Container & Kubernetes Security
Secure and attack cloud-native infrastructure
One-time payment · lifetime access · lessons, labs, exam and certificate included · no subscription.
About this course
This course takes you from container fundamentals to Kubernetes cluster defence. You learn how containers differ from virtual machines, why namespaces and cgroups matter, and how images and registries introduce risk. On a local kind or minikube cluster you create yourself, you explore pods, the etcd datastore, base64 "secrets", and RBAC, then run a build-it, break-it, fix-it exercise: you deliberately create an over-permissive service account, use impersonation to see its blast radius, watch a bind grant escalate to cluster-admin, and then close the hole. The final lessons harden the cluster with network policies, admission control and least-privilege RBAC. Everything happens on a disposable cluster you own, and the capstone asks you to document each finding and prove the attack path is blocked.