Урок 1.
00:02:31
Welcome
Урок 2.
00:00:30
Best Video Quality
Урок 3.
00:10:17
K8s Security Best Practices
Урок 4.
00:02:43
Cluster Specification
Урок 5.
00:03:48
Practice - Create GCP Account
Урок 6.
00:04:54
Practice - Configure "gcloud" command
Урок 7.
00:08:40
Practice - Create Kubeadm Cluster in GCP
Урок 8.
00:01:01
Practice - Firewall rules for NodePorts
Урок 9.
00:01:40
Notice: Always stop your instances
Урок 10.
00:01:10
Containerd Course Upgrade
Урок 11.
00:01:04
Recap
Урок 12.
00:01:22
How to get Access
Урок 13.
00:12:18
Intro
Урок 14.
00:05:56
Practice - Find various K8s certificates
Урок 15.
00:01:12
Recap
Урок 16.
00:10:18
Intro
Урок 17.
00:06:03
Container Tools Introduction
Урок 18.
00:03:34
Practice - The PID Namespace
Урок 19.
00:00:43
Recap
Урок 20.
00:00:43
Cluster Reset
Урок 21.
00:04:10
Introduction 1
Урок 22.
00:05:05
Introduction 2
Урок 23.
00:03:54
Practice - Default Deny
Урок 24.
00:06:16
Practice - Frontend to Backend traffic
Урок 25.
00:07:27
Practice - Backend to Database traffic
Урок 26.
00:01:01
Recap
Урок 27.
00:04:10
Introduction
Урок 28.
00:01:10
Practice - Install Dashboard
Урок 29.
00:04:40
Practice - Outside Insecure Access
Урок 30.
00:03:35
Practice - RBAC for the Dashboard
Урок 31.
00:01:42
Recap
Урок 32.
00:00:43
K8s Docs in correct Version
Урок 33.
00:03:57
Introduction
Урок 34.
00:07:40
Practice - Create an Ingress
Урок 35.
00:08:54
Practice - Secure an Ingress
Урок 36.
00:00:27
Recap
Урок 37.
00:03:05
Introduction
Урок 38.
00:02:03
Practice: Access Node Metadata
Урок 39.
00:04:28
Practice: Protect Node Metadata via NetworkPolicy
Урок 40.
00:00:36
Recap
Урок 41.
00:02:25
Introduction
Урок 42.
00:05:18
Practice - CIS in Action
Урок 43.
00:03:51
Practice - kube-bench
Урок 44.
00:01:52
Recap
Урок 45.
00:01:15
Introduction
Урок 46.
00:03:28
Practice - Download and verify K8s release
Урок 47.
00:05:13
Practice - Verify apiserver binary running in our cluster
Урок 48.
00:00:32
Recap
Урок 49.
00:09:11
Intro
Урок 50.
00:05:01
Practice - Role and Rolebinding
Урок 51.
00:04:02
Practice - ClusterRole and ClusterRoleBinding
Урок 52.
00:04:16
Accounts and Users
Урок 53.
00:09:26
Practice - CertificateSigningRequests
Урок 54.
00:01:01
Recap
Урок 55.
00:01:21
Intro
Урок 56.
00:08:59
Practice - Pod uses custom ServiceAccount
Урок 57.
00:03:23
Practice - Disable ServiceAccount mounting
Урок 58.
00:02:43
Practice - Limit ServiceAccounts using RBAC
Урок 59.
00:01:08
Recap
Урок 60.
00:04:24
Introduction
Урок 61.
00:04:08
Practice - Anonymous Access
Урок 62.
00:04:09
Practice - Insecure Access
Урок 63.
00:03:40
Practice - Manual API Request
Урок 64.
00:06:35
Practice - External Apiserver Access
Урок 65.
00:02:03
NodeRestriction AdmissionController
Урок 66.
00:03:46
Practice - Verify NodeRestriction
Урок 67.
00:00:51
Recap
Урок 68.
00:06:33
Introduction
Урок 69.
00:03:38
Practice - Create outdated cluster
Урок 70.
00:06:21
Practice - Upgrade controlplane node
Урок 71.
00:03:58
Practice - Upgrade node
Урок 72.
00:01:08
Recap
Урок 73.
00:03:39
Introduction
Урок 74.
00:05:35
Practice - Create Simple Secret Scenario
Урок 75.
00:05:43
Practice - Hack Secrets in Container Runtime
Урок 76.
00:03:48
Practice - Hack Secrets in ETCD
Урок 77.
00:05:21
ETCD Encryption
Урок 78.
00:18:42
Practice - Encrypt ETCD
Урок 79.
00:04:51
Recap
Урок 80.
00:06:36
Introduction
Урок 81.
00:03:06
Practice - Container calls Linux Kernel
Урок 82.
