# KodeKloud: Beta Courses Prep Course - Certified Cloud Native Platform Engineer (CNPE)

## Prep Course - Certified Cloud Native Platform Engineer (CNPE)

### Course Introduction

- [Introduction](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Course-Introduction/Introduction/page.md): A hands on course preparing candidates for the Certified Cloud Native Platform Engineer exam, teaching platform architecture, GitOps, APIs, observability, security, and practical labs with mock exams.
- [Why CNPE](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Course-Introduction/Why-CNPE/page.md): Overview of a hands-on course preparing engineers for the Certified Cloud Native Platform Engineer performance exam covering platform architecture, GitOps, APIs, observability, and security
- [CNPE Certification Overview](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Course-Introduction/CNPE-Certification-Overview/page.md): Overview of the Certified Cloud Native Platform Engineer exam covering format, domain weights, common tooling, allowed resources, remote exam environment, and study and preparation guidance

### Platform Architecture and Infrastructure

- [Your Platform Blueprint Architecture That Scales](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Your-Platform-Blueprint-Architecture-That-Scales/page.md): Guide to designing scalable Kubernetes platforms using layered architecture, control plane separation, and cluster topology tradeoffs for growing multi team organizations.
- [Right Sizing 101 Requests Limits QoS and Scheduling Part 1](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Right-Sizing-101-Requests-Limits-QoS-and-Scheduling-Part-1/page.md): How to set Kubernetes resource requests and limits, QoS classes, and right-sizing workflow to improve scheduling, reduce costs, and prevent evictions and OOM failures
- [Right Sizing 101 Requests Limits QoS and Scheduling Part 2](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Right-Sizing-101-Requests-Limits-QoS-and-Scheduling-Part-2/page.md): Explains Kubernetes resource requests, limits, QoS classes, and scheduling with guidance on right-sizing, profiling, and monitoring to improve utilization and avoid outages.
- [Multi Tenancy Made Practical Models Tradeoffs Guardrails Part 1](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Multi-Tenancy-Made-Practical-Models-Tradeoffs-Guardrails-Part-1/page.md): Guidance on multi-tenancy tradeoffs and practical guardrails for Kubernetes clusters including models, isolation mechanisms, and minimum controls like RBAC ResourceQuota and NetworkPolicies
- [Multi Tenancy Made Practical Models Tradeoffs Guardrails Part 1](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Multi-Tenancy-Made-Practical-Models-Tradeoffs-Guardrails-Part-1/page.md): Guidance on multi-tenancy tradeoffs and practical guardrails for Kubernetes clusters including models, isolation mechanisms, and minimum controls like RBAC ResourceQuota and NetworkPolicies
- [Resource Governance Defaults Limits and Quotas](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Resource-Governance-Defaults-Limits-and-Quotas/page.md): Explains how Kubernetes ResourceQuota and LimitRange enforce namespace resource budgets and per-container defaults to prevent noisy neighbors in multi-tenant clusters.
- [Defaults Budgets Designing LimitRanges and Quotas](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Defaults-Budgets-Designing-LimitRanges-and-Quotas/page.md): Guidance for designing Kubernetes LimitRange and ResourceQuota defaults, tiered namespace quotas, and iterative monitoring to balance developer agility and cluster resource governance
- [Persistent Storage Concepts Volumes Claims and Provisioners](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Persistent-Storage-Concepts-Volumes-Claims-and-Provisioners/page.md): Explains Kubernetes persistent storage concepts including PersistentVolumes PersistentVolumeClaims StorageClasses provisioning methods access modes and guidance to match storage to workload performance availability and cost
- [Demo Storage Classes in Action](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Demo-Storage-Classes-in-Action/page.md): Guide to Kubernetes StorageClasses and dynamic volume provisioning, demonstrating PVC/PV lifecycle, reclaim policies Delete versus Retain, WaitForFirstConsumer behavior, and production best practices.
- [Platform Networking Concepts](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Platform-Networking-Concepts/page.md): Overview of Kubernetes networking covering Services, service types, Ingress versus Gateway API, load balancing, service discovery with CoreDNS, and NetworkPolicy for pod-level network security
- [Demo Traffic Flow with Services and Ingress](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Demo-Traffic-Flow-with-Services-and-Ingress/page.md): Demo explaining Kubernetes Services, ClusterIP, NodePort, and Ingress with an nginx ingress controller showing routing, service discovery, and handling ephemeral pod lifecycles.
- [Cost for Platforms What Drives Spend and How to Reduce It](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Cost-for-Platforms-What-Drives-Spend-and-How-to-Reduce-It/page.md): Explains Kubernetes cloud cost drivers, using OpenCost for visibility, and practical strategies to attribute, optimize, and reduce platform spending
- [Demo Cost Visibility with OpenCost](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-Architecture-and-Infrastructure/Demo-Cost-Visibility-with-OpenCost/page.md): Demo showing how OpenCost maps Kubernetes resource requests and usage to dollar costs, using UI and API to find overprovisioning and enable rightsizing and scaling to reduce waste.

