From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Securing Kubernetes API access

Securing Kubernetes API access

- In this scenario, which is our first scenario, we're going to take a look at implementing security controls so that we can restrict API access. Now this is something we spent quite a bit of time throughout the lessons, but this one is one that you're guaranteed to see some variation of this. There's a lot of RBAC that's going to be on your exam. Now as far as being able to set it up so that we can define those policies and then ultimately secure the API server, now in this, you're going to have a number of tasks. The first one is, is we want to create a role and a role binding that'll allow you to be able to have a specific user, or allows a user to be able to view a resource in a specific namespace only. So it's going to be a a very restrictive binding that we'll have, there. And then we want to be able to disable anonymous access to the Kubernetes API. We're going to modify the API server flags. We're going to make sure that that is configured appropriately. And then we're going…

Contents