Kubernetes App Platforms & Platform Security

Overview

In recent years, Kubernetes has established itself as the standard framework for the underlying infrastructure of SaaS products. With STACKIT Kubernetes Engine (SKE), STACKIT provides its customers with a “Kubernetes as a Service” product — but even with a managed service, administrators still need to get numerous security-relevant aspects right to ensure secure operations, including supply chain security, runtime detection, and application isolation.

This workshop examines these security aspects across the entire cluster lifecycle: from initial configuration through operations to handling newly discovered or published vulnerabilities (CVEs). It also covers how deployment pipelines for SaaS products can be designed to prevent typical supply chain attacks.

Target Audience & Requirements

Kubernetes administrators with good Linux skills. Prerequisites are either CKA certification from the Linux Foundation or equivalent knowledge of the architecture and operation of Kubernetes clusters.

Format

• Duration: 3 days
• Location: remote or onsite
• Language: English or German
• Participants: up to 10

Learning Objectives

Introduction to Cloud Security Concepts

• The 4 Cs of Cloud-Native Security: Code, Container, Cluster, and Cloud
• Assessment, Prevention, Detection, Reaction
• Attack surfaces and types

Cluster Security

• Image supply chains
• Policy-based control
• Runtime sandbox

Network Security

• Netfilter management and implementation
• Pod-to-pod encryption
• Restricting cluster-level access

Workload Security

• Analyzing workloads
• SELinux fundamentals
• Implementing AppArmor

Detecting and Handling Security Incidents

• Introduction to intrusion detection systems
• Best practices during an incident
• Post-incident best practices
• Threat detection and behavioral analysis

STACKIT documentation university.stackit.cloud Request this Workshop Open the documentation