Aperçu du cours

Introduction

SafeTech Corp, a leading cybersecurity firm, is enhancing its Kubernetes security practices by implementing advanced container security measures. As a senior security engineer, you are tasked with deploying a Kubernetes cluster, configuring AppArmor profiles, and ensuring the security of critical applications. This lab will guide you through deploying a Kubernetes cluster, installing AppArmor, and enforcing security profiles to prevent unauthorized disk writes and access to sensitive data.

Objectives

Successfully complete this lab by achieving the following learning objectives:

1. Deploy a Kubernetes cluster using Vagrant and VirtualBox.
2. Install and configure AppArmor on control plane and worker nodes.
3. Load and enforce AppArmor profiles on both control plane and worker nodes.
4. Apply AppArmor profiles to specific Pods to restrict disk writes and access to sensitive files.
5. Verify the security enforcement and troubleshoot potential issues.

Prerequisites

Before starting this lab, ensure you meet the following prerequisites:

1. Kubernetes Knowledge:
   • Understanding of Kubernetes concepts such as Pods, namespaces, and manifests.
   • Ability to navigate the Kubernetes command-line interface (kubectl).
2. System Administration Skills:
   • Basic command-line skills.
   • Familiarity with Linux security modules like AppArmor.
3. Required Access and Configurations:
   • A local or remote environment to deploy a Kubernetes cluster.
   • Access to multiple Linux machines or virtual machines to set up the cluster.

Required Materials and Software

1. Computer with Stable Internet Access:
   • You will need a computer with stable internet access to download necessary packages and interact with the Kubernetes cluster.
2. Access to Linux Machines:
   • Ensure you have access to at least two Linux machines or virtual machines (one control plane and one worker node).
3. Vagrant and VirtualBox:
   • Ensure Vagrant and VirtualBox are installed and configured on your local machine to create virtual machines for the lab.