> ## Documentation Index
> Fetch the complete documentation index at: https://notes.kodekloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Course: Certified Kubernetes Security Specialist (CKS)

> This article introduces a course for preparing for the Certified Kubernetes Security Specialist exam, focusing on Kubernetes security concepts and hands-on labs.

Notes for the **Certified Kubernetes Security Specialist (CKS)** course: 112 lessons across 7 sections.

## Introduction

* [Course Introduction](/docs/Certified-Kubernetes-Security-Specialist-CKS/Introduction/Course-Introduction/page.md)
* [Exam Information](/docs/Certified-Kubernetes-Security-Specialist-CKS/Introduction/Exam-Information/page.md)

## Understanding the Kubernetes Attack Surface

* [The Attack](/docs/Certified-Kubernetes-Security-Specialist-CKS/Understanding-the-Kubernetes-Attack-Surface/The-Attack/page.md)
* [The 4Cs of Cloud Native security](/docs/Certified-Kubernetes-Security-Specialist-CKS/Understanding-the-Kubernetes-Attack-Surface/The-4Cs-of-Cloud-Native-security/page.md)
* [A Quick Reminder](/docs/Certified-Kubernetes-Security-Specialist-CKS/Understanding-the-Kubernetes-Attack-Surface/A-Quick-Reminder/page.md)

## Cluster Setup and Hardening

* [Section Introduction](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Section-Introduction/page.md)
* [What are CIS Benchmarks](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/What-are-CIS-Benchmarks/page.md)
* [CIS benchmark for Kubernetes](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/CIS-benchmark-for-Kubernetes/page.md)
* [Kube bench](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Kube-bench/page.md)
* [Kubernetes Security Primitives](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Kubernetes-Security-Primitives/page.md)
* [Authentication](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Authentication/page.md)
* [Service Accounts](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Service-Accounts/page.md)
* [TLS Introduction](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/TLS-Introduction/page.md)
* [TLS Basics](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/TLS-Basics/page.md)
* [TLS in Kubernetes](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/TLS-in-Kubernetes/page.md)
* [TLS in Kubernetes Certificate Creation](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/TLS-in-Kubernetes-Certificate-Creation/page.md)
* [View Certificate Details](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/View-Certificate-Details/page.md)
* [Certificates API](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Certificates-API/page.md)
* [KubeConfig](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/KubeConfig/page.md)
* [API Groups](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/API-Groups/page.md)
* [Authorization](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Authorization/page.md)
* [RBAC](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/RBAC/page.md)
* [Cluster Roles and Role Bindings](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Cluster-Roles-and-Role-Bindings/page.md)
* [Kubelet Security](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Kubelet-Security/page.md)
* [Kubectl Proxy Port Forward](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Kubectl-Proxy-Port-Forward/page.md)
* [Verify platform binaries before deploying](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Verify-Platform-Binaries-Before-Deploying/page.md)
* [Kubernetes Releases](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Kubernetes-Releases/page.md)
* [Cluster Upgrade Process](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Cluster-Upgrade-Process/page.md)
* [Demo Cluster Upgrade](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Demo-Cluster-Upgrade/page.md)
* [Network Policy](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Network-Policy/page.md)
* [Developing Network Policies](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Developing-Network-Policies/page.md)
* [Ingress](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Ingress/page.md)
* [Docker Service Configuration](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Docker-Service-Configuration/page.md)
* [Docker Securing the Daemon](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Docker-Securing-the-Daemon/page.md)
* [Securing Node Metadata in Kubernetes](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Securing-Node-Metadata-in-Kubernetes/page.md)
* [Reasons to Secure Node Metadata](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Reasons-to-Secure-Node-Metadata/page.md)
* [Protection Strategies](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Protection-Strategies/page.md)
* [Auditing](/docs/Certified-Kubernetes-Security-Specialist-CKS/Cluster-Setup-and-Hardening/Auditing/page.md)

## System Hardening

* [Section Introduction](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Section-Introduction/page.md)
* [Least Privilege Principle](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Least-Privilege-Principle/page.md)
* [Reducing the Attack Surface](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Reducing-the-Attack-Surface/page.md)
* [Limiting Node Access](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Limiting-Node-Access/page.md)
* [SSH Hardening](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/SSH-Hardening/page.md)
* [Privilege Escalation in Linux](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Privilege-Escalation-in-Linux/page.md)
* [Remove Obsolete Packages and Services](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Remove-Obsolete-Packages-and-Services/page.md)
* [Restrict Kernel Modules](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Restrict-Kernel-Modules/page.md)
* [Identify and Disable Open Ports](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Identify-and-Disable-Open-Ports/page.md)
* [Minimize IAM roles](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Minimize-IAM-roles/page.md)
* [Minimize external access to the network](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Minimize-external-access-to-the-network/page.md)
* [UFW Firewall Basics](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/UFW-Firewall-Basics/page.md)
* [Linux Syscalls](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Linux-Syscalls/page.md)
* [AquaSec Tracee](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/AquaSec-Tracee/page.md)
* [Restrict syscalls using seccomp](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Restrict-Syscalls-Using-Seccomp/page.md)
* [Implement Seccomp in Kubernetes](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Implement-Seccomp-in-Kubernetes/page.md)
* [AppArmor](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/AppArmor/page.md)
* [Creating AppArmor Profiles](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Creating-AppArmor-Profiles/page.md)
* [AppArmor in Kubernetes](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/AppArmor-in-Kubernetes/page.md)
* [Linux Capabilities](/docs/Certified-Kubernetes-Security-Specialist-CKS/System-Hardening/Linux-Capabilities/page.md)

## Minimize Microservice Vulnerabilities

* [Section Introduction](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Section-Introduction/page.md)
* [Security Contexts](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Security-Contexts/page.md)
* [Admission Controllers](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Admission-Controllers/page.md)
* [Validating and Mutating Admission Controllers](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Validating-and-Mutating-Admission-Controllers/page.md)
* [Pod Security Policies](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Pod-Security-Policies/page.md)
* [Pod Security Admission and Pod Security Standards](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Pod-Security-Admission-and-Pod-Security-Standards/page.md)
* [Open Policy Agent OPA](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Open-Policy-Agent-OPA/page.md)
* [OPA in Kubernetes](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/OPA-in-Kubernetes/page.md)
* [Manage Kubernetes secrets](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Manage-Kubernetes-secrets/page.md)
* [Demo Encrypting Secret Data at Rest](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Demo-Encrypting-Secret-Data-at-Rest/page.md)
* [Container Sandboxing](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Container-Sandboxing/page.md)
* [gVisor](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/gVisor/page.md)
* [kata Containers](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Kata-Containers/page.md)
* [Container Runtime](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Container-Runtime/page.md)
* [Runtime Class in Kubernetes](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Runtime-Class-in-Kubernetes/page.md)
* [One way SSL vs Mutual SSL](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/One-way-SSL-vs-Mutual-SSL/page.md)
* [Overview of Multi Tenancy in Kubernetes](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Overview-of-Multi-Tenancy-in-Kubernetes/page.md)
* [Different types of Multi Tenancy in Kubernetes](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Different-types-of-Multi-Tenancy-in-Kubernetes/page.md)
* [Levels of Isolation in Kubernetes Namespace Pod Node](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Levels-of-Isolation-in-Kubernetes-Namespace-Pod-Node/page.md)
* [Control Plane Isolation](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Control-Plane-Isolation/page.md)
* [Understanding Resource Quotas](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Understanding-Resource-Quotas/page.md)
* [Data Plane Isolation](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Data-Plane-Isolation/page.md)
* [Data Plane Isolation Network](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Data-Plane-Isolation-Network/page.md)
* [Data Plane Isolation Storage](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Data-Plane-Isolation-Storage/page.md)
* [Using Node Pools and TaintsTolerations for Isolation](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Using-Node-Pools-and-TaintsTolerations-for-Isolation/page.md)
* [Additional Considerations API Priority Fairness](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Additional-Considerations-API-Priority-Fairness/page.md)
* [Quality of Service](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Quality-of-Service/page.md)
* [DNS in Multi Tenant Environments](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/DNS-in-Multi-Tenant-Environments/page.md)
* [Pod to Pod Encryption](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Pod-to-Pod-Encryption/page.md)
* [Implement pod to pod encryption by use of mTLS](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Implement-pod-to-pod-encryption-by-use-of-mTLS/page.md)
* [Demo Authentication](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Demo-Authentication/page.md)
* [Introduction to Cilium](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Introduction-to-Cilium/page.md)
* [Understanding Ciliums Architecture](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Understanding-Ciliums-Architecture/page.md)
* [Writing Effective Encryption Policies](/docs/Certified-Kubernetes-Security-Specialist-CKS/Minimize-Microservice-Vulnerabilities/Writing-Effective-Encryption-Policies/page.md)

## Supply Chain Security

* [Section Introduction](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/Section-Introduction/page.md)
* [Overview of Supply Chain Security](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/Overview-of-Supply-Chain-Security/page.md)
* [Risks of Inadequate Supply Chain Management](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/Risks-of-Inadequate-Supply-Chain-Management/page.md)
* [What is SBOM and Why Its Important](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/What-is-SBOM-and-Why-Its-Important/page.md)
* [Minimize base image footprint](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/Minimize-Base-Image-Footprint/page.md)
* [SBOM Format](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/SBOM-Format/page.md)
* [SBOM Workflow](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/SBOM-Workflow/page.md)
* [Introduction to KubeLinter](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/Introduction-to-KubeLinter/page.md)
* [Image Security](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/Image-Security/page.md)
* [Whitelist Allowed Registries Image Policy Webhook](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/Whitelist-Allowed-Registries-Image-Policy-Webhook/page.md)
* [Use Static Analysis of User Workloads](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/Use-Static-Analysis-of-User-Workloads/page.md)
* [Scan images for known vulnerabilities Trivy](/docs/Certified-Kubernetes-Security-Specialist-CKS/Supply-Chain-Security/Scan-images-for-known-vulnerabilities-Trivy/page.md)

## Monitoring, Logging and Runtime Security

* [Section Introduction](/docs/Certified-Kubernetes-Security-Specialist-CKS/Monitoring-Logging-and-Runtime-Security/Section-Introduction/page.md)
* [Perform behavioral analytics of syscall process](/docs/Certified-Kubernetes-Security-Specialist-CKS/Monitoring-Logging-and-Runtime-Security/Perform-Behavioral-Analytics-of-Syscall-Process/page.md)
* [Falco Overview and Installation](/docs/Certified-Kubernetes-Security-Specialist-CKS/Monitoring-Logging-and-Runtime-Security/Falco-Overview-and-Installation/page.md)
* [Use Falco to Detect Threats](/docs/Certified-Kubernetes-Security-Specialist-CKS/Monitoring-Logging-and-Runtime-Security/Use-Falco-to-Detect-Threats/page.md)
* [Falco Configuration Files](/docs/Certified-Kubernetes-Security-Specialist-CKS/Monitoring-Logging-and-Runtime-Security/Falco-Configuration-Files/page.md)
* [Mutable vs Immutable Infrastructure](/docs/Certified-Kubernetes-Security-Specialist-CKS/Monitoring-Logging-and-Runtime-Security/Mutable-vs-Immutable-Infrastructure/page.md)
* [Ensure Immutability of Containers at Runtime](/docs/Certified-Kubernetes-Security-Specialist-CKS/Monitoring-Logging-and-Runtime-Security/Ensure-Immutability-of-Containers-at-Runtime/page.md)
* [Kubernets Auditing](/docs/Certified-Kubernetes-Security-Specialist-CKS/Monitoring-Logging-and-Runtime-Security/Kubernets-Auditing/page.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.