# KodeKloud: Beta Courses Kubernetes and Cloud Native Security Associate (KCSA)

## Kubernetes and Cloud Native Security Associate (KCSA)

### Introduction

- [Course Introduction](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Introduction/Course-Introduction/page.md): This course teaches Kubernetes fundamentals and security practices through hands-on labs and real-world scenarios for developers and security professionals.

### Overview of Cloud Native Security

- [The Attack](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Overview-of-Cloud-Native-Security/The-Attack/page.md): This article demonstrates a breach scenario in Kubernetes and Docker, highlighting vulnerabilities and preventive measures.
- [The 4Cs of Cloud Native Security](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Overview-of-Cloud-Native-Security/The-4Cs-of-Cloud-Native-Security/page.md): This guide explains the four layers of cloud native security  Cloud, Cluster, Container, and Code, detailing vulnerabilities and best practices for each.
- [Cloud Provider Security](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Overview-of-Cloud-Native-Security/Cloud-Provider-Security/page.md): This article discusses cloud provider security, focusing on threat management, web application firewalls, container security, and the shared responsibility model.
- [Infrastructure Security](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Overview-of-Cloud-Native-Security/Infrastructure-Security/page.md): This article focuses on infrastructure security in cloud-native environments, emphasizing network configuration, server hardening, and access control to prevent unauthorized access and data breaches.
- [Kubernetes Isolation Techniques](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Overview-of-Cloud-Native-Security/Kubernetes-Isolation-Techniques/page.md): This guide walks through five key isolation strategies for maintaining security and stability in Kubernetes clusters.
- [Artifact Repository and Image Security](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Overview-of-Cloud-Native-Security/Artifact-Repository-and-Image-Security/page.md): This article discusses the importance of artifact repositories and image security in containerization, highlighting risks and best practices for managing container images.
- [Workload and Application Code Security](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Overview-of-Cloud-Native-Security/Workload-and-Application-Code-Security/page.md): This guide covers securing application code through secure coding patterns, dependency scanning, runtime protection, and observability for resilient software development.

### Kubernetes Cluster Component Security

- [API Server](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Cluster-Component-Security/API-Server/page.md): The article discusses the Kubernetes API server, focusing on authentication, authorization, and secure communication within a cluster.
- [Securing Controller Manager Scheduler](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Cluster-Component-Security/Securing-Controller-Manager-Scheduler/page.md): This guide details security best practices for hardening the Kubernetes Controller Manager and Scheduler to protect against unauthorized access and data breaches.
- [Securing the Kubelet](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Cluster-Component-Security/Securing-the-Kubelet/page.md): This guide covers best practices for securing the kubelet in Kubernetes, including installation, configuration, and hardening techniques.
- [Securing Container Runtime](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Cluster-Component-Security/Securing-Container-Runtime/page.md): This article discusses securing container runtimes in Kubernetes, focusing on transitioning from Docker to containerd or CRI-O for enhanced security.
- [Securing Kube Proxy](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Cluster-Component-Security/Securing-Kube-Proxy/page.md): This guide covers best practices for securing kube-proxy in Kubernetes, including configuration management, encryption, audit logging, and access control.
- [Pod Security](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Cluster-Component-Security/Pod-Security/page.md): This article explores Kubernetes Pod Security features to prevent excessive privileges in Pods, detailing legacy policies and safe configuration practices.
- [Securing Etcd](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Cluster-Component-Security/Securing-Etcd/page.md): This guide covers securing etcd in Kubernetes through encryption strategies and backup methods to protect sensitive information and maintain cluster reliability.
- [Securing Container Networking](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Cluster-Component-Security/Securing-Container-Networking/page.md): This guide outlines strategies to enhance network security for Kubernetes containers, addressing communication vulnerabilities in a flat network model.
- [Client Security kubectl proxy port forward](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Cluster-Component-Security/Client-Security-kubectl-proxy-port-forward/page.md): This guide explores secure methods for accessing Kubernetes APIs and Services locally using kubectl proxy and kubectl port-forward.
- [Client Security kubeconfig](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Cluster-Component-Security/Client-Security-kubeconfig/page.md): This article explains how to use Kubernetes kubeconfig files to manage cluster endpoints and user credentials for easier interaction with kubectl.
- [Storage](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Cluster-Component-Security/Storage/page.md): This article discusses securing storage in Kubernetes, focusing on encryption, access control, policy enforcement, backup strategies, and monitoring for data integrity and security.

### Kubernetes Security Fundamentals

- [Pod Security Standards Pod Security Admissions](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Pod-Security-Standards-Pod-Security-Admissions/page.md): This article explains Pod Security Admission and Pod Security Standards in Kubernetes, detailing their features, profiles, and configuration for enhanced security.
- [Authentication](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Authentication/page.md): This lesson covers authenticating access to a Kubernetes cluster, detailing methods and configurations for securing API server interactions.
- [Authorization](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Authorization/page.md): This article explains Kubernetes authorization, its importance, mechanisms, and how to configure them for managing user permissions within a cluster.
- [RBAC](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/RBAC/page.md): This tutorial explains managing permissions in Kubernetes using RBAC, covering roles, bindings, and permission verification.
- [Solution RBAC](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Solution-RBAC/page.md): This lesson covers implementing Kubernetes Role-Based Access Control to manage permissions for users and services.
- [Secrets](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Secrets/page.md): This article explains how to use Kubernetes Secrets to securely manage sensitive data in a Python web application.
- [Isolation and Segmentation Namespace](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Isolation-and-Segmentation-Namespace/page.md): This guide explains how Kubernetes namespaces provide workload isolation, resource organization, and policy enforcement for efficient cluster management and security.
- [Solution Namespace](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Solution-Namespace/page.md): This article explains how to manage Kubernetes namespaces, including listing, counting, and deploying resources, as well as using DNS-based service discovery.
- [Isolation and Segmentation Resource Quotas Limits](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Isolation-and-Segmentation-Resource-Quotas-Limits/page.md): This article covers Kubernetes resource management, including defining requests and limits for CPU and memory, and enforcing resource quotas across namespaces.
- [Solution Resource Quotas Limits](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Solution-Resource-Quotas-Limits/page.md): This guide demonstrates Kubernetes resource constraints using example pods to identify requests, diagnose failures, and update specifications.
- [Isolation and Segmentation Security Context](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Isolation-and-Segmentation-Security-Context/page.md): This lesson covers Kubernetes security contexts for controlling permissions and access for Pods and containers, including best practices and configuration levels.
- [Solution Security Context](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Solution-Security-Context/page.md): This guide covers Kubernetes `securityContext` configurations for controlling process ownership and Linux capabilities in pods and containers.
- [Audit Logging](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Audit-Logging/page.md): Audit logging in Kubernetes captures API server requests to detect unauthorized activities and control event logging through defined audit policies.
- [Network Policies](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Security-Fundamentals/Network-Policies/page.md): This guide explains securing pod communication in Kubernetes using NetworkPolicies, including ingress and egress rules, and access restrictions by namespace and IP range.

### Kubernetes Threat Model

- [Kubernetes Trust Boundaries and Data Flow](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Threat-Model/Kubernetes-Trust-Boundaries-and-Data-Flow/page.md): This guide explores securing multi-tier web applications on Kubernetes by defining trust boundaries and mapping data flow.
- [Persistence](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Threat-Model/Persistence/page.md): This article explores how attackers maintain unauthorized access in Kubernetes clusters and discusses various attack vectors and mitigations for persistence.
- [Denial of Service](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Threat-Model/Denial-of-Service/page.md): This article examines Denial-of-Service attacks in Kubernetes, identifying attack vectors and mitigation strategies to enhance cluster resilience.
- [Malicious Code Execution](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Threat-Model/Malicious-Code-Execution/page.md): This guide explores unauthorized code execution in Kubernetes, common attack vectors, and strategies to mitigate risks and harden environments against exploits.
- [Compromised Applications in Containers](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Threat-Model/Compromised-Applications-in-Containers/page.md): This article explores how vulnerabilities in containerized applications can lead to cluster-wide breaches in Kubernetes environments.
- [Attacker on the Network](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Threat-Model/Attacker-on-the-Network/page.md): This guide explores network-level Denial of Service attacks against Kubernetes clusters and provides mitigation strategies.
- [Access to Sensitive Data](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Threat-Model/Access-to-Sensitive-Data/page.md): This article discusses unauthorized access to sensitive data in Kubernetes and offers best practices for mitigation.
- [Privilege Escalation](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Kubernetes-Threat-Model/Privilege-Escalation/page.md): This article explains how to use sudo for privilege escalation on Linux, enhancing security by allowing controlled access to superuser commands.