### GitOps and Continuous Delivery

- [GitOps Explained Desired State Drift and Reconciliation](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/GitOps-Explained-Desired-State-Drift-and-Reconciliation/page.md): Explains GitOps principles, the declarative desired state model, reconciliation loop, drift detection and self healing, and the four pillars enabling secure auditable continuous delivery.
- [Repo Design That Works Apps Infra Environments Promotion](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/Repo-Design-That-Works-Apps-Infra-Environments-Promotion/page.md): Guide to organizing GitOps repositories by separating apps and infra, using base and overlays, choosing mono versus multi repo, and implementing promotion strategies for scalable, auditable deployments.
- [Configuration Templating Parameterization and Environment Management](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/Configuration-Templating-Parameterization-and-Environment-Management/page.md): Comparison of Helm and Kustomize for templating and patching Kubernetes manifests across environments.
- [GitOps Tool Landscape ArgoCD vs Flux](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/GitOps-Tool-Landscape-ArgoCD-vs-Flux/page.md): Comparing Argo CD and Flux GitOps engines, their architectures, features, tradeoffs, and guidance for choosing based on team preferences, multi cluster strategy, and ecosystem integrations.
- [ArgoCD Overview Applications Sync Policies and Helm Integration](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/ArgoCD-Overview-Applications-Sync-Policies-and-Helm-Integration/page.md): Overview of Argo CD Application CRDs, sync policies, Helm integration, and ApplicationSets for production GitOps automation and scalable deployments
- [Demo GitOps Delivery with ArgoCD UI](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/Demo-GitOps-Delivery-with-ArgoCD-UI/page.md): Walkthrough of using Argo CD web UI to create, sync, detect drift, and deploy Kubernetes manifests and Helm charts via GitOps.
- [Demo GitOps Delivery with ArgoCD CLI](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/Demo-GitOps-Delivery-with-ArgoCD-CLI/page.md): Demonstrates using the Argo CD CLI to create and sync Git based applications, enable automated sync with self‑heal and auto‑prune, and validate automatic reconciliation
- [CICD on Kubernetes Pipelines Tasks Artifacts and Flow](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/CICD-on-Kubernetes-Pipelines-Tasks-Artifacts-and-Flow/page.md): Kubernetes-native CI practices, comparing Tekton and Argo Workflows for in-cluster builds, testing, artifact handling, security, and pipeline orchestration.
- [Demo Tekton Pipelines](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/Demo-Tekton-Pipelines/page.md): A hands on demo of Tekton Pipelines showing how to create reusable Tasks, Pipelines, and run builds and deployments in Kubernetes using tkn and the Tekton Dashboard
- [Progressive Delivery Canary Blue Green and Safe Rollbacks](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/Progressive-Delivery-Canary-Blue-Green-and-Safe-Rollbacks/page.md): Explains progressive delivery strategies like canary and blue green deployments, risks of standard rollouts, and using Argo Rollouts for metric driven gradual rollouts and safe rollbacks.
- [Service Mesh Integration for Progressive Delivery](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/Service-Mesh-Integration-for-Progressive-Delivery/page.md): Explains using service mesh and Istio Envoy sidecars with Argo Rollouts to enable precise L7 canary routing, weighted traffic control, mirroring, and automated progressive delivery.
- [Demo Progressive Delivery with Argo Rollouts](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/Demo-Progressive-Delivery-with-Argo-Rollouts/page.md): Guide to Argo Rollouts for Kubernetes, demonstrating canary progressive delivery, image updates, promotion, rollback, and attaching rollouts to existing Deployments via workloadRef
- [Delivery Troubleshooting Drift Permissions and Bad Configs](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/GitOps-and-Continuous-Delivery/Delivery-Troubleshooting-Drift-Permissions-and-Bad-Configs/page.md): Guide to diagnosing and resolving Argo CD GitOps delivery failures focusing on drift, RBAC permissions, and invalid manifests with diagnostic commands and remediation steps

