Courses & Certifications

AI agent security on Kubernetes

Get Started

Coming soon

AI Agent Security Essentials

This hands-on course shows you how to lock down AI agents, from assessing risk and controlling access to keeping credentials safe and watching what happens in production. Follow one real-world story from a weekend of rogue refunds to a fully secured agent, and walk away with skills grounded in open standards that work with whatever tools your team uses.

The Modules

icon

Welcome and course orientation

icon

AI agents and what can go wrong

icon

Agent identity and authentication

icon

Least privilege and authorization

icon

Keeping secrets away from agents

icon

Watching agents and responding to incidents

What You'll Learn

Describe

Describe the attack surface AI agents create: prompt injection, over-privileged tools, data disclosure, credential sprawl, shadow agents.

Apply

Apply least privilege to agent tool access, and read and write simple default-deny authorization rules.

Recognize

Recognize unsafe credential handling and explain delegation patterns where the agent never holds the user's secret.

Use

Use audit logs and traces to reconstruct what an agent did, and outline the first steps to contain one that is misbehaving.

Calico Certifications:

Calico Logo

Certified Calico Operator: Level 1

This course will cover how Kubernetes networking works, how to configure and manage a Calico network, and how to secure your Kubernetes cluster.

View Table of Contents Enroll

Certified Calico Operator: Level 1

What the Course Covers

  • Introduction to Kubernetes Networking
  • Installing Calico
  • Everything you need to know about Network Policy, including:
    • Introduction to Network Policy
    • Best Practices for Network Policy
    • Managing Trust Across Teams
    • Network Policy for Hosts and NodePorts
  • Everything you need to know about network connectivity, including:
    • Pod Connectivity Fundamentals
    • Calico’s Next Generation eBPF Dataplane
    • Encrypting Data in Transit
    • Fun with IP Address Management
    • Peering with BGP
  • Everything you need to know about Kubernetes Services, including:
    • Introduction to Kubernetes Services
    • Understanding Kube-Proxy Service Handling
    • Understanding Calico Native Service Handling
    • Advertising Services
AWS Logo

Certified Calico Operator: AWS Expert

This course will contrast several options for deploying Kubernetes in AWS and examine how the default AWS networking works. It will also describe how to best configure and manage Calico in AWS, and how to use it to secure your AWS Kubernetes clusters.

View Table of Contests Enroll

Certified Calico Operator: AWS Expert
What the Course Covers

  • Week 1
    • Get Started with AWS Networking
    • Kubernetes Cluster Options in AWS
    • Kubernetes Networking Options in AWS
    • Kubernetes Network Security in AWS
    • Exposing Services Outside the Cluster
    • Lab Setup
  • Week 2
    • EKS Deployment Overview
    • EKS Lab with AWS-CNI
    • Securing a demo application with Calico Policy
    • Deploying an Elastic Load Balancer
  • Week 3
    • The AWS CNI with Calico eBPF
    • Deploying EKS with Calico eBPF
    • Deploying a demo application with eBPF
    • Deploying EKS with Calico CNI
    • IP Address Allocation Review
    • Enabling Encryption
  • Week 4
    • Self-Managed Installation Options
    • kOps Overview
    • kOps with Calico CNI
    • Using an Application Load Balancer
    • Deploying Istio
    • Deploying Calico Application Layer Policy with Istio
eBPF Logo

Certified Calico Operator: eBPF

This course will provide an introduction to eBPF and then describe Calico’s eBPF pluggable data plane, reviewing the benefits and recommended scenarios for use, and demonstrating the data plane in live labs across multiple deployment scenarios.

View Table of Contents Enroll

Certified Calico Operator: eBPF
What the Course Covers

  • Week 1
    • Get Started with eBPF
    • Lab Setup
    • Writing an eBPF program
    • Writing a Kernel Probe for Tracing
    • Understanding the Tools
    • eBPF in Kubernetes
  • Week 2
    • GCP Lab Setup
    • Deploying Calico with eBPF on Upstream Kubernetes
    • Key Benefits of the Calico eBPF Data Plane
  • Week 3
    • Deploying Calico with eBPF on OpenShift
    • Understanding Calico eBPF and CNI Choice
    • Deploying a Rancher RKE Cluster with eBPF, and connecting to a Rancher Server
  • Week 4
    • Calico eBPF and WireGuard
    • Monitoring and Troubleshooting the Calico eBPF Data Plane
    • Advanced Topics
Azure Logo

New
Certified Calico Operator: Azure Expert

This course will cover an introduction to Azure cloud, learnings about managed, self-managed and hybrid cluster deployment using Calico in Azure, and hands-on labs to help learners explore most of the features in Calico – Azure integration.

View Table of Contents Enroll

Certified Calico Operator: Azure Expert
What the Course Covers

  • Week 1
    • Introduction
    • Get Started With Azure Networking
    • Kubernetes Cluster Options in Azure
    • Kubernetes Networking Options in Azure
    • Kubernetes Network Security in Azure
    • Exposing Services Outside the Cluster
    • Lab setup
    • Knowledge Check
  • Week 2
    • Introduction
    • Deploying AKS kubenet with Calico
    • YaoBank Deployment
    • Cluster Security
    • Lab Cleanup
    • Knowledge Check
  • Week 3
    • AKS Deployment Azure-CNI with Calico CNI
    • Node operations
    • Enable Encryption (WireGuard)
    • Multiplatform setup
    • Securing Windows Workloads
    • Lab Cleanup
    • AKS Bring Your Own CNI
    • YaoBank Deployment
    • Calico eBPF dataplane
    • Lab Cleanup
    • Knowledge Check
  • Week 4
    • Self-Managed Cluster Deployment with Calico
    • Calico Installation and Configurations
    • Upgrading Calico
    • Istio Integration
    • Lab Cleanup
    • Knowledge Check
  • Final Exam
    • Final Exam Introduction
    • Final Exam

Ready to find out how many AI agents are running in your clusters?

Discover AI agents running in your Kubernetes clusters. See their activity, set security boundaries, and contain unsafe behavior—all in your own environment.

Book a Lynx demo
X