Certified Kubernetes Security Specialist (CKS)

Price
Net
VAT

Price
Price on Request

Duration
4 days

For companies and job seekers:
this course is 100% fundable!
 

Location

Course Language
English

Training Solutions
Online Live

Rapid deployments and automated platforms offer enormous benefits—but without a security strategy, new risks arise in production Kubernetes environments. What is needed are modern approaches that integrate security measures directly into infrastructure and deployment processes.

Key Topics

  • Kubernetes Security Best Practices
  • Hardening of Clusters and Workloads
  • Network and API Security
  • Handling Secrets and Policies
  • Container Scanning and Image Security
  • Logging, Auditing, and Monitoring
  • Security strategies for DevOps environments

Prerequisites
Knowledge of Kubernetes, containerization, and Linux, as well as a basic understanding of networking and cloud technologies.

Target Audience
Cloud engineers, DevOps engineers, system administrators, security teams, SREs, and technical professionals with a focus on Kubernetes.

In cloud-native environments, security is no longer treated as an afterthought. Modern platforms require integrated security processes that combine performance, transparency, and scalability.

Print as PDF
Course Content
  • Kubernetes Architecture
  • Use the CIS benchmark to verify the security configuration of Kubernetes components.
  • Pod-to-Pod Communication
  • Public Key Infrastructure (PKI) – Certificