201 Labs Overview

Overview

These intermediate labs move from knowing defaults to integrating and adapting controls: custom RBAC/SCC, shift-left pipelines, external secrets, audit correlation, compliance tailoring, and admission governance.

Topics covered:

  • Practical threat modeling

  • Advanced RBAC and service account hardening

  • Custom workload security controls (SCC/PSA, SELinux, seccomp)

  • Tighter isolation / restriction profiles

  • Advanced network segmentation and egress/ingress controls

  • CI/CD scanning and policy checks

  • Secure, reproducible images with signing/attestation

  • Secret lifecycle (rotation, externalization)

  • Audit/monitoring correlation

  • Automated compliance assessment and remediation

  • Admission and policy controllers

Audience: follow a role track for the ordered subset your role owns.

Intermediate Labs Index

Lab Title Roles

201-01

Threat Modeling & Control Mapping

App Dev, DevSecOps, Architect

201-02

Custom RBAC & ClusterRoles

Platform, DevSecOps, Architect

201-03

Custom SCC, Seccomp, SELinux & User Namespaces

Platform, DevSecOps

201-10

Sandboxed Containers & Workload Isolation

Platform, Architect (DevSecOps adjacent)

201-09 (+ 101-05 foundation)

Certificate Management & mTLS / segmentation bridge

Platform, Architect, Network

201-05

CI/CD Scanning, Image Signing & Cosign/Sigstore

App Dev, DevSecOps

201-06

Secret Lifecycle Externalization (Vault, ESO, CSI)

App Dev, Platform, DevSecOps, Architect

201-07

Audit Log Correlation & Anomaly Detection

Platform, DevSecOps, Architect, Network

201-08

Advanced Compliance Operator Usage & Tailoring

Platform, DevSecOps, Architect

201-11

Admission Controllers & Policy Enforcement

Platform, DevSecOps, Architect, Network

Lab Title Roles Notes

201-04

File Integrity Monitoring & Node Hardening

Platform

Platform hardening adjacency; use with Platform Operator track

201-09

Certificate Management & mTLS Basics

Network, Architect, Platform

Also listed above as the trust-fabric bridge

Role abbreviations: App Dev = Application Developer; Platform = Platform Operator; DevSecOps = DevSecOps Engineer; Architect = Security Architect; Network = Network & Infrastructure Engineer.