### Platform APIs and Self-Service Capabilities

- [APIs as Products Designing Your Platform Contract](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/APIs-as-Products-Designing-Your-Platform-Contract/page.md): Describes designing consumer-centric platform APIs as products to enable self-service, replace ticket-driven provisioning, and use CRDs, controllers, and workflow engines to automate and enforce guardrails.
- [Extending Kubernetes Custom Resources and API Extensions](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/Extending-Kubernetes-Custom-Resources-and-API-Extensions/page.md): Explains how to extend the Kubernetes API with CustomResourceDefinitions, define CRDs and schemas, validate via OpenAPI v3, and reconcile custom resources with controllers
- [CRD Design Patterns Versioning Status and Printer Columns](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/CRD-Design-Patterns-Versioning-Status-and-Printer-Columns/page.md): Guide to making Kubernetes CustomResourceDefinitions production-ready by applying versioning, status subresource, printer columns, scale integration, validation, and a checklist for safe operability
- [Demo Building a Custom Resource Definition](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/Demo-Building-a-Custom-Resource-Definition/page.md): Guide to creating a namespaced Kubernetes CustomResourceDefinition for a Database type with openAPIV3Schema validation, enums, required fields, example YAML, and troubleshooting
- [Operators Controllers Reconcile Like a Pro](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/Operators-Controllers-Reconcile-Like-a-Pro/page.md): Explains Kubernetes CRDs and controllers, the reconciliation loop, status and finalizers, and best practices for building reliable operators.
- [Demo Reading Operator Status and Conditions](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/Demo-Reading-Operator-Status-and-Conditions/page.md): Guide showing how to read operator status and conditions with cert-manager, covering CRDs, Issuer and Certificate creation, status messages, Secrets, and reconciliation for troubleshooting
- [Workflow Orchestration DAGs Steps and Event Driven Automation](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/Workflow-Orchestration-DAGs-Steps-and-Event-Driven-Automation/page.md): Explains using Argo Workflows and Argo Events to replace fragile scripts with declarative, parallel, retryable, observable Kubernetes-native automation for complex platform tasks.
- [Demo Workflow Automation with Argo Workflows](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/Demo-Workflow-Automation-with-Argo-Workflows/page.md): Guide demonstrating Argo Workflows usage in Kubernetes, including simple tasks, steps, DAGs, kubectl execution, parameters, templates, and RBAC considerations
- [Platform Building Blocks Crossplane XRs Compositions and Functions](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/Platform-Building-Blocks-Crossplane-XRs-Compositions-and-Functions/page.md): Explains how Crossplane uses XRDs and Compositions to create Kubernetes native platform APIs that unify application and infrastructure provisioning for GitOps based self service
- [Demo Compositions with Crossplane](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/Demo-Compositions-with-Crossplane/page.md): Demo of using Crossplane Compositions to expose user-friendly Kubernetes APIs that map composite resources into concrete provider resources via XRDs, Compositions, patches, and transforms.
- [Crossplane Functions](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/Crossplane-Functions/page.md): Explains Crossplane function pipelines and Patch-and-Transform usage to map composite resource intent into provider-specific managed resources using patches, transforms, and conditional logic.
- [Demo Crossplane Functions](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/Demo-Crossplane-Functions/page.md): Demo showing how to use Crossplane Patch-and-Transform functions to map composite resource fields into provider configuration using Composition transforms like map, combine, convert, and status writeback
- [Choosing the Right Engine Operators vs Workflows vs Pipelines](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Platform-APIs-and-Self-Service-Capabilities/Choosing-the-Right-Engine-Operators-vs-Workflows-vs-Pipelines/page.md): Guide to choosing between Kubernetes Operators, Argo Workflows, and Crossplane by comparing execution models, use cases, anti‑patterns, and patterns for combining tools in platform engineering.

