Learning Kubernetes Security, 2nd Edition: A practical guide for secure and scalable containerized environments by Raul Lapaz ISBN 9781835886380, 1835886388 instant download

Learning Kubernetes Security, 2nd Edition: A practical guide for secure and scalable containerized environments by Raul Lapaz ISBN 9781835886380, 1835886388 instant download

Get practical, hands-on experience in Kubernetes security—from mastering the fundamentals to implementing advanced techniques to safeguard your Kubernetes deployments against malicious threats
 
Key Features
• Understand Kubernetes security fundamentals through real-world examples of threat actor tactics
• Navigate the complexities of securing container orchestration with practical, expert insights
• Deploy multiple Kubernetes components, plugins, and third-party tools to proactively defend against cyberattacks
 
With readily available services, support, and tools, Kubernetes has become a foundation for digital transformation and cloud-native development, but it brings significant security challenges such as breaches and supply chain attacks.
 
This updated edition equips you with defense strategies to protect your applications and infrastructure while understanding the attacker mindset, including tactics like container escapes and exploiting vulnerabilities to compromise clusters. The author distills his 25+ years of experience to guide you through Kubernetes components, architecture, and networking, addressing authentication, authorization, image scanning, resource monitoring, and traffic sniffing. You’ll implement security controls using third-party plugins (krew) and tools like Falco, Tetragon, and Cilium. You’ll also secure core components, such as the kube-apiserver, CoreDNS, and kubelet, while hardening images, managing security contexts, and applying PodSecurityPolicy. Through practical examples, the book teaches advanced techniques like redirecting traffic from misconfigured clusters to rogue pods and enhances your support incident response with effective cluster monitoring and log analysis.
 
By the end of the book, you'll have a solid grasp of container security as well as the skills to defend your clusters against evolving threats.
 
Who this book is for
This book is for DevOps and Platform teams managing Kubernetes environments…