> For the complete documentation index, see [llms.txt](https://securecube.gitbook.io/securecube/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://securecube.gitbook.io/securecube/master.md).

# Introduction

Kubernetes is an open source tool that can be extremely useful when orchestrating your containerized application running across a cluster of machines. But while kubernetes automates many of the tedious tasks required to deploy containerized apps, one critical thing that it doesn’t manage in most respects is security. Kubernetes is not a container security tool, and it would be a big mistake to assume that Kubernetes can defend your containerized app from cyber attacks. 

During this lab, we will learn how to secure you containerized application using different tools and techniques.

{% hint style="info" %}
While some of the tools you will be seeing below are specific to IBM Cloud, similar tools are also available on other cloud providers. The links to these and different open source tools will be provided. The purpose of this lab is to learn the concepts while showing a demo on IBM Cloud. 
{% endhint %}

### [Prerequisites](/securecube/step-1-sign-up-for-ibm-cloud.md)

* Sign up for IBM Cloud Account and create a cluster
* Install CLI tools and get access to the cluster from command line
* Clone github repository

Once you have the prerequisites set up, you can follow along with any of the labs below. 

{% content-ref url="/pages/-M3WWXd9uGEFSlxuDX6U" %}
[Secure your container image using Vulnerability Advisor](/securecube/step-2-secure-your-container-image-using-vulnerability-advisor.md)
{% endcontent-ref %}

{% content-ref url="/pages/-M3Wn0TeFbNi1-PObGaw" %}
[Protect sensitive information using KMS](/securecube/protect-sensitive-information-using-kms.md)
{% endcontent-ref %}

{% content-ref url="/pages/-M3X5kgDg8-B0JVKMBwb" %}
[Secure service to service communication using Istio](/securecube/secure-service-to-service-communication-using-istio.md)
{% endcontent-ref %}

{% content-ref url="/pages/-M3XRs9oM5ljQ3-M9ww2" %}
[Setup runtime security for the cluster using Sysdig Falco](/securecube/setup-runtime-security-for-the-cluster-using-sysdig-falco.md)
{% endcontent-ref %}

{% content-ref url="/pages/-M3\_c\_58LrSsGcqBLuyk" %}
[Conclusion](/securecube/conclusion.md)
{% endcontent-ref %}