### Observability and Operations

- [Observability for Platforms What to Measure and Why](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Observability-for-Platforms-What-to-Measure-and-Why/page.md): Guide to platform observability covering metrics, logs, traces, golden signals, tooling, deployment and cost metrics, and operational practices for building and running a self service observability stack.
- [Metrics Architecture Collection Storage and Querying](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Metrics-Architecture-Collection-Storage-and-Querying/page.md): Overview of Prometheus metrics architecture, collection, metric types, labeling, PromQL querying and Kubernetes integration for reliable, scalable observability and consistent dashboards
- [Demo Metrics Collection with Prometheus](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Demo-Metrics-Collection-with-Prometheus/page.md): Guide to validating Prometheus monitoring, understanding its pull scrape model, querying PromQL for gauges and counters, building dashboard aggregates, and troubleshooting missing metrics.
- [Prometheus Alerting Rules AlertManager and Notification Routing](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Prometheus-Alerting-Rules-AlertManager-and-Notification-Routing/page.md): Guide to Prometheus alerting rules, Alertmanager routing and grouping, alert lifecycle, and best practices to create reliable, actionable notifications while reducing alert noise.
- [Visualization and Dashboards Turning Data into Insight](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Visualization-and-Dashboards-Turning-Data-into-Insight/page.md): How to connect Grafana to Prometheus and design dashboards and panels for rapid triage, monitoring, and visualization best practices
- [Demo Connecting a Datasource in Grafana](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Demo-Connecting-a-Datasource-in-Grafana/page.md): Guide showing how to configure Grafana to connect to an in-cluster Prometheus datasource, verify services, save and test the connection, and troubleshoot common issues
- [Demo Building Dashboards in Grafana](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Demo-Building-Dashboards-in-Grafana/page.md): Guide to building a compact Grafana platform dashboard using Prometheus metrics with Time series, Stat, Gauge, and Pie chart panels for monitoring and troubleshooting
- [Distributed Tracing Context Propagation and Trace Analysis](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Distributed-Tracing-Context-Propagation-and-Trace-Analysis/page.md): Explains distributed tracing, trace data model and context propagation, configuring OpenTelemetry to export traces to Jaeger, and using traces to locate performance bottlenecks in microservices.
- [Trace Visualization and Root Cause Analysis](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Trace-Visualization-and-Root-Cause-Analysis/page.md): Practical guide to using Jaeger traces and OpenTelemetry to read waterfalls, identify latency patterns, follow a triage workflow, inspect spans, and correlate traces with logs and metrics.
- [Demo Tracing with OpenTelemetry and Jaeger](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Demo-Tracing-with-OpenTelemetry-and-Jaeger/page.md): Guide to enabling OpenTelemetry tracing for a Kubernetes frontend, exporting traces to Jaeger via OTLP, configuring environment variables, viewing traces, and troubleshooting common issues.
- [Logging for Platforms Patterns That Scale](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Logging-for-Platforms-Patterns-That-Scale/page.md): Explains scalable Kubernetes logging with structured JSON, centralized pipeline stages, DaemonSet versus sidecar collection, log level strategies, and trace ID correlation for rapid root cause analysis.
- [Incident Playbook Triage Fix Validate Repeat](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Observability-and-Operations/Incident-Playbook-Triage-Fix-Validate-Repeat/page.md): A five-phase incident response playbook guiding teams from alert to validation using observability tools and safe reversible fixes to reduce mean time to recovery

