About
In this module of the Kubernetes Security learning path, you build the Kubernetes security foundations every later control depends on. You cannot secure what you do not understand, so before you assess or attack a cluster you need to know how Kubernetes is put together and where its trust boundaries lie. Kubernetes runs containers at scale across many hosts, and that distribution is what makes it a large, unfamiliar attack surface. This module moves from single-container concepts to the distributed control plane: the API server, etcd, scheduler, controller manager, kubelet, and kube-proxy. You learn how pods, services, storage, and configuration objects behave, and how Role-Based Access Control governs who can do what. That groundwork is what makes the assessment, offensive, and defensive modules that follow make sense. Upon completion of the module, students will be able to: • Explain why orchestration is needed and how a cluster differs from single-host Docker. • Diagram the control plane and node components and describe the trust boundary of each. • Deploy and inspect a workload and reason about its network exposure across the flat pod network. • Read RBAC objects and determine the effective permissions of a user or service account. For inquiries, please write us at https://www.darkrelay.com/cybersecurity-course-inquiry