What you'll learn

Understand and Implement RBAC Policies to secure Kubernetes API access effectively.
Gain Hands-On Experience by implementing Role-Based Access Control (RBAC) in Kubernetes through practical labs.
Configure Client Authentication using SSL/TLS certificates for secure Kubernetes communication.
Set Up and Manage Client Credentials in the Kubernetes configuration file.
Deep Dive into RBAC Components, including Roles and RoleBindings, to control access within the cluster.
Expand RBAC Permissions to enable users to manage Pods within a specific namespace.
Access and Work with a Minikube Kubernetes Cluster as a designated user with controlled privileges.
Design and Implement Network Policies to regulate Pod-to-Pod communication securely.
Enforce Pod-to-Pod Communication Restrictions using Network Policies in a hands-on lab session.
Configure Selective Network Policies to allow controlled communication between specific Pods.
Secure an Nginx Server on a Kubernetes cluster using HTTPS (TLS encryption) for enhanced security.

Requirements

Basic Understanding of Kubernetes
Fundamental Knowledge of Linux Commands
Familiarity with YAML
Experience with Kubernetes CLI (kubectl)
Some Exposure to Cloud Platforms like AWS

Description

Kubernetes is the backbone of modern cloud-native applications, but securing its API and network communication is critical. In this course, you will learn how to protect your Kubernetes environment from unauthorized access, enforce security policies, and ensure encrypted communication between services.Course ContentArchitecture of the Kubernetes ClusterUnderstanding the Kubernetes architecture with examplesWorking with KubernetesRoles of the Master NodeComponents of the Control Plane (Master Node)API ServerEtcdSchedulerController ManagerKubeletService ProxyPOD (Pod)Container Engine (Docker, Containerd, or Rocket)RBAC Policies for Securing Kubernetes API AccessIntroductionKey components of RBACHow RBAC works in Kubernetes API Access?How Role and RoleBinding Work TogetherKubernetes Roles: Defining Permissions and AccessPermissions Granted by Kubernetes RolesCreate a roleBind the Role to a User or Service AccountHands-On Lab: Implementing RBAC in KubernetesIntroduction to Scenario-Based RBAC ExercisesSet Up a VM for a Minikube ClusterSet Up a K8s Minikube Cluster – Part 1Set Up a K8s Minikube Cluster – Part 2Set Up a K8s Minikube Cluster – Part 3Start the K8s Minikube ClusterCreate a Namespace and Run a PodClient Authentication using SSL/TLS Certificates

Overview

of Client Certificate GenerationGenerate a Private KeyGenerate a Certificate Signing Request (CSR)Sign a CSR with Minikube's CA to Generate a User CertificateSet Client Credentials in Kubernetes ConfigVerify User Credentials in Kubernetes ConfigRBAC: Role and RoleBindingCreate a RoleVerify the Role and Its Associated PermissionsCreate a RoleBinding to Assign a UserTest RBAC PermissionsExpand RBAC Permissions to Manage Pods in a NamespaceGenerate a Private Key and CSRGenerate a User Certificate by Signing CSR with Minikube CASet User Credentials in Kubernetes (K8s)Create a Role with Specific PermissionsCreate a RoleBindingRBAC Testing: Validate PermissionsAccess the K8s Minikube Cluster as a UserList and Manage Kubernetes ContextsSet Up a Kubernetes Context for a UserVerify RBAC Permissions in a New ContextSet Up a K8s Context for a Different UserTest RBAC Permissions for Pod CreationModify RBAC Role Permissions in K8sImplement and Test Network Policies for Pod CommunicationIntroduction to Kubernetes Network PoliciesWhy Restrict Pod-To-Pod Communication?Understanding K8s Network Policies and CNI PluginsExample Use Case ScenariosHands-On Lab: Enforcing Pod-to-Pod Restrictions with Network PoliciesSet Up a VM for a Kubernetes ClusterStart Minikube with Cilium CNIDeploy Two Pods and Assign LabelsTest Pod-to-Pod Connectivity with CurlCreate a Network Policy to Restrict Pod CommunicationVerify Pod-to-Pod Connectivity is BlockedNetwork Policy to Restrict Ingress and Egress TrafficConfiguring Network Policy for Selective Pod Communication

Overview

of Selective Pod CommunicationNetwork Policy for Selective Pod CommunicationTest Pod ConnectivityDeploy a Pod and Verify Its Network ConnectivitySecuring, Deploying, and Accessing Nginx in Kubernetes

Overview

of Securing Nginx with HTTPSDeploy and Expose a Nginx Pod to External TrafficAccess Nginx Web Server Through HTTPSet Up Nginx on Host Machine for Accessing Nginx PodAccess Nginx Web Server via Web Browser (HTTP Only)Secure Nginx Server with HTTPS (TLS) on K8s ClusterDeploy and Expose a Nginx Pod to External TrafficGenerate a self-signed TLS CertificateStore the TLS Certificate as a SecretCheck Minikube's Ingress Controller StatusCreate Ingress Resource for HTTPSLast lecture

Overview

Section 1: Kubernetes Cluster: Components and Architecture
Lecture 1 Introduction to the Course Module
Lecture 2 The Kubernetes Cluster Architecture
Lecture 3 Learn Architecture Through Examples
Lecture 4 Getting Started with Kubernetes
Lecture 5 Control Plane Components in Kubernetes (Master Node)
Lecture 6 Kubernetes Scheduler: A Key Control Plane Component
Lecture 7 Kubernetes Controller Manager
Section 2: RBAC Policies for Securing Kubernetes API Access
Lecture 8 Introduction
Lecture 9 Key components of RBAC
Lecture 10 How RBAC works in Kubernetes API Access?
Lecture 11 How Role and RoleBinding Work Together
Lecture 12 Kubernetes Roles: Defining Permissions and Access
Lecture 13 Permissions Granted by Kubernetes Roles
Lecture 14 Create a role
Lecture 15 Bind the Role to a User or Service Account
Section 3: Hands-On Lab: Implementing RBAC in Kubernetes
Lecture 16 Introduction to Scenario-Based RBAC Exercises
Lecture 17 Set Up a VM for a Minikube Cluster
Lecture 18 Set Up a K8s Minikube Cluster – Part 1
Lecture 19 Set Up a K8s Minikube Cluster – Part 2
Lecture 20 Set Up a K8s Minikube Cluster – Part 3
Lecture 21 Start the K8s Minikube Cluster
Lecture 22 Create a Namespace and Run a Pod
Section 4: Client Authentication using SSL/TLS Certificates
Lecture 23

Overview

of Client Certificate Generation
Lecture 24 Generate a Private Key
Lecture 25 Generate a Certificate Signing Request (CSR)
Lecture 26 Sign a CSR with Minikube's CA to Generate a User Certificate
Lecture 27 Set Client Credentials in Kubernetes Config
Lecture 28 Verify User Credentials in Kubernetes Config
Section 5: RBAC: Role and RoleBinding
Lecture 29 Create a Role
Lecture 30 Verify the Role and Its Associated Permissions
Lecture 31 Create a RoleBinding to Assign a User
Lecture 32 Test RBAC Permissions
Section 6: Expand RBAC Permissions to Manage Pods in a Namespace
Lecture 33 Generate a Private Key and CSR
Lecture 34 Generate a User Certificate by Signing CSR with Minikube CA
Lecture 35 Set User Credentials in Kubernetes (K8s)
Lecture 36 Create a Role with Specific Permissions
Lecture 37 Create a RoleBinding
Lecture 38 RBAC Testing: Validate Permissions
Section 7: Access the K8s Minikube Cluster as a User
Lecture 39 List and Manage Kubernetes Contexts
Lecture 40 Set Up a Kubernetes Context for a User
Lecture 41 Verify RBAC Permissions in a New Context
Lecture 42 Set Up a K8s Context for a Different User
Lecture 43 Test RBAC Permissions for Pod Creation
Lecture 44 Modify RBAC Role Permissions in K8s
Section 8: Implement and Test Network Policies for Pod Communication
Lecture 45 Introduction to Kubernetes Network Policies
Lecture 46 Why Restrict Pod-To-Pod Communication?
Lecture 47 Understanding K8s Network Policies and CNI Plugins
Lecture 48 Example Use Case Scenarios
Section 9: Hands-On Lab: Enforcing Pod-to-Pod Restrictions with Network Policies
Lecture 49 Set Up a VM for a Kubernetes Cluster
Lecture 50 Start Minikube with Cilium CNI
Lecture 51 Deploy Two Pods and Assign Labels
Lecture 52 Test Pod-to-Pod Connectivity with Curl
Lecture 53 Create a Network Policy to Restrict Pod Communication
Lecture 54 Verify Pod-to-Pod Connectivity is Blocked
Lecture 55 Network Policy to Restrict Ingress and Egress Traffic
Section 10: Configuring Network Policy for Selective Pod Communication
Lecture 56

Overview

of Selective Pod Communication
Lecture 57 Network Policy for Selective Pod Communication
Lecture 58 Test Pod Connectivity
Lecture 59 Deploy a Pod and Verify Its Network Connectivity
Section 11: Securing, Deploying, and Accessing Nginx in Kubernetes
Lecture 60

Overview

of Securing Nginx with HTTPS
Lecture 61 Deploy and Expose a Nginx Pod to External Traffic
Lecture 62 Access Nginx Web Server Through HTTP
Lecture 63 Set Up Nginx on Host Machine for Accessing Nginx Pod
Lecture 64 Access Nginx Web Server via Web Browser (HTTP Only)
Section 12: Secure Nginx Server with HTTPS (TLS) on K8s Cluster
Lecture 65 Deploy and Expose a Nginx Pod to External Traffic
Lecture 66 Generate a self-signed TLS Certificate
Lecture 67 Store the TLS Certificate as a Secret
Lecture 68 Check Minikube's Ingress Controller Status
Lecture 69 Create Ingress Resource for HTTPS
Lecture 70 Last lecture
DevOps Engineers – Looking to implement secure access controls and network policies in Kubernetes environments.,Cloud Engineers & Architects,Software Developers,IT Professionals & Enthusiasts – Anyone interested in learning Kubernetes security best practices.


Homepage:

https://www.udemy.com/course/mastering-kubernetes-api-security-and-network-policies/