К содержимому
learnspaceYOUR NEXT CHAPTER
ПРОСТРАНСТВО ОБУЧЕНИЯ
ГлавнаяКаталог курсовМоё обучениеCoursera

Знания без границ

Учитесь у лучших университетов и компаний мира.

Открыть Coursera
Интеграция
Пространство университета
Моё пространствоСтраница курса
↵
ЯЛичный кабинетСтудент
© 2026 LearnSpaceКаждый день — возможность узнать больше.Помощь
Certified Kubernetes Security Specialist (CKS) Course · LearnSpace
Назад в каталог
courseraIT и технологии

Certified Kubernetes Security Specialist (CKS) Course

Курс от Packt
Продвинутый≈ 15.5 чАнглийский
О курсеНавыкиПрограммаПреподаватели

О курсе

Updated in May 2025. This course now features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. This Kubernetes Security Specialist course offers foundational knowledge through concepts and hands-on demonstrations of securing a Kubernetes cluster and its applications. Emphasizing practical skills, it requires a running Kubernetes cluster for participation. The course covers all security aspects in Kubernetes, including cluster setup, ingress creation and security, and cluster hardening with RBAC, roles, and role bindings. It delves into system and kernel hardening, minimizing microservice vulnerabilities, supply chain security, monitoring, logging, and runtime security. By the end, learners will have comprehensive knowledge to become Kubernetes security specialists. Key topics include creating a Kubernetes cluster, setting default deny NetworkPolicy, installing the Kubernetes Dashboard, verifying Kubernetes releases, and managing roles and role bindings. Designed for Kubernetes administrators and security specialists aiming to master the Certified Kubernetes Security Specialist certification, this course assumes prior knowledge of Kubernetes administration.

Навыки, которые вы освоите

KubernetesContainerizationHardeningNetwork SecuritySecurity ControlsRole-Based Access Control (RBAC)Cyber Security PoliciesInfrastructure SecurityThreat DetectionCloud-Native ComputingVerification And ValidationIdentity and Access ManagementAuthorization (Computing)

Программа курса

25 модулей · 118 учебных материалов

01Become a Certified Kubernetes Security Specialist (CKS)2 материалов

Become a Certified Kubernetes Security Specialist (CKS)

Certified Kubernetes Security Specialist (CKS)ВидеоFull Course ResourcesЧтение
02Create Kubernetes Cluster2 материалов

Create Kubernetes Cluster

Create Kubernetes Cluster and Look at Some ErrorsВидео

Учитесь у экспертов

Packt - Course Instructors

Преподаватель курса

Certified Kubernetes Security Specialist (CKS) Course
В каталоге вашей программы

Инвестируйте в себя

Новые знания — в удобное для вас время.

Начать на Coursera

Обучение откроется на Coursera
в новой вкладке

Обучение на Coursera

≈ 15.5 ч

25 модулей

Язык: Английский

Субтитры: Испанский

Часть программы вашего университета
Setting Up a Kubernetes ClusterDIALOGUE
03Cluster Setup - Use Network Security Policies to Restrict Cluster Level Access6 материалов

Cluster Setup - Use Network Security Policies to Restrict Cluster Level Access

Introduction to NetworkPolicyВидеоCreate Default Deny NetworkPolicyВидеоCreate Egress and Ingress RulesВидеоCreate Another Network Policy for Different Name SpaceВидеоUnderstanding Kubernetes Network PoliciesDIALOGUEAssessment 1Задание
04Cluster Setup - Minimize Use of and Access to GUI Elements4 материалов

Cluster Setup - Minimize Use of and Access to GUI Elements

Install Kubernetes DashboardВидеоInsecure Access from OutsideВидеоRBAC for Kubernetes DashboardВидеоConfiguring Kubernetes Dashboard AccessDIALOGUE
05Cluster Setup - Properly Set Up Ingress Objects with Security Control3 материалов

Cluster Setup - Properly Set Up Ingress Objects with Security Control

Create an IngressВидеоSecure an IngressВидеоImplementing NodePort Services and Ingress in KubernetesDIALOGUE
06Protect Node Metadata and Endpoints4 материалов

Protect Node Metadata and Endpoints

Accessing Node MetadataВидеоProtect Node Metadata Through NetworkPolicyВидеоWorking with Cloud Network PoliciesDIALOGUE Assessment 2Задание
07Use CIS Benchmark to Review the Security Configuration of Kubernetes Components2 материалов

Use CIS Benchmark to Review the Security Configuration of Kubernetes Components

kube-benchВидеоSecuring Q Cluster with Kube-benchDIALOGUE
08Verify Platform Binaries before Deploying3 материалов

Verify Platform Binaries before Deploying

How to Delete the Custom NetworkВидеоVerify apiserver Binary Running in Our ClusterВидеоVerifying Software Releases with SHA-512DIALOGUE
09Cluster Hardening - RBAC7 материалов

Cluster Hardening - RBAC

RBAC - Role and RolebindingВидеоRole and Rolebinding for a UserВидеоClusterRole and ClusterRoleBindingВидеоAccounts and UsersВидеоCertificateSigningRequestsВидеоUnderstanding RBAC in KubernetesDIALOGUEAssessment 3Задание
10Exercise Caution in Using Service Accounts5 материалов

