Adarsh Shah Twitter:
@shahadarsh
Website:
http://shahadarsh.com
1.
Introduction
Prerequisites
Instructor
Introduction
Agenda
2.
Containers
History
Beginning
Hypervisor
Containers
Layers
Primitives
Network
Docker Network options
Docker0
Docker0 Diagram
Storage
Layers
Volumes
Storage
Volume CLI
Docker Intro
Benefits of Docker
Docker Platform
Dockerfile
CLI
Docker Exercise
3.
Kubernetes
History
Community
Graduated Projects
Incubating Projects
Involvement
Architecture
Master
Node
Data Flow
High Availability Cluster
High Availability Cluster
Running
Amazon EKS
Connecting to Cluster
Microservices exercise
Objects
Pods
Pod Exercises
Labels and Selectors
Resource Quotas
Resource Quotas
Namespaces
Exercises
Controllers
Controllers Updates
Controllers Exercises
Storage
Volumes
Persistent Volume
Persistent Volume Claims
Storage Classes
Exercises
Secrets
Secrets Uses - Secret
Secrets Uses - File
Secrets Uses - Env Var
Configmaps
Configmaps
Configmaps - Volume
Configmaps - Env Var
Exercises
Services
Service Diagram
Exercises
Healthchecks
Liveliness
Readiness
Exercises
Daemonsets
Networking
Container to Container
Pod to Pod (Same Node)
Pod to Pod (Different Nodes)
Pod to Service
Kubernetes DNS
Pod to Internet (Egress)
Internet to Service (Ingress)
Load Balancer
Ingress Controller
Data Flow
Extras
Monitoring
Logging
Logging - Pod
Logging at node level
Logging - Cluster
Logging - Cluster
Logging - Cluster
Security - Containers
Security - K8
Cleanup
4.
Closing
Introduction to Kubernetes
>
Kubernetes
>
Extras
> Security - Containers
Container security primitives
Container Pipeline
Security - Containers
Container security primitives
SElinux
AppArmor
Seccomp
https://docs.docker.com/engine/security/seccomp/#run-without-the-default-seccomp-profile
Container Pipeline
Establish a pipeline to build a standard image
Have a versioning policy
Allow to only run images based of the standard image
Use the same OS as the host
Keep the image small
Use a private registry
Don’t embed secrets into images, use Hashicorp Vault
https://www.cisecurity.org/benchmark/docker/
https://github.com/docker/docker-bench-security