159. 00:04:34
    Practice - Investigate Linux Users
  • Урок 160. 00:01:06
    Recap