mosiur/CKS-Lessons
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

completed upto lab 38

Browse Source
This commit is contained in:
Mosiur Rahman
2026-08-27 14:03:17 +06:00
parent d74b79cfc6
commit ac6292db20
19 changed files with 220 additions and 204 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
learning-records/0011-etcd-transport-and-metrics-hardening.md Normal file
View File

@@ -0,0 +1,7 @@
# etcd transport and metrics hardening
The learner independently remediated an etcd static manifest to require client and peer certificates, disable automatic TLS, eliminate HTTP client exposure, and bind metrics to loopback while preserving the existing CA and certificate paths. This establishes a reliable baseline for the next CIS drill: reconciling kubelet configuration with its effective process.
## Evidence
`lab/lesson-37-verify.sh /tmp/lesson-37-etcd.yaml` reported every required control as PASS on 2026-08-27.

7
learning-records/0012-kubelet-effective-configuration.md Normal file
View File

@@ -0,0 +1,7 @@
# Kubelet configuration and effective flags
The learner reconciled an insecure KubeletConfiguration with approved effective flags, independently setting anonymous authentication off, webhook authentication and authorization on, the read-only port to zero, and certificate rotation on. Future CIS practice can now combine configuration-file review with process-argument verification.
## Evidence
`lab/lesson-38-verify.sh /tmp/lesson-38-kubelet.yaml` reported all five controls as PASS on 2026-08-27.