Hardening containers and the Kubernetes cluster that runs them: an image built minimal, scanned with no critical findings, signed and shipped with an SBOM; a cluster where a default-deny network policy separates the payments and web namespaces with one allowed path, and policy-as-code admission control refuses a privileged pod; and the eight-domain board — images, supply chain, cluster config, network policy, RBAC and identity, pod security, runtime and secrets — all in place except runtime detection, still rolling out.

CY-MID-024Mid Level · Container Security

Container & Kubernetes Security — The Cluster Security Board

A hands-on mid-level course that hardens containers and the Kubernetes clusters that run them. Work the cluster security board - eight domains: Images, Supply Chain, Cluster Config, Network Policy, RBAC & Identity, Pod Security, Runtime, and Secrets - building minimal signed images, default-deny network policy, least-privilege RBAC, and policy-as-code admission control. Grounded in the CIS Kubernetes Benchmark and Pod Security Standards; defensive throughout. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Build minimal, scanned, and signed images with a verifiable supply chain.
Harden cluster configuration to the CIS Benchmark and Pod Security Standards.
Enforce default-deny network policy and least-privilege RBAC.
Add runtime protection and policy-as-code admission control for secrets and pods.

Price:৳8,000