null Mumbai Puliya 20 July 2019 null Mumbai Puliya 20 July 2019 Securely deploying containers in docker part-2 and Understanding Kubernetes Register

n|u Puliya, really short courses for skill bridging.

Puliya means culvert or a small bridge in Hindi.

We have been getting constant feedback about our null Humla and null Bachaav sessions. The feedback is both ways and almost all the champions are of the opinion that there are some essential non-security skills that are sorely lacking in a lot of attendees.

To "bridge" this gap in skills of our members attending the sessions we are starting null Puliya. The idea is to bridge the skill gap and get our members ready to take on advanced topics covered in null Humla and null Bachaav.

Proposed sessions for this event:

• securely deploying containers in docker part-2 by Mihir Shah
• Understanding Kubernetes by Mihir Shah

Securely deploying containers in docker part-2 (Note: Continuation of the last session, we will not be covering the basics of the container in this session)

1. Hack ElasticSearch Container
2. CGroups and namespaces
3. Scan Images for vulnerabilities
4. Intro to Seccomp
5. Restricting additional accesses by setting appropriate flags
6. User namespaces
7. Understanding AppArmour and generating profiles
8. Ignoring files from docker build
9. Access .ssh keys during docker build
10. Storing secrets in docker using Hashicorp as a service
11. Reading vault secrets from containers
12. Container security monitoring

Understanding Kubernetes
1. Launching a single node cluster
2. Launching multi-node cluster using Kubeadm
3. Deploying containers using Kubectl
4. Deploying containers using YAML
5. Deploying your own Guestbook
6. Networking in Kubernetes
7. Understanding Ingress routing
8. Kubernetes containerization health checks
9. Getting started with Kubeadm(CRI-O)
10. Running stateful services within Kubernetes
11. Using Kubernetes to manage passwords
12. Deploying docker-compose through kubernetes
13. Deploying into kubernetes directly through the source
14. Introduction to Weave and using it on Kubernetes
15. Going Serverless on Kubernetes

Pre-requisites for Docker Container session:
1. Docker installed on your host
2. Minimum of 4 GB RAM installed
3. Install docker-compose
4. The users should have admin access on the system
5. Participants are advised to bring Ubuntu as the host OS, just so that working gets preferably easy

Pre-requisites for the K8s session:
1. Docker engine installed
2. Virtual box
3. Kubectl - to be installed on a host
4. Minikube - to be installed on a host
5. Text editor
6. BYOI - this is required cuz we'll write and deploy dockerfiles OTG
7. Minimum 4 GB of RAM although 8 GB ram is
recommended
8. It is recommended to install the entire setup on Linux environment just to improve troubleshooting

Learning prerequisite: Basic understanding of docker
Also, for effective Ram utilisation, it is advised to install a distro using the least amount of RAM, although that's participants discretion.