Packt

Cloud Computing

HashiCorp Vault

This comprehensive course on HashiCorp Vault will make you an expert in deploying, configuring, and managing all key Vault services. It covers all objectives for passing the HashiCorp Certified: Vault Associate certification exam. Learn the latest HashiCorp concepts and master the core components to become a HashiCorp Vault expert.

HashiCorp Certified - Vault Associate Course

General Admission

Cryptography

This comprehensive course covers 100% of the HashiCorp Vault Operations Professional exam content through engaging lectures, demos, and hands-on exercises. With access to our exclusive hands-on labs, you can practice configuring Vault in real-world scenarios. This course covers both Vault Open-Source and Vault Enterprise features and includes an exam-like quiz for each exam objective.

Becoming a Certified Vault Operations Professional - A Complete Guide

The course will provide a comprehensive overview of Consul and its capabilities, including deploying a single data center, registering services using service discovery, and accessing Consul Key/Value (KV). It is designed for individuals who possess basic terminal skills and have an understanding of application and data center/cloud networking architectures for running applications.

HashiCorp Certified - Consul Associate Course

HashiCorp Packer

Haskell

This is a comprehensive course for using HashiCorp Packer in your organization. The course teaches you about using HCL2 to create your Packer templates, the new standard moving forward. Explore the core HashiCorp Packer components and access hands-on labs you can perform in your environment.

Automating Image Creation with HashiCorp Packer for DevOps

Nomad

Learn to operate Nomad to deploy and manage applications and services across multiple environments, including on-premises, cloud, and hybrid. Learn from the expert who will guide you through lectures, demonstrations, and real-world scenarios, giving you the skills and knowledge you need to succeed with Nomad HashiCorp skillsets.

Getting Started with HashiCorp Nomad

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>Security Professionals working with Kubernetes Clusters<br />Container Orchestration Engineers<br />DevOps Professionals</p>Overview<p>In this course, students will learn and practice essential Kubernetes concepts and tasks in the following sections:<br />Cloud Security Fundamentals<br />Cluster Hardening<br />System Hardening<br />Minimize Microservice Vulnerabilities<br />Supply Chain Security<br />Disaster Recovery<br />Secure Back-up and Restore</p><p>This class prepares students for the Certified Kubernetes Security Specialist (CKS) exam. Kubernetes is a Cloud Orchestration Platform providing reliability, replication, and stabilitywhile maximizing resource utilization for applications and services. By the conclusion of this hands-on, vendor agnostic training you will be equipped with a thorough understanding ofcloud security fundamentals, along with the knowledge, skills and abilities to secure a Kubernetes cluster, detect threats, and properly resolve a security catastrophe. This courseincludes hands-on instruction which develops skills and knowledge for securing container-based applications and Kubernetes platforms, during build, deployment, and runtime. We prioritizecovering all objectives and concepts necessary for passing the Certified Kubernetes Security Specialist (CKS) exam. You will be provided the components necessary to assemble your ownhigh availability Kubernetes environment and harden it for your security needs.</p></div><div id="course-pills-2"><h4>Learning Your Environment</h4><ul><li>Underlying Infrastructure</li><li>Using Vim</li><li>Tmux</li></ul><h4>Cloud Security Primer</h4><ul><li>Basic Principles</li><li>Threat Analysis</li><li>Approach</li><li>CIS Benchmarks</li></ul><h4>Securing your Kubernetes Cluster</h4><ul><li>Kubernetes Architecture</li><li>Pods and the Control Plane</li><li>Kubernetes Security Concepts</li></ul><h4>Install Kubernetes using kubeadm</h4><ul><li>Configure Network Plugin Requirements</li><li>Kubeadm Basic Cluster</li><li>Installing Kubeadm</li><li>Join Node to Cluster</li><li>Kubeadm Token</li><li>Manage Kubeadm Tokens</li><li>Kubeadm Cluster Upgrade</li></ul><h4>Securing the kube-apiserver</h4><ul><li>Configuring the kube-apiserver</li><li>Enable Audit Logging</li><li>Falco</li><li>Deploy Falco to Monitor System Calls</li><li>Enable Pod Security Policies</li><li>Encrypt Data at Rest</li><li>Encryption Configuration</li><li>Benchmark Cluster with Kube-Bench</li><li>Kube-Bench</li></ul><h4>Securing ETCD</h4><ul><li>ETCD Isolation</li><li>ETCD Disaster Recovery</li><li>ETCD Snapshot and Restore</li></ul><h4>Purge Kubernetes</h4><ul><li>Purge Kubeadm</li><li>3Purge Kubeadm</li></ul><h4>Image Scanning</h4><ul><li>Container Essentials</li><li>Secure Containers</li><li>Creating a Docker Image</li><li>Scanning with Trivy</li><li>Trivy</li><li>Snyk Security</li></ul><h4>Manually Installing Kubernetes</h4><ul><li>Kubernetes the Alta3 Way</li><li>Deploy Kubernetes the Alta3 Way</li><li>Validate your Kubernetes Installation</li><li>Sonobuoy K8s Validation Test</li></ul><h4>Kubectl (Optional)</h4><ul><li>Kubectl get and sorting</li><li>kubectl get</li><li>kubectl describe</li></ul><h4>Labels (Optional)</h4><ul><li>Labels</li><li>Labels and Selectors</li><li>Annotations</li><li>Insert an Annotation</li></ul><h4>Securing your Application</h4><ul><li>Scan a Running Container</li><li>Tracee</li><li>Security Contexts for Pods</li><li>Understanding Security Contexts</li><li>AppArmor Profiles</li><li>AppArmor</li><li>Isolate Container Kernels</li><li>gVisor</li></ul><h4>Pod Security</h4><ul><li>Pod Security Policies</li><li>Deploy a PSP</li><li>Pod Security Standards</li><li>Enable PSS</li></ul><h4>Open Policy Agent (OPA)</h4><ul><li>Admission Controller</li><li>Create a LimitRange</li><li>Open Policy Agent</li><li>Policy as Code</li><li>Deploy Gatekeeper</li></ul><h4>User Administration</h4><ul><li>Contexts</li><li>Contexts</li><li>Authentication and Authorization</li><li>Role Based Access Control</li><li>Role Based Access Control</li><li>RBAC Distributing Access</li><li>Service Accounts</li><li>Limit Pod Service Accounts</li></ul><h4>Securing Secrets</h4><ul><li>Secrets</li><li>Create and Consume Secrets</li><li>Hashicorp Vault</li><li>Deploy Vault</li></ul><h4>Securing the Network</h4><ul><li>Networking Plugins</li><li>NetworkPolicy</li><li>Deploy a NetworkPolicy</li><li>mTLS</li><li>Linkerd</li><li>mTLS with istio</li><li>istio</li></ul><h4>Threat Detection</h4><ul><li>Active Threat Analysis</li><li>Host Intrusion Detection</li><li>Deploy OSSEC</li><li>Network Intrusion Detection</li><li>Deploy Suricata</li><li>Physical Intrusion Detection</li></ul><h4>Disaster Recovery</h4><ul><li>Harsh Reality of Security</li><li>Deploy a Response Plan</li><li>Kasten K10 Backups</li><li>Deploy K10</li></ul></div>