00:03:26
Open Container Initiative OCI
Урок 83.
00:02:11
Sandbox Runtime Katacontainers
Урок 84.
00:02:05
Sandbox Runtime gVisor
Урок 85.
00:03:55
Practice - Create and use RuntimeClasses
Урок 86.
00:06:04
Practice - Install and use gVisor
Урок 87.
00:01:08
Recap
Урок 88.
00:03:19
Intro and Security Contexts
Урок 89.
00:03:48
Practice - Set Container User and Group
Урок 90.
00:02:27
Practice - Force Container Non-Root
Урок 91.
00:01:35
Privileged Containers
Урок 92.
00:02:51
Practice - Create Privileged Containers
Урок 93.
00:00:57
PrivilegeEscalation
Урок 94.
00:01:39
Practice - Disable PriviledgeEscalation
Урок 95.
00:07:57
Intro
Урок 96.
00:06:09
Practice - Create sidecar proxy
Урок 97.
00:01:08
Recap
Урок 98.
00:00:43
Cluster Reset
Урок 99.
00:05:59
Introduction
Урок 100.
00:03:20
Practice - Install OPA
Урок 101.
00:10:40
Practice - Deny All Policy
Урок 102.
00:09:21
Practice - Enforce Namespace Labels
Урок 103.
00:04:32
Practice - Enforce Deployment replica count
Урок 104.
00:04:14
Practice - The Rego Playground and more examples
Урок 105.
00:01:38
Recap
Урок 106.
00:04:50
Introduction
Урок 107.
00:07:00
Practice - Reduce Image Footprint with Multi-Stage
Урок 108.
00:08:11
Practice - Secure and harden Images
Урок 109.
00:01:55
Recap
Урок 110.
00:06:55
Introduction
Урок 111.
00:02:13
Kubesec
Урок 112.
00:03:27
Practice - Kubesec
Урок 113.
00:01:32
OPA Conftest
Урок 114.
00:04:08
Practice - OPA Conftest for K8s YAML
Урок 115.
00:03:22
Practice - OPA Conftest for Dockerfile
Урок 116.
00:01:19
Recap
Урок 117.
00:07:05
Introduction
Урок 118.
00:01:08
Clair and Trivy
Урок 119.
00:04:21
Practice - Use Trivy to scan images
Урок 120.
00:01:05
Recap
Урок 121.
00:03:29
Introduction
Урок 122.
00:03:59
Practice - Image Digest
Урок 123.
00:05:40
Practice - Whitelist Registries with OPA
Урок 124.
00:01:47
ImagePolicyWebhook
Урок 125.
00:09:53
Practice - ImagePolicyWebhook
Урок 126.
00:00:39
Recap
Урок 127.
00:03:23
Introduction
Урок 128.
00:04:23
Practice - Strace
Урок 129.
00:07:09
Practice - Strace and /proc on ETCD
Урок 130.
00:04:46
Practice - /proc and env variables
Урок 131.
00:04:18
Practice - Falco and Installation
Урок 132.
00:05:24
Practice - Use Falco to find malicious processes
Урок 133.
00:04:51
Practice - Investigate Falco rules
Урок 134.
00:08:44
Practice - Change Falco Rule
Урок 135.
00:01:31
Recap
Урок 136.
00:03:35
Introduction
Урок 137.
00:04:48
Ways to enforce immutability
Урок 138.
00:03:35
Practice - StartupProbe changes container
Урок 139.
00:04:52
Practice - SecurityContext renders container immutable
Урок 140.
00:00:51
Recap
Урок 141.
00:11:40
Introduction
Урок 142.
00:05:53
Practice - Enable Audit Logging in Apiserver
Урок 143.
00:03:06
Practice - Create Secret and check Audit Logs
Урок 144.
00:10:13
Practice - Create advanced Audit Policy
Урок 145.
00:01:23
Recap
Урок 146.
00:02:47
Introduction
Урок 147.
00:02:44
AppArmor
Урок 148.
00:06:09
Practice - AppArmor for curl
Урок 149.
00:05:57
Practice - AppArmor for Docker Nginx
Урок 150.
00:05:40
Practice - AppArmor for Kubernetes Nginx
Урок 151.
00:03:34
Seccomp
Урок 152.
00:02:40
Practice - Seccomp for Docker Nginx
Урок 153.
00:07:47
Practice - Seccomp for Kubernetes Nginx
Урок 154.
00:01:33
Recap
Урок 155.
00:04:54
Introduction
Урок 156.
00:02:06
Practice - Systemctl and Services
Урок 157.
00:04:50
Practice - Install and investigate Services
Урок 158.
00:02:03
Practice - Disable application listening on port
Урок 159.
00:04:34
Practice - Investigate Linux Users
Урок 160.
00:01:06
Recap