The Certified Kubernetes Security Specialist (CKS) is the hardest Kubernetes certification — and the most valuable one for engineers who secure production clusters. This course prepares you for the CKS exam and gives you the hands-on security engineering skills to back up the credential.
What you’ll build and configure:
Harden a Kubernetes cluster against the CIS Benchmark from scratch. Design RBAC with true least privilege — scoped service accounts, bounded roles, no wildcard verbs. Enforce Pod Security Standards and OPA Gatekeeper policies that block insecure workloads before they ever reach a node. Lock containers down at the kernel level with AppArmor profiles, Seccomp policies, and capability drops.
Secure your container supply chain with Trivy image scanning, Cosign cryptographic signing, and admission policies that reject unsigned or vulnerable images. Isolate workloads with default-deny NetworkPolicies and mutual TLS. Encrypt etcd secrets at rest with AES-CBC or AES-GCM providers.
