Kubernetes Security
The overall practice of securing Kubernetes clusters and the workloads they run, spanning the cluster control plane, RBAC, network policy, workload configuration, secrets, and runtime, since Kubernetes' power and complexity create broad attack surface.
Concept Neighborhood
Explore this concept’s connections in the groups below.
Start here
Admission Controllers
A related concept to explore, covered by 7 lessons.
Admission ControllersStart here
7
lessons
Mutating Webhooks
7
lessons
Network Policies Production
7
lessons
OPA Gatekeeper
7
lessons
Pod Security Standards Production
7
lessons
Production Kubernetes
7
lessons
Show 17 more connections
Container Security Lifecycle
6
lessons
Instance Identity and Metadata Protection
6
lessons
Kubernetes Control Plane Boundary
6
lessons
Kubernetes Network Isolation
6
lessons
Kubernetes Privilege Path Review
6
lessons
Kubernetes Secret Exposure Path
6
lessons
Microsoft Entra Incident Investigation
6
lessons
Non-Root Container Execution
6
lessons
Managed Compute Response Boundary
4
lessons
Kubernetes RBAC
3
lessons
Kubernetes Security Domains
3
lessons
Network Policies (K8s)
3
lessons
Pod Security Standards
3
lessons
Secrets in Kubernetes
3
lessons
Container Security
2
lessons
Kubernetes Detection
1
lesson
Kubernetes-Specific Attacks
1
lesson
Related Lessons
2 lessons cover this conceptSecure Cloud Workload Lifecycles
General Beginner
Workload Protection: VMs, Containers, and Serverless
Cloud Security Engineer
Sign in to open lesson content directly.