Kubernetes helps deploy and manage containerized applications at scale. It abstracts the underlying infrastructure so it doesn’t matter if you're deploying your applications to Amazon Web Services, Microsoft Azure, or your own on-premises datacenter. Ready to get started?

In this course, you will cover the most essential Kubernetes concepts that you’ll need to know to be proficient, including pods, services, and deployments. Beyond that though, you will learn about the Kubernetes architecture, how to build clusters, and how to deploy and manage applications. 

In the last part of the course, you will dive into threat modeling and real-world security practices. By the end of this course, you will have a great new skill for your resume and you’ll be able to start using Kubernetes in your own projects.

Learn Kubernetes: A Deep Dive

Provide an identity for the Pod within the cluster.

Provide an identity for the Pod outside the cluster.

Provide an identity for the associated cluster to another cluster.

The purpose of a `ServiceAccount` associated with a Pod is to

The purpose of a <code>ServiceAccount</code> associated with a Pod is to

Tampering can *only* happen when data is stored in memory or on disk.

Tampering can only happen when data is stored in memory or on disk.

A good way to prevent a live Pod from being tampered with, is setting its filesystems to __________.

A good way to prevent a live Pod from being tampered with, is setting its filesystems to __________.

In the Kubernetes world, the entire configuration of the cluster is stored in the cluster store.

In the Kubernetes world, the entire configuration of the cluster is stored in the cluster store.

 What is the Kubernetes API resource to store and share sensitive data?

What is the Kubernetes API resource to store and share sensitive data?

Replicating control plane nodes across availability zones.

Not replicating worker nodes across availability zones.

Which of the following practices can be used to protect cluster resources against DoS attacks?

Which of the following practices can be used to protect cluster resources against DoS attacks?

Defining Kubernetes Network Policies that restrict Pod-to-Pod and Pod-to-external communications.

Utilizing mutual TLS and API token-based authentication for application-level authentication.

Implementing application-layer authorization policies that implement the most privilege.

Which practices can be used for protecting application components against DoS attacks?

Which practices can be used for protecting application components against DoS attacks?

User namespaces allow container processes to run as root inside the container as well as on the host machine.

User namespaces allow container processes to run as root inside the container as well as on the host machine.

Test your understanding of threat modeling Kubernetes.

Kubernetes Primer

Kubernetes Principles of Operation

Installing Kubernetes

Working With Pods: Theory

Working With Pods: Hands-On

Kubernetes Deployments

Kubernetes Services: Theory

Kubernetes Services: Hands-On

Service Discovery

Kubernetes Storage

ConfigMaps

StatefulSets

Threat Modeling Kubernetes

Real-World Kubernetes Security

Conclusion

APPENDIX A: Other Important Stuff

Quiz: Threat Modeling Kubernetes