← Back to courses
Cybersecurity
Kubernetes Security Specialist (CKS)
Two months on securing clusters, workloads and the supply chain
A two-month classroom course that follows the six domains of the Linux Foundation's CKS exam: cluster setup, cluster hardening, system hardening, minimising microservice vulnerabilities, supply chain security, and monitoring, logging and runtime security. The Linux Foundation requires a passed CKA before the CKS exam can be taken; this course does not replace that. The exam fee is not included.
7Modules
AdvancedLevel
2 monthsDuration
COURSE THUMBNAIL
What you will be able to do
Harden a cluster against its benchmark
Restrict workloads with policies and least privilege
Secure the image supply chain
Detect and investigate suspicious behaviour at runtime
Course outline
01
Cluster setup: network policies, CIS benchmarks and Ingress with TLS (15%)
02
Cluster hardening: RBAC, service accounts and API access (15%)
03
System hardening: host attack surface, AppArmor and seccomp (10%)
04
Minimizing microservice vulnerabilities: pod security standards, secrets and isolation (20%)
05
Supply chain security: base images, SBOMs, signing and static analysis (20%)
06
Monitoring, logging and runtime security: detection and audit logs (20%)
07
Timed practice on a live cluster
Tools you will use
KuberneteskubectlAppArmorseccompCilium
What you need
Kubernetes administration at the level of CKA
Working knowledge of Linux