Exercise Caution in Using Service Accounts

IntroductionВидеоPod Uses Custom ServiceAccountВидеоDisable ServiceAccount MountingВидеоLimit ServiceAccounts Permissions Using RBAC to Edit ResourcesВидеоManaging Kubernetes Service AccountsDIALOGUE
11Cluster Hardening - Restrict API Access5 материалов

Cluster Hardening - Restrict API Access

Enable/Disable Anonymous AccessВидеоLet's Perform a Manual API RequestВидеоExternal APIserver AccessВидеоNodeRestriction AdmissionControllerВидеоManaging Anonymous Access with Kubernetes ManifestsDIALOGUE
12Cluster Hardening - Upgrade Kubernetes6 материалов

Cluster Hardening - Upgrade Kubernetes

Verify NodeRestrictionВидеоIntroductionВидеоCreate a Cluster with the Old VersionВидеоUpgrade Master and Worker NodeВидеоManaging Kubernetes Node Labels and UpgradesDIALOGUEAssessment 4Задание
13Microservice Vulnerabilities - Manage Kubernetes Secrets6 материалов

Microservice Vulnerabilities - Manage Kubernetes Secrets

Create SecretВидеоHack Secrets in DockerВидеоHack Secrets in ETCDВидеоETCD EncryptionВидеоETCD Encryption -2ВидеоManaging Kubernetes SecretsDIALOGUE
14Use Container Runtime Sandboxes in a Multi-Tenant Environment5 материалов

Use Container Runtime Sandboxes in a Multi-Tenant Environment

Calling Linux Kernel from Inside a ContainerВидеоOpen Container Initiative (OCI)ВидеоCrictlВидеоCreate and Use RuntimeClassesВидеоUnderstanding Container Kernel Sharing and Runtime ClassesDIALOGUE
15Microservices Vulnerabilities - OS Level Security Domains7 материалов

Microservices Vulnerabilities - OS Level Security Domains

Set Container User and Group (Security Context)ВидеоForce Container Non-RootВидеоPrivileged ContainersВидеоPrivilegeEscalationВидеоCreate and Enable PodSecurityPolicyВидеоRunning Containers with Non-Root UsersDIALOGUEAssessment 5Задание
16Microservices Vulnerabilities - mTLS3 материалов

Microservices Vulnerabilities - mTLS

IntroductionВидеоCreate a Sidecar ProxyВидеоImplementing Service Mesh with mTLSDIALOGUE
17Open Policy Agent (OPA)5 материалов

Open Policy Agent (OPA)

Introduction OPAВидеоInstall OPA GatekeeperВидеоDeny All PolicyВидеоEnforce Namespace LabelsВидеоUnderstanding Open Policy Agent (OPA) in KubernetesDIALOGUE
18Supply Chain Security - Image Footprint4 материалов

Supply Chain Security - Image Footprint

Reduce Image Footprint with Multi-StageВидеоSecure and Harden ImagesВидеоOptimizing Docker Image SizesDIALOGUEAssessment 6Задание
19Supply Chain Security - Static Analysis5 материалов

Supply Chain Security - Static Analysis

KubesecВидеоUse kubesec to Perform Static Analysis Using Docker ImageВидеоOPA ConftestВидеоOPA Conftest for DockerfileВидеоSecuring Kubernetes: Best PracticesDIALOGUE
20Supply Chain Security - Image Vulnerability Scanning2 материалов

Supply Chain Security - Image Vulnerability Scanning

Use Trivy to Scan ImagesВидеоScanning Images for Vulnerabilities with TrivyDIALOGUE
21Supply Chain Security - Secure Supply Chain4 материалов

Supply Chain Security - Secure Supply Chain

Image DigestВидеоWhitelist Registries with OPAВидеоUsing Image Digests in Container ManagementDIALOGUEAssessment 7Задание
22Behavioral Analytics at Host and Container Level8 материалов

Behavioral Analytics at Host and Container Level

StraceВидеоStrace and /proc on ETCDВидеоAccess /proc and env Variables from the Inside PodВидеоFALCOВидеоUse Falco to Find Malicious ProcessesВидеоInvestigate Falco RulesВидеоChange Falco RulesВидеоAnalyzing System Calls with straceDIALOGUE
23Runtime Security - Immutability of Containers at Runtime5 материалов

Runtime Security - Immutability of Containers at Runtime

IntroductionВидеоStartupProbeВидеоSecurityContext Renders Container ImmutableВидеоImmutability in ContainersDIALOGUEAssessment 8Задание
24Runtime Security - Auditing5 материалов

Runtime Security - Auditing

IntroductionВидеоAudit PolicyВидеоEnable Audit Logging in ApiserverВидеоCreate a Secret and Check Audit LogsВидеоUnderstanding Kubernetes Audit LogsDIALOGUE
25System Hardening - Kernel Hardening10 материалов

System Hardening - Kernel Hardening

AppArmorВидеоAppArmor for CurlВидеоAppArmor for Docker NginxВидеоAppArmor for Kubernetes NginxВидеоSeccompВидеоSeccomp for Docker NginxВидеоSeccomp for Kubernetes NginxВидеоAssessment 9ЗаданиеFull Course Practice AssessmentЗаданиеFull Course AssessmentЗадание