Différences
Ci-dessous, les différences entre deux révisions de la page.
elearning:workbooks:kubernetes_en:k8s07 [2025/01/17 16:05] – created admin | elearning:workbooks:kubernetes_en:k8s07 [2025/01/17 16:09] (Version actuelle) – admin | ||
---|---|---|---|
Ligne 14: | Ligne 14: | ||
* LAB #1 - Role Based Access Control and TLS Certificates | * LAB #1 - Role Based Access Control and TLS Certificates | ||
* 1.1 - Overview | * 1.1 - Overview | ||
- | * 1.2 - The / | + | * 1.2 - The / |
* 1.3 - Creating a serviceAccount | * 1.3 - Creating a serviceAccount | ||
- | * 1.4 - User creation | + | * 1.4 - Creating a User |
- | * 1.5 - TLS certificates | + | * 1.5 - TLS Certificates |
- | * LAB #2 - Implementing security at Pod level | + | * LAB #2 - Pod Security Implementation |
* 2.1 - Overview | * 2.1 - Overview | ||
* 2.2 - Kubernetes Security Context | * 2.2 - Kubernetes Security Context | ||
- | * ReadOnlyRootFilesystem | ||
- | * drop | ||
* 2.3 - Kubernetes Network Policies | * 2.3 - Kubernetes Network Policies | ||
* 2.4 - Kubernetes Resource Allocation Management | * 2.4 - Kubernetes Resource Allocation Management | ||
Ligne 28: | Ligne 26: | ||
=====LAB #1 - Role Based Access Control and TLS Certificates===== | =====LAB #1 - Role Based Access Control and TLS Certificates===== | ||
- | ====001.1 - Overview==== | + | ====1.1 - Overview==== |
A Kubernetes object is either linked to a Namespace or not linked to a Namespace. | A Kubernetes object is either linked to a Namespace or not linked to a Namespace. | ||
Ligne 373: | Ligne 371: | ||
</ | </ | ||
- | ====1.4 - Creating a user==== | + | ====1.4 - Creating a User==== |
Users are part of the configuration context that defines the cluster name and the namespace name: | Users are part of the configuration context that defines the cluster name and the namespace name: | ||
Ligne 632: | Ligne 630: | ||
</ | </ | ||
- | ====1.5 - TLS certificates==== | + | ====1.5 - TLS Certificates==== |
By default, communication between kubectl and the Kubernetes API is encrypted. Certificates are located in the **/ | By default, communication between kubectl and the Kubernetes API is encrypted. Certificates are located in the **/ |