Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

Demos for several kubernetes security features

Recreation of common Pod Security Policy configuration in other common Kubernetes policy engines

A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod

A Kubewarden Policy that limits the ability to create privileged containers

Replacement for the Kubernetes Pod Security Policy that controls the usage of /proc mount types

This Kubewarden Policy is a replacement for the Kubernetes Pod Security Policy that controls containers user and groups

A Kubewarden Pod Security Policy that controls usage of allowPrivilegeEscalation

A Kubewarden Pod Security Policy that controls usage of AppArmor profiles

A Pod Security Policy that controls Container Capabilities

Replacement for the Kubernetes Pod Security Policy that controls the usage of fsGroup in the pod security context

A Kubewarden Pod Security Policy that controls usage of Seccomp profiles

Replacement for the Kubernetes Pod Security Policy that controls the usage of hostpaths

A Kubewarden policy that enforces root filesystem to be readonly

A Kubewarden policy that controls usage of sysctls

Replacement for the Kubernetes Pod Security Policy that controls the usage of volumes

Replacement for the Kubernetes Pod Security Policy that controls the allowed `flexVolume` drivers

Replacement for the Kubernetes Pod Security Policy that controls the usage of host namespaces

Replacement for the Kubernetes Pod Security Policy that controls the usage of SELinux

Use Kubernetes Pod Security Policy to secure your clusters.