Proposed RKE to RKE2 changes from the dropped Mentor

lesson-1-introduction-to-microservices-security/exercises/starter/Vagrantfile

@@ -4,8 +4,8 @@ ENV["TERM"]="linux"
 Vagrant.configure("2") do |config|
 
   # Use any version shown here https://app.vagrantup.com/opensuse/boxes/Leap-15.4.x86_64
-  config.vm.box = "opensuse/Leap-15.4.x86_64"
-  config.vm.box_version = "15.4.13.7"
+  config.vm.box = "opensuse/Leap-15.6.x86_64"
+  config.vm.box_version = "15.6.13.356"
 
   # st the static IP for the vagrant box
   config.vm.network "private_network", ip: "192.168.50.4"

lesson-3-docker-attack-surface-analysis-and-hardening/exercises/starter/Dockerfile

@@ -9,9 +9,11 @@ LABEL maintainer="[email protected]"
 #define version
 LABEL version="V1"
 
-# create a directory to work in
-RUN mkdir udacity \
-    && cd udacity
+# create a directory to work in (using mkdir -p to avoid errors)
+RUN mkdir -p /udacity
+
+# Set the working directory for subsequent instructions
+WORKDIR /udacity
 
 #install zypper 
 RUN zypper refs && zypper refresh

lesson-3-docker-attack-surface-analysis-and-hardening/exercises/starter/Vagrantfile

@@ -4,8 +4,8 @@ ENV["TERM"]="linux"
 Vagrant.configure("2") do |config|
 
   # Use any version shown here https://app.vagrantup.com/opensuse/boxes/Leap-15.4.x86_64
-  config.vm.box = "opensuse/Leap-15.4.x86_64"
-  config.vm.box_version = "15.4.13.7"
+  config.vm.box = "opensuse/Leap-15.6.x86_64"
+  config.vm.box_version = "15.6.13.356"
 
   # st the static IP for the vagrant box
   config.vm.network "private_network", ip: "192.168.50.4"

lesson-4-kubernetes-attack-surface-and-hardening/exercises/starter/Vagrantfile

@@ -16,16 +16,18 @@ Vagrant.configure("2") do |config|
       # set base image for the vagrant box
       # config.vm.box = "opensuse/Leap-15.2.x86_64"
       # Use any version shown here https://app.vagrantup.com/opensuse/boxes/Leap-15.4.x86_64
-      config.vm.box = "opensuse/Leap-15.4.x86_64"
-      config.vm.box_version = "15.4.13.7"
-      config.vm.hostname = "node#{i}"
+      config.vm.box = "opensuse/Leap-15.6.x86_64"
+      config.vm.box_version = "15.6.13.356"
+
+      # Set a unique hostname for each node
+      node.vm.hostname = "node#{i}"
 
       # set the static IP for the vagrant box
       node.vm.network "private_network", ip: "192.168.50.10#{i}"
       # configure the parameters for VirtualBox provider
       node.vm.provider "virtualbox" do |v|
         v.name = "node#{i}"
-        v.memory = 2048
+        v.memory = 4096
         v.cpus = 2
       end
     # Bootstrap the machine

lesson-4-kubernetes-attack-surface-and-hardening/exercises/starter/agent-config.yaml

@@ -0,0 +1,5 @@
+token: YOUR_SHARED_TOKEN
+server: https://192.168.50.101:9345
+node-name: node2
+node-ip: 192.168.50.102
+# profile: cis

lesson-4-kubernetes-attack-surface-and-hardening/exercises/starter/bootstrap.sh

@@ -7,22 +7,27 @@ systemctl enable docker
 usermod -G docker -a $USER
 systemctl restart docker
 
-echo "[TASK 2] Disable firewalld"
-systemctl stop firewalld
-systemctl disable firewalld
+# echo "[TASK 2] Disable firewalld"
+# systemctl stop firewalld
+# systemctl disable firewalld
 
-echo "[TASK 3] Disable apparmor"
-systemctl stop apparmor
-systemctl disable apparmor
+echo "[TASK 3] Install apparmor"
+zypper --non-interactive install apparmor-parser
 
-echo "[TASK 4] Set up rke user"
-useradd rke
-usermod -a -G docker rke
-systemctl restart docker
+# echo "[TASK 4] Set up rke user"
+# useradd rke
+# usermod -a -G docker rke
+# systemctl restart docker
 
-echo "[TASK 5] Copy auth_keys for rke user"
-mkdir -p /home/rke/.ssh
-usermod -d /home/rke/ rke
-cp /root/.ssh/authorized_keys /home/rke/.ssh
-chown rke /home/rke -R
+# echo "[TASK 5] Copy auth_keys for rke user"
+# mkdir -p /home/rke/.ssh
+# usermod -d /home/rke/ rke
+# cp /root/.ssh/authorized_keys /home/rke/.ssh
+# chown rke /home/rke -R
 
+echo "[TASK 6] Install kubectl"
+# Download and install kubectl
+curl -LO "https://dl.k8s.io/release/v1.32.2/bin/linux/amd64/kubectl"
+sudo mv kubectl /usr/local/bin/
+sudo chmod +x /usr/local/bin/kubectl
+echo "kubectl installed successfully."