### Platform Security

- [Supply Chain Security Minimize base image footprint](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Supply-Chain-Security-Minimize-base-image-footprint/page.md): This lesson focuses on reducing Docker image attack surfaces and disk usage by constructing minimal, secure containers.
- [Supply Chain Security Scan images for known vulnerabilities](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Supply-Chain-Security-Scan-images-for-known-vulnerabilities/page.md): This guide covers container image scanning, CVEs, CVSS ratings, and using Trivy to detect and remediate vulnerabilities in container images.
- [Image Repository Security](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Image-Repository-Security/page.md): This article explains how to secure container images, including naming conventions, using secure registries, and configuring Pods for private repositories.
- [Observability Overview](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Observability-Overview/page.md): This article explores monitoring Kubernetes clusters for abnormal behavior, cyber attacks, and security breaches using observability techniques and tools like Falco.
- [Observability Falco Overview and Installation](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Observability-Falco-Overview-and-Installation/page.md): This guide explains how to install Falco for threat detection in Kubernetes environments using different deployment methods.
- [Observability Using Falco to Detect Threats](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Observability-Using-Falco-to-Detect-Threats/page.md): This guide explains how to use Falco for detecting threats in a Kubernetes cluster by verifying installation, testing with nginx, and writing custom rules.
- [Service Mesh Monolithics vs Microservices](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Service-Mesh-Monolithics-vs-Microservices/page.md): This article discusses the evolution from monolithic applications to microservices and the role of Service Meshes in modern cloud-native environments.
- [Service Mesh](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Service-Mesh/page.md): A service mesh is an infrastructure layer managing service-to-service communication in microservices, enhancing resilience, security, and observability without altering application code.
- [Service Mesh Istio](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Service-Mesh-Istio/page.md): This guide explores Istio, an open-source service mesh, covering its architecture, core components, and practical examples for microservices management.
- [Service Mesh Security in Istio](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Service-Mesh-Security-in-Istio/page.md): This article discusses securing microservices in Istio through encryption, access control, and audit logging.
- [Service Mesh Istio Security Architecture](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Service-Mesh-Istio-Security-Architecture/page.md): This article explores Istio’s service mesh security, covering certificate issuance, mutual TLS, and authentication and authorization policies for microservices.
- [K8s PKI Certificate Creation](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/K8s-PKI-Certificate-Creation/page.md): Generate TLS certificates for securing a Kubernetes cluster using OpenSSL, including CA, client, and server certificates.
- [K8s PKI View Certificate Details](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/K8s-PKI-View-Certificate-Details/page.md): This guide explains how to locate, inspect, and verify TLS certificates in a Kubernetes cluster for certificate health checks.
- [Connectivity TLS Introduction](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Connectivity-TLS-Introduction/page.md): This article introduces TLS certificates and their role in securing communication within Kubernetes clusters, covering fundamentals and specific implementations.
- [Connectivity TLS Basics](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Connectivity-TLS-Basics/page.md): This article explains SSL/TLS certificates, encryption types, securing SSH access, digital certificates, and mutual TLS for secure communications.
- [Connectivity TLS in Kubernetes](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Connectivity-TLS-in-Kubernetes/page.md): Learn to encrypt and authenticate traffic in a Kubernetes cluster using TLS, covering keys, certificates, and best practices for mutual TLS implementation.
- [Connectivity Mutual TLS](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Connectivity-Mutual-TLS/page.md): This article explains Mutual TLS (mTLS) for secure two-way authentication between client and server, including its handshake process and implementation in Kubernetes.
- [Admission Controllers](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Platform-Security/Admission-Controllers/page.md): Admission Controllers are plugins that enforce policies, mutate objects, or perform actions on requests to the Kubernetes API server before they are stored.

### Compliance and Security Frameworks

- [Compliance Frameworks](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Compliance-and-Security-Frameworks/Compliance-Frameworks/page.md): This article explores security compliance frameworks essential for protecting sensitive data and ensuring legal compliance in Kubernetes environments.
- [Threat Modelling Frameworks](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Compliance-and-Security-Frameworks/Threat-Modelling-Frameworks/page.md): This article explores threat modeling frameworks that help security teams identify threats, visualize attack paths, and suggest mitigations for securing systems.
- [Supply Chain Compliance](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Compliance-and-Security-Frameworks/Supply-Chain-Compliance/page.md): This guide covers supply chain security in Kubernetes, focusing on artifacts, metadata, attestations, and policies for compliance and integrity.
- [Automation and Tooling](https://notes.kodekloud.com/docs/Kubernetes-and-Cloud-Native-Security-Associate-KCSA/Compliance-and-Security-Frameworks/Automation-and-Tooling/page.md): This lesson reviews essential automation and tooling for cloud-native security, highlighting open source and commercial solutions across the application lifecycle.