Freeintermediate6 modules · 18 lessons · ~7h

Kubernetes Security

A practical course on securing Kubernetes clusters for security engineers and DevSecOps teams. 18 hands-on lessons covering cluster hardening, RBAC, pod security, network policies, supply chain security, and runtime monitoring.

Start course

Want to go deeper? Continue on Pluralsight

Level up your security skills with expert-led courses. Free 10-day trial, then access thousands of courses across cloud security, networking, and certifications.

Start free trial

Course curriculum

Cluster Architecture and Security FundamentalsFoundation

L1. Kubernetes Architecture and the Attack Surface
L2. API Server Hardening: Flags, Audit Logging and TLS
L3. etcd Security: Encryption at Rest and Access Control

Authentication, Authorization and RBACAccess control

L4. Authentication: Certificates, OIDC and Service Accounts
L5. RBAC Deep Dive: Roles, Bindings and Least Privilege
L6. Service Account Hardening and Token Projection

Pod Security and Workload HardeningWorkload hardening

L7. Pod Security Standards: Restricted, Baseline and Privileged
L8. Security Contexts: runAsNonRoot, Capabilities and Seccomp
L9. Secrets Management: Native Secrets, Sealed Secrets and Vault
L10. Resource Limits, Quotas and LimitRanges

Network SecurityNetwork isolation

L11. Network Policies: Ingress, Egress and Default Deny
L12. Service Mesh and mTLS with Istio
L13. Ingress Security: TLS Termination, WAF and Rate Limiting

Supply Chain and Image SecuritySupply chain

L14. Image Scanning: Trivy, Grype and Admission Control
L15. Image Signing and Verification with Cosign and Sigstore
L16. Minimal Base Images: Distroless, Scratch and Chainguard

Monitoring, Auditing and Incident ResponseOperations

L17. Runtime Security: Falco, Tetragon and eBPF
L18. Audit Logging and Incident Response in Kubernetes