### Security and Policy Enforcement

- [Platform Security Simplified Threats Guardrails and Trust](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Platform-Security-Simplified-Threats-Guardrails-and-Trust/page.md): Summarizes Kubernetes threat model and layered platform controls to enforce least privilege, network isolation, admission policies, service mesh, and supply chain security for shared clusters
- [RBAC You Can Live With Least Privilege Without Pain](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/RBAC-You-Can-Live-With-Least-Privilege-Without-Pain/page.md): Using Kubernetes RBAC to enforce least privilege, explaining Roles, ClusterRoles, RoleBindings, ClusterRoleBindings, authoring examples, scope decisions, and debugging permissions with kubectl auth can-i
- [Demo RBAC Roles and Bindings](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Demo-RBAC-Roles-and-Bindings/page.md): Guide to Kubernetes RBAC explaining Roles, ClusterRoles, RoleBindings, ClusterRoleBindings, service account bindings, testing permissions with kubectl auth can-i and debugging for least privilege
- [Admission Control Policies That Prevent Bad Deployments](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Admission-Control-Policies-That-Prevent-Bad-Deployments/page.md): Explains Kubernetes admission control, differences from RBAC, common policies and tools like Kyverno and Gatekeeper to enforce safe Pod and Deployment configurations
- [Demo Admission Webhooks in Action](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Demo-Admission-Webhooks-in-Action/page.md): Demonstrates Kubernetes admission controllers showing how LimitRanger injects default resources and ResourceQuota enforces namespace quotas and their interaction using a demo
- [OPA Gatekeeper Constraint Based Policy Enforcement](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/OPA-Gatekeeper-Constraint-Based-Policy-Enforcement/page.md): Explains using OPA Gatekeeper ConstraintTemplates and Constraints to enforce Kubernetes admission policies with Rego examples, rollout best practices, and debugging tips.
- [Demo Policy as Code with Gatekeeper](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Demo-Policy-as-Code-with-Gatekeeper/page.md): Guide demonstrating how to use OPA Gatekeeper to enforce custom Kubernetes admission policies using ConstraintTemplates and Constraints, requiring pod labels and using dryrun, warn, or deny enforcement modes.
- [Kyverno Kubernetes Native Policy Management](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Kyverno-Kubernetes-Native-Policy-Management/page.md): Guide to Kyverno, a Kubernetes-native policy engine explaining validate, mutate, and generate rules, examples, comparisons with Gatekeeper, debugging, and rollout best practices.
- [Demo Supply Chain Guardrails with Kyverno](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Demo-Supply-Chain-Guardrails-with-Kyverno/page.md): Guide showing how to use Kyverno to validate, mutate, and generate Kubernetes resources for supply chain guardrails, with examples and Audit mode PolicyReports
- [Pod Security Standards Your Baseline Safety Net](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Pod-Security-Standards-Your-Baseline-Safety-Net/page.md): Explains Kubernetes Pod Security Standards, the three profiles, enforcement modes, and namespace label configuration to enforce baseline runtime protections and layer custom policies.
- [Demo Applying Pod Security Standards](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Demo-Applying-Pod-Security-Standards/page.md): Explains using Kubernetes Pod Security Standards to enforce baseline restricted and privileged profiles via namespace labels and modes warn audit enforce, with examples and remediation steps.
- [Service Mesh Security Encryption and Identity](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Service-Mesh-Security-Encryption-and-Identity/page.md): Explains Istio mTLS, SPIFFE identities, PeerAuthentication and AuthorizationPolicy to secure and control encrypted pod-to-pod traffic in Kubernetes service meshes
- [Demo mTLS with Istio](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Demo-mTLS-with-Istio/page.md): Guide demonstrating Istio mTLS setup in Kubernetes, enabling sidecar injection, enforcing strict mutual TLS, applying AuthorizationPolicy to restrict service access, and validating with istioctl and in-cluster tests
- [Security in Delivery Build Pipelines That Ship Safely](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Security-and-Policy-Enforcement/Security-in-Delivery-Build-Pipelines-That-Ship-Safely/page.md): Hardening CI/CD delivery pipelines by building, scanning, signing, and enforcing admission of container images to prevent supply chain attacks

### Conclusion

- [Course Conclusion](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Conclusion/Course-Conclusion/page.md): Concise recap and exam study checklist for aspiring Certified Cloud Native Platform Engineers covering platform architecture, GitOps delivery, platform APIs, observability, operations, security, and practical lab preparation
- [Exam Tips and Tricks](https://notes.kodekloud.com/docs/Prep-Course-Certified-Cloud-Native-Platform-Engineer-CNPE/Conclusion/Exam-Tips-and-Tricks/page.md): Practical CNPE exam strategies emphasizing time management, environment preparation, tool selection, efficient use of documentation, and avoiding common mistakes to maximize score.