Learn how to architect, harden, and defend containerized environments and combat security drift. Discover how to implement a zero-trust, secure-by-default posture across every phase of the container lifecycle.

Course introduction

GKE cluster hardening and baseline security

Secure identities for workloads and secrets management

End-to-end software supply chain security

GKE runtime security and isolation

gsp1391-securing-containerized-workloads-on-google-cloud

Secure Containerized Workloads on Google Cloud

Course summary

Quiz: Security Best Practices in Google Cloud: Containers — Question 1

Quiz: Security Best Practices in Google Cloud: Containers — Question 2

Quiz: Security Best Practices in Google Cloud: Containers — Question 3

Quiz: Security Best Practices in Google Cloud: Containers — Question 4

Quiz: Security Best Practices in Google Cloud: Containers — Question 5

Securing containers

This course is designed to teach you how to architect, harden, and defend containerized environments. You'll learn how to combat security drift, which is the silent accumulation of misconfigurations, unpatched operating systems, and over-privileged credentials. The goal is to help you implement a zero-trust, secure-by-default posture across every phase of the container lifecycle.

<h2>Stop Security Drift in Containerized Environments</h2>Container environments tend to drift out of shape over time as misconfigurations, unpatched nodes, and over-privileged credentials pile up. This intermediate course shows you how to architect, harden, and defend containerized workloads on Google Kubernetes Engine (GKE) with a zero-trust, secure-by-default posture.<br><br><h2>Harden Clusters and Nodes</h2>You’ll establish baseline security with GKE Autopilot, which automates cluster hardening and patch management. Then you’ll reduce the attack surface of GKE worker nodes and control how human administrators access your clusters.<br><br><h2>Secure Identities, Secrets, and the Supply Chain</h2>Next, you’ll replace static service account keys with keyless, short-lived, least-privilege identities for your pods. You’ll protect sensitive credentials with Secret Manager and encrypt Kubernetes Secrets in etcd using Cloud KMS, then explore software supply chain security and runtime isolation. A hands-on lab brings it together. By the end, you’ll be able to secure containers at every phase of their lifecycle.

Manage Security in Google Cloud

Harden GKE clusters, secure workload identities and secrets, and defend containers across their full lifecycle.

Secure Containerized Workloads on Google Cloud

Security Best Practices in Google Cloud: Containers

Exercise instructions