วีดีโอ

Thank you kanishka

Sorry for late reply, good point, here something wrong with RBAC role, role binding permissions which i missed due to video legth not extended, need to grant necessary permissions to namespace, after that it will work as expected. Here my idea to show how the dedicated user will be created with K8s signer.

Thank you Bro

Thanks for watching and keep learning

In my channel there is video on Auto unseal using AWS KMS.... Check this video if it helps... if not let me know I will help you

Glad to hear that it's helpful. Keep learning and subscribe and like

Thanks for watching Meetali, pls subscribe

@@learnwithgvr this series is far far better than the paid training I am receiving these days from office.

Glad to hear that video is useful

There is documentation on vault IAM auth role, please go through and let me know if you have any questions support.hashicorp.com/hc/en-us/articles/19951252634387-How-to-Set-up-AWS-Auth-Method-Cross-Account-Access-with-Vault

@@learnwithgvr thanks for the reply bro. I will get back to you if I get stuck anywhere

Sure

It's already installed, you just need to use it

Thanks a lot, keep learning

Sure will make detailed video on eBPF

Thanks 👍

In this Playlist Pod Security Admission is available

Not many changes ..but will do

Yes possible, you need to setup on every deployment, should have min 2 pods. see below yaml. hope this helps ---------------------------------- apiVersion: gatekeeper.sh/v1beta1 kind: ConstraintTemplate metadata: name: minimum-pods spec: crd: name: minimumpods namespace: gatekeeper-system targets: - target: deployment parameters: - name: minPods type: integer ---------------------------------- apiVersion: gatekeeper.sh/v1beta1 kind: Constraint metadata: name: enforce-minimum-pods spec: template: name: minimum-pods parameters: - name: minPods value: 2

Thank you Sandeep

first find all using k api-resources, then is remove all Constraints, ConstraintTemplates

Not allowed bro...see here list of sites allowed during exam docs.linuxfoundation.org/tc-docs/certification/certification-resources-allowed#certified-kubernetes-administrator-cka-and-certified-kubernetes-application-developer-ckad-and-certified-kubernetes-security-specialist-cks

Thank you

Sorry seen latem pls refer kubebench GitHub repo or use yaml file installation to scan

Thanks Bro

it's iterm2

Yes, we can apply and it's highly recommended for enhanced security By applying PSS to the default service account, you can significantly improve the security posture of your Kubernetes cluster and protect your applications and data from unauthorized access and potential vulnerabilities

Thanks Bro

CKS new curriculum is applicable from Sept 12 onwards...so better plan before that. If not no issue there is slight change

Share your email

Yes. While installing Kubebench on every node can provide granular insights into the security posture of each individual node, it's not always necessary or practical Pros: it provides detailed security assesment of everynode, Can detect, identify and resolve security issues of the Nodes Cons: kube bench will consumer resources Managing and monitoring of kube bench is time consuming Collecting security data from every node can generate a large volume of information that may be difficult to analyze If it is a small cluster, it's a feasible to have a cube bench in the nodes If your organization requires security assessment completely on all the nodes then go for it Deploy Kubebench on a dedicated node or a management cluster to scan all nodes periodically is the better approach Hope this helps. Thanks for asking this question

Cheers

Thank you

thanks for suggestion. sure will do.

thanks for your input. sure will do soon

Thank you

Thank you Ravi Prakash. sure will try to creat videos on AWS interview questions

Thank you

My pleasure, keep learning

thanks for suggestion, cheers

yes pls check my playlists in the channel

Thanks bro for the feedback. It's iTerm2 terminal for Mac. Applied autosuggestion, syntax highlight and kubecolor on top it for kubectl colours

Great suggestion!, will do soon, thank you

Thanks, it's Audio-Technica ATR2100x-USB Cardioid Dynamic USB XLR Microphone

@@learnwithgvr Thank you

thank you

thank you

if do not specify it will consider defult namespace. if you want any specific namespace you can update your kubeconfig desired context namespace