Advanced · Course

Kubernetes Security

Secure containerised applications, implement pod security policies, manage secrets, and harden Kubernetes environments at enterprise scale.

29 hours Marcus Chen CKS prep

Kubernetes Security is a focused 29-hour program for hardening containerised platforms at enterprise scale. As organisations move to Kubernetes, the attack surface shifts in ways that traditional security skills do not fully cover — this course teaches you to secure the cluster, the workloads, and the supply chain behind them.

Who this course is for

It is intended for platform engineers, DevOps practitioners, and security professionals responsible for Kubernetes environments. Prior hands-on Kubernetes experience is required, as the course moves quickly into security-specific territory.

What you will be able to do

You will harden the control plane and nodes, design least-privilege RBAC, enforce Pod Security Standards and admission control, manage secrets safely, secure the image supply chain, and apply network policies that contain lateral movement. The curriculum maps to the Certified Kubernetes Security Specialist (CKS) exam.

How it is taught

Every topic is reinforced in labs on real clusters, and the course ends with a capstone in which you harden a cluster against a realistic threat model. You practise the same configuration and defensive techniques you will apply in production.

You leave able to secure Kubernetes confidently and to prepare for the CKS certification.

Curriculum

01

Cluster hardening

Securing the API server, kubelet, etcd, and the control plane.

02

RBAC & access control

Designing least-privilege roles and service accounts.

03

Pod security

Pod Security Standards, admission control, and runtime constraints.

04

Secrets & supply chain

Managing secrets and securing the image supply chain.

05

Network policies

Segmenting workloads and containing lateral movement.

06

CKS-aligned capstone

Harden a cluster against a realistic threat model.

Frequently asked questions

Do I need Kubernetes experience before this course?

Yes. This is a security-focused course that assumes you can already deploy and operate workloads on Kubernetes. If you are new to k8s, start with a fundamentals course first.

Does it prepare me for the CKS exam?

Yes. The curriculum maps directly to the Certified Kubernetes Security Specialist exam domains, and the labs mirror its hands-on format.