From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Detecting and mitigating security vulnerabilities

Detecting and mitigating security vulnerabilities - Kubernetes Tutorial

From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep

Detecting and mitigating security vulnerabilities

- In this scenario, we are going to be looking at security tools that we can use to be able to detect different vulnerabilities and container images as well as all the different components that we have within our Kubernetes clusters. So the goal here is to be able to leverage those tools and to make changes, which is probably what you're going to see on the CKS exam. First task, we're going to use Kube-bench. Kube-bench is going to allow us to be able to analyze the CIS benchmarks and make sure that we're within compliance. It'll also show you all the various findings that were uncovered and give you recommendations on how to fix them. And this particular task is wanting us to be able to fix any profiling security issues on the control-plane. You also need to be able to use Kubesec to be able to identify yaml deployment security issues. There'll be a number of different yaml files that we'll have access to. We've got to run Kubesec on them to be able to determine what issues there…

Contents