|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/google-kubernetes-engine-security-on-gcp/
课程评论：没有评论
这门课程“Google Kubernetes Engine Security on Google Cloud Platform”旨在帮助学习者深入理解Kubernetes的安全机制，并特别关注如何在Google Cloud Platform（GCP）上使用Google Kubernetes Engine（GKE）进行安全实践。 课程内容涵盖了Kubernetes的基础架构和核心组件，包括集群组件、控制平面（Master Node）如Kubernetes Scheduler和Controller Manager。学习者将通过实际操作实验室，学习如何在GKE上设置Kubernetes集群。 安全部分是课程的重点，详细介绍了Kubernetes中的基于角色的访问控制（RBAC）策略。课程讲解了RBAC的关键组件，RBAC的工作原理，以及`Role`和`RoleBinding`如何协同工作来定义和授予权限。学习者将动手创建`Role`，并将`Role`绑定到用户或服务账号，并在Minikube集群上测试RBAC权限。 此外，课程还深入探讨了网络策略，解释了限制Pod间通信的重要性，并介绍了Kubernetes网络策略和CNI插件。通过实验，学习者将学会使用网络策略来限制Pod之间的通信，并保护Pod免受不必要的网络访问。 课程还涵盖了使用MobaXterm或PuTTY等工具进行虚拟机远程安全连接的实践，以及在虚拟机上部署和管理Minikube集群。 在Securing Nginx on Kubernetes部分，课程教授如何通过HTTPS保护Nginx的部署和访问，包括创建TLS证书、将其存储为Secret，并配置Ingress资源来实现HTTPS访问。 总而言之，本课程为学习者提供了一个全面的Kubernetes安全实践指南，尤其是在GCP环境下的GKE使用，通过理论讲解和大量的实践操作，帮助学习者掌握保护Kubernetes集群的关键技能。
Understanding Kubernetes: Cluster Components and ArchitectureIntroductionThe Kubernetes Cluster ArchitectureLearn Architecture Through ExamplesGetting Started with KubernetesControl Plane Components in Kubernetes (Master Node)Kubernetes Scheduler: A Key Control Plane ComponentKubernetes Controller ManagerSet Up a K8s Cluster on Google Kubernetes Engine (GKE)Lab 1: Practical Kubernetes Cluster SetupLab 2: Practical Kubernetes Cluster SetupLab 3: Practical Kubernetes Cluster SetupLab 4: Practical Kubernetes Cluster SetupRBAC Policies for Securing Kubernetes ClusterIntroductionKey components of RBACHow RBAC works?How Role and RoleBinding Work TogetherKubernetes Roles: Defining Permissions and AccessPermissions Granted by Kubernetes RolesCreate a roleBind the Role to a User or Service AccountSet Up a Minikube Kubernetes Cluster on Google CloudProject OverviewLaunch VM for Minikube ClusterActivate Cloud Shell and Connect to VMMinikube Kubernetes Cluster Setup - Practical Lab 1Minikube Kubernetes Cluster Setup - Practical Lab 2Minikube Kubernetes Cluster Setup - Practical Lab 3Start Minikube and Deploy Nginx PodClient Authentication using SSL/TLS CertificateSet Up New Namespace & Launch PodOverview of Client Certificate GenerationGenerate a Private KeyGenerate a Certificate Signing Request (CSR)Sign a CSR with Minikube's CA to Generate a User CertificateSet and Verify Client Credentials in Kubernetes ConfigRBAC: Role and RoleBindingCreate a RoleCreate RoleBinding to Assign Role to UserTest RBAC PermissionsAccess the K8s Minikube Cluster as a UserList and Manage Kubernetes ContextsSet Up a New Context for a UserVerify RBAC Permissions with New ContextModify and Test RBAC Role PermissionsSet Up and Verify Network Policies for PodsIntroduction to Kubernetes Network PoliciesWhy Restrict Pod-To-Pod Communication?Understanding K8s Network Policies and CNI PluginsExample Use Case ScenariosLab: Restrict Pod Communication Using Network PoliciesStart Minikube with Cilium CNICreate Two Pods with LabelsVerify Pod Connectivity Using CurlCreate Ingress Network Policy to Restrict Pod AccessCheck if Pod-to-Pod Access is BlockedRestrict Ingress/Egress Traffic with Network PolicyVM Remote Access: Using MobaXterm or PuTTY for Secure ConnectionsDeploy a Virtual MachineAdd User and Setup SSH AuthenticationCreate SSH Key PairConvert Private Key to.ppk FormatVM Access TroubleshootingDeploy Minikube on Virtual MachineInitialize Minikube ClusterSecure Deployment and Access of Nginx on KubernetesOverview of Securing Nginx with HTTPSDeploy and Expose a Nginx Pod to External TrafficAccess Nginx Web Server Through HTTPSet Up Nginx on Host Machine for Accessing Nginx PodAccess Nginx Web Server via Web Browser (HTTP Only)Implement HTTPS for Nginx in a K8s Cluster Using TLS CertificatesDeploy and Expose a Nginx Pod to External TrafficGenerate a self-signed TLS CertificateStore the TLS Certificate as a SecretCheck Minikube's Ingress Controller StatusCreate Ingress Resource for HTTPSLast Lecture
