SCHEDULE.md

Class time 8am -> 5pm. 7.5 hours

This time is based on last years' time. This could change but some assumptions have been made.

• 8am -> 9am

  • Welcome, Expectations, Connectivity and environment setup.

• 9am -> 10am (With 15 min break) (containers)

  • Exercise_1 - lets deploy our first workload
  • Discussion - Linux kernel, namespaces, etc.
  • Exercise_2 - docker-compose (Builder)- Why is it important to work with containers as opposed to running local?
  • Exercise_3 - docker-compose (Breaker)- Here's what you can do in an improperly configured Dev. Env.
  • Exercise_4 - docker-compose (Defender) - How to secure your Dev. Environment.

• 10am -> 11am

  • Exercise_5 - Image packaging, scanning and storage.
  • Exercise_6 - managing attack surface
  • Exercise_7 - k8s infrastructure basics: apiserver, dns, resource types, etc.
  • Exercise_8 - common tools and commands
  • Discussion - common environments and their differences (bare metal, GKE, EKS, AKS)

• 12pm -> 1pm Lunch

• 1pm -> 2pm

  • Exercise_09 - Let's deploy our second workload
  • Exercise_10 - Scaling workloads
  • Exercise_11 - Cluster key infrastructure
  • Exercise_12 - PKI, a better way
  • Exercise_13 - Cluster authentication
  • Exercise_14 - Attacking Cluster authentication

• 2pm -> 3pm

  • Exercise_15 - Ingress
  • Exercise_16 - Ingress Defense
  • Exercise_17 - East / West
  • Exercise_18 - Attacking Cluster networking
  • Exercise_19 - Defending Cluster networking

• 3pm -> 4pm (With 15 min break)

  • Exercise_20 - How do secrets work
  • Discussion - Common tools and tech used for secrets.
  • Exercise_21 - Attacking secret storage
  • Exercise_22 - Creative secret integration

• 4pm -> 5pm

  • Exercise_23 - Kubectl plugins
  • Exercise_24 - Custom resource definitions
  • Exercise_25 - Pod Security policies
  • Exercise_26 - Attacking Pod Security policies