201 Labs Overview
← Back to home · Start from a role: Application Developer · Platform Operator · DevSecOps · Security Architect · Network & Infrastructure
Overview
These intermediate labs move from knowing defaults to integrating and adapting controls: custom RBAC/SCC, shift-left pipelines, external secrets, audit correlation, compliance tailoring, and admission governance.
Topics covered:
-
Practical threat modeling
-
Advanced RBAC and service account hardening
-
Custom workload security controls (SCC/PSA, SELinux, seccomp)
-
Tighter isolation / restriction profiles
-
Advanced network segmentation and egress/ingress controls
-
CI/CD scanning and policy checks
-
Secure, reproducible images with signing/attestation
-
Secret lifecycle (rotation, externalization)
-
Audit/monitoring correlation
-
Automated compliance assessment and remediation
-
Admission and policy controllers
Audience: follow a role track for the ordered subset your role owns.
Intermediate Labs Index
| Lab | Title | Roles |
|---|---|---|
Threat Modeling & Control Mapping |
App Dev, DevSecOps, Architect |
|
Custom RBAC & ClusterRoles |
Platform, DevSecOps, Architect |
|
Custom SCC, Seccomp, SELinux & User Namespaces |
Platform, DevSecOps |
|
Sandboxed Containers & Workload Isolation |
Platform, Architect (DevSecOps adjacent) |
|
Certificate Management & mTLS / segmentation bridge |
Platform, Architect, Network |
|
CI/CD Scanning, Image Signing & Cosign/Sigstore |
App Dev, DevSecOps |
|
Secret Lifecycle Externalization (Vault, ESO, CSI) |
App Dev, Platform, DevSecOps, Architect |
|
Audit Log Correlation & Anomaly Detection |
Platform, DevSecOps, Architect, Network |
|
Advanced Compliance Operator Usage & Tailoring |
Platform, DevSecOps, Architect |
|
Admission Controllers & Policy Enforcement |
Platform, DevSecOps, Architect, Network |
Related labs
| Lab | Title | Roles | Notes |
|---|---|---|---|
File Integrity Monitoring & Node Hardening |
Platform |
Platform hardening adjacency; use with Platform Operator track |
|
Certificate Management & mTLS Basics |
Network, Architect, Platform |
Also listed above as the trust-fabric bridge |
Role abbreviations: App Dev = Application Developer; Platform = Platform Operator; DevSecOps = DevSecOps Engineer; Architect = Security Architect; Network = Network & Infrastructure Engineer.