This module introduces learners to the Open Policy Agent (OPA) and its integration with Kubernetes for advanced security policy enforcement. You will explore writing, testing, and debugging policies using the Rego language, as well as building dynamic and reusable policy frameworks. Alternatives to Rego-based policies and practical deployment strategies are also discussed.

This module explores advanced node security in Kubernetes, focusing on preventing container breakouts, designing secure containers, and leveraging Gatekeeper for policy enforcement. Learners will examine vulnerability scanning, compare policy mechanisms, and address challenges in multi-tenant environments. Practical debugging and authorization strategies are also covered to strengthen cluster security.

This module introduces the fundamentals of securing Kubernetes clusters at runtime using KubeArmor. Learners will explore multi-tenancy security, real-time policy logging, and practical tools for managing and monitoring cluster security. By the end, participants will be able to implement and troubleshoot KubeArmor in multi-tenant environments.

This module guides learners through the essentials of backing up and restoring Kubernetes workloads using Velero. You will explore setup, configuration, and management of Velero, including backing up persistent volumes, scheduling backups, and restoring data to the same or a new cluster. By the end, you'll be equipped to ensure data resilience and disaster recovery in Kubernetes environments.

This module guides learners through monitoring Kubernetes clusters and workloads using tools like Prometheus, Alertmanager, Grafana, and OpenSearch. You will explore how to collect, visualize, and secure metrics and logs, as well as set up effective alerting and access controls. By the end, you'll be able to ensure cluster health and respond proactively to operational issues.

This module introduces learners to Istio, a service mesh for Kubernetes, focusing on its core concepts, security features, and resource management. You will explore how Istio manages traffic, enforces security policies, and provides observability through tools like Kiali. Practical examples and guided walkthroughs will help you understand and apply Istio's capabilities in real-world Kubernetes environments.

This module explores how to design, build, and deploy applications within an Istio service mesh, focusing on both monolithic and microservices architectures. Learners will gain hands-on experience configuring authentication, authorization, and secure service-to-service communication using Istio features. Practical scenarios such as sticky sessions, JWT enforcement, and advanced authorization rules are covered to enhance application security and scalability.

This module guides learners through the process of deploying applications on a multitenant Kubernetes platform, focusing on secure pipeline integration, technology stack selection, and platform architecture design. Learners will explore best practices for automating tenant onboarding, managing image registries, and implementing a GitOps workflow. By the end, participants will be equipped to design and provision scalable, secure multitenant environments.

This module guides learners through the process of setting up an internal developer portal, including customizing Kubernetes nodes, deploying infrastructure as code with Pulumi, and integrating essential DevOps tools like Vault and GitLab. Learners will also explore GitOps bootstrapping, tenant onboarding, and application deployment workflows. By the end, participants will understand how to promote applications from development to production in a secure, automated environment.