Nexus Human

Basic Security Training (BST)

Certified in Cybersecurity (CC)

Kubernetes

Certified Cloud Security Professional (CCSP)

AWS Certified Cloud Practitioner

CompTIA Security+

Certified Kubernetes Security Specialist (CKS)

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>Anyone who plans to work with Kubernetes at any level or tier of involvement<br />Any company or individual who wants to advance their knowledge of the cloud environment<br />Application Developers<br />Operations Developers<br />IT Directors/Managers</p>Overview<p>All topics required by the CKAD exam, including:<br />Deploy applications to a Kubernetes cluster<br />Pods, ReplicaSets, Deployments, DaemonSets<br />Self-healing and observable applications<br />Multi-container Pod Design<br />Application configuration via Configmaps, Secrets<br />Administrate cluster use for your team<br />A systematic understanding of Kubernetes architecture<br />Troubleshooting and debugging tools<br />Kubernetes networking and services</p><p>Kubernetes is a Cloud Orchestration Platform providing reliability, replication, and stability while maximizing resource utilization for applications and services. By the conclusion of this hands-on training, you will go back to work with all necessary commands and practical skills to empower your team to succeed, as well as gain knowledge of important concepts like Kubernetes architecture and container orchestration. We prioritize covering all objectives and concepts necessary for passing the Certified Kubernetes Application Developer (CKAD) exam. You will command and configure a high availability Kubernetes environment (and later, build your own!) capable of demonstrating all ?K8s'' features discussed and demonstrated in this course. Your week of intensive, hands-on training will conclude with a mock CKAD exam that matches the real thing.</p></div><div id="course-pills-2"><h4>Kubernetes Architecture</h4><ul><li>Components</li><li>Understand API deprecations</li><li>Containers</li><li>Define, build and modify container images</li><li>Pods</li><li>Master Services</li><li>Node Services</li><li>K8s Services</li><li>YAML Essentials</li><li>Creating a K8s Cluster</li></ul><h4>kubectl Commands</h4><ul><li>Kubernetes Resources</li><li>Kubernetes Namespace</li><li>Kubernetes Contexts</li></ul><h4>Pods</h4><ul><li>What is a Pod?</li><li>Create, List, Delete Pods</li><li>How to Access Running Pods</li><li>Kubernetes Resources</li><li>Managing Cloud Resource Consumption</li><li>Multi-Container Pod Design</li><li>Security Contexts</li><li>Init Containers</li><li>Understand multi-container Pod design patterns (e.g. sidecar, init and others)</li><li>Pod Wellness Tracking</li></ul><h4>Networking</h4><ul><li>Packet Forwarding</li><li>ClusterIP and NodePort Services</li><li>Provide and troubleshoot access to applications via services</li><li>Ingress Controllers</li><li>Use Ingress rules to expose applications</li><li>NetworkPolicy resource</li><li>Demonstrate basic understanding of NetworkPolicies</li><li>Network Plugins</li><li>Defining the Service Mesh</li><li>Service mesh configuration examples</li></ul><h4>ReplicaSets</h4><ul><li>Services</li><li>ReplicaSet Function</li><li>Deploying ReplicaSets</li></ul><h4>Deployments</h4><ul><li>Deployment Object</li><li>Updating/Rolling Back Deployments</li><li>Understand Deployments and how to perform rolling updates</li><li>Deployment Strategies</li><li>Use Kubernetes primitives to implement common deployment strategies (e.g. blue/green or canary)</li><li>Scaling ReplicaSets</li><li>Autoscaling</li></ul><h4>Labels and Annotations</h4><ul><li>Labels</li><li>Annotations</li><li>Node Taints and Tolerations</li></ul><h4>Jobs</h4><ul><li>The K8s Job and CronJob</li><li>Understand Jobs and CronJobs</li><li>Immediate vs. scheduled internal use</li></ul><h4>Application Configuration</h4><ul><li>Understanding and defining resource requirements, limits and quotas</li><li>Config Maps</li><li>Create &amp; consume Secrets</li><li>Patching</li><li>Custom Resource Definition</li><li>Discover and use resources that extend Kubernetes (CRD)</li><li>Managing ConfigMaps and Secrets as Volumes</li></ul><h4>Storage</h4><ul><li>Static and dynamic persistent volumes via StorageClass</li><li>K8s volume configuration</li><li>Utilize persistent and ephemeral volumes</li><li>Adding persistent storage to containers via persistent volume claims</li></ul><h4>Introduction to Helm</h4><ul><li>Helm Introduction</li><li>Charts</li><li>Use the Helm package manager to deploy existing packages</li></ul><h4>Application Security</h4><ul><li>Understand authentication, authorization and admission control</li><li>Understand ServiceAccounts</li><li>Understand SecurityContexts</li></ul><h4>Application Observability and Maintenance</h4><ul><li>Use provided tools to monitor Kubernetes applications</li><li>How to Troubleshoot Kubernetes</li><li>Basic and Advanced Logging Techniques</li><li>Utilize container logs</li><li>Accessing containers with Port-Forward</li><li>Debugging in Kubernetes</li></ul><h4>Hands on Labs:</h4><ul><li>Define, build and modify container images</li><li>Deploy Kubernetes using Ansible</li><li>Isolating Resources with Kubernetes Namespaces</li><li>Cluster Access with Kubernetes Context</li><li>Listing Resources with kubectl get</li><li>Examining Resources with kubectl describe</li><li>Create and Configure Basic Pods</li><li>Debugging via kubectl port-forward</li><li>Imperative vs. Declarative Resource Creation</li><li>Performing Commands inside a Pod</li><li>Understanding Labels and Selectors</li><li>Insert an Annotation</li><li>Create and Configure a ReplicaSet</li><li>Writing a Deployment Manifest</li><li>Perform rolling updates and rollbacks with Deployments</li><li>Horizontal Scaling with kubectl scale</li><li>Implement probes and health checks</li><li>Understanding and defining resource requirements, limits and quotas</li><li>Understand Jobs and CronJobs</li><li>Best Practices for Container Customization</li><li>Persistent Configuration with ConfigMaps</li><li>Create and Consume Secrets</li><li>Understand the Init container multi-container Pod design pattern</li><li>Using PersistentVolumeClaims for Storage</li><li>Dynamically Provision PersistentVolumes with NFS</li><li>Deploy a NetworkPolicy</li><li>Provide and troubleshoot access to applications via services</li><li>Use Ingress rules to expose applications</li><li>Understand the Sidecar multi-container Pod design pattern</li><li>Setting up a single tier service mesh</li><li>Tainted Nodes and Tolerations</li><li>Use the Helm package manager to deploy existing packages</li><li>A Completed Project</li><li>Install Jenkins Using Helm and Run a Demo Job</li><li>Custom Resource Definitions (CRDs)</li><li>Patching</li><li>Understanding Security Contexts for Cluster Access Control</li><li>Utilize container logs</li><li>Advanced Logging Techniques</li><li>Troubleshooting</li><li>Calicoctl</li><li>Deploy a Kubernetes Cluster using Kubeadm</li><li>Monitoring Applications in Kubernetes</li><li>Resource-Based Autoscaling</li><li>Create ServiceAccounts for use with the Kubernetes Dashboard</li><li>Saving Your Progress With GitHub</li><li>CKAD Practice Drill</li><li>Alta Kubernetes Course Specific Updates</li><li>Sourcing Secrets from HashiCorp Vault</li><li>Example CKAD Test Questions</li></ul></div>

HashiCorp Vault courses in Leeds

Online Options

HashiCorp Certified - Vault Associate Course

By Packt

Becoming a Certified Vault Operations Professional - A Complete Guide

By Packt

HashiCorp Certified - Consul Associate Course

By Packt

Automating Image Creation with HashiCorp Packer for DevOps

By Packt

Getting Started with HashiCorp Nomad

By Packt

Certified Kubernetes Security Specialist (CKS)

By Nexus Human

Kubernetes Bootcamp (CKAD)

By Nexus Human

Search By Location