Implementing multi-layer container and Kubernetes
security for DevSecOps Workshop

Tackling the security of containers and Kubernetes involves more than just the application layer. Security should be implemented at each level of the stack—the underlying host, container, orchestration, and application layers.

In this workshop, we will cover the comprehensive container and Kubernetes security capabilities available in Red Hat® OpenShift® and Red Hat Advanced Cluster Security (from StackRox acquisition).

You will gain experience with:

• Host OS (Red Hat CoreOS and Red Hat Enterprise Linux®) security technologies.
• Evaluating container content and sources for vulnerabilities.
• Designing the build and CI/CD pipeline to proactively check container content and ensure content governance across the application life cycle, including image policy management and enforcement, image scanning, and image signing.
• Certificate & secrets management.
• Implementing methods to control access to containers via authentication and authorization.
• Red Hat OpenShift Container Platform security technologies, including Security Context Constraints (SCC), role-based access control (RBAC), and network security with network policies
• Logging, monitoring, and auditing.