LI530: Kubernetes Advanced UPDATE

Agenda:

Kubernetes Security - API, Cluster & Workloads

• Threat Model: 4C's of Cloud Native Security
• Access Security to the Kubernetes API
• Cluster Security & Hardening
• Workload & Network Security

Advanced Application Delivery

• Application Deployment in Containers (Advanced)
• Helm – Advanced Usage
• Kustomize – Declarative Overlays
• GitOps with ArgoCD

Policy Enforcement & Secure Supply Chain

• Kubernetes Admission Flow
• Policy Enforcement Patterns

Image & Container Security

• Image Hardening & Scanning
• CVE Scanning
• Supply Chain Security

Service Mesh

• Fundamentals & Concepts
• Istio & Linkerd – Comparison & Implementation
• Advanced Traffic Management

Cluster API - Kubernetes Lifecycle Management

• ClusterAPI Architecture
• Management vs. Workload Cluster
• Declarative Cluster Provisioning
• Upgrades & Scaling

Objectives:

Upon completion of the LI530 Kubernetes Advanced training, participants will be able to operate Kubernetes platforms securely, GitOps-based, and production-ready. They can deploy, secure, and automate applications, policies, images, and clusters in a controlled manner throughout the entire lifecycle.

Target audience:

Prerequisites:

To follow the course content and learning pace of the workshop LI530 Kubernetes Advanced effectively, initial hands-on experience with container technology such as Docker or Podman as well as solid Linux and command line skills and Kubernetes basic knowledge are required.

Participants should be able to work with the Kubernetes CLI and know basic Kubernetes resources such as Pod, Deployment, Service and Namespace; initial experience with application deployment on Kubernetes is advantageous.

We strongly recommend prior attendance of the following courses:

• LI500 Container Fundamentals
• LI510 Kubernetes Basics

Description:

The workshop LI530 Kubernetes Advanced provides comprehensive hands-on knowledge for secure, scalable and professional operation of modern Kubernetes platforms.

The focus is on Kubernetes Security at API, cluster and workload level, including Threat Modeling according to the 4C's of Cloud Native Security and practical cluster hardening. Participants learn Advanced Application Delivery with containers, Helm, Kustomize and GitOps with Argo CD for reproducible and auditable deployments. Another focus area is Policy Enforcement and Secure Supply Chain, including Admission Controllers, Policy-as-Code as well as image and container security.

Additionally, Service Mesh concepts with Istio and Linkerd for secure service-to-service communication are covered. Finally, the course teaches Cluster Lifecycle Management with Cluster API, from declarative provisioning to upgrades and scaling. The course is hands-on oriented, security-focused and targets experienced Kubernetes users who are responsible for production platforms.

We recommend as follow-up courses:
- LI560 Kubernetes Security
- LI590 Kubernetes Cluster Management with SUSE™ Rancher