Kubernetes and Infrastructure-as-Code Security Lab

Learning path

Move from insecure defaults to enforced policy

Tutorial modules

Completion evidence

Scan the baseline Observe policy rejection Reach posture score 90+ Pass Restricted admission Add a NetworkPolicy Complete a knowledge check Export review evidence

Terminal shortcuts

Infrastructure security workbench

Select a scenario, policy profile, and file

Not applied

Training scenario

Admission profile

Open file

Posture score

weighted configuration checks

Violations

current files

Admission

selected policy profile

Network exposure

service and policy model

deployment.yaml

Edit Kubernetes or Terraform code and rerun the scanners

Policy analysis

Modeled IaC scan and admission findings

Scan the current scenario to generate policy findings.

Simulated cluster topology

Exposure and communication paths change with Service and NetworkPolicy settings

Cluster empty

Solid path: allowedDashed path: blocked or not exposed

Kubernetes and IaC terminal

Simulated kubectl, scanner, policy, and Terraform commands

student@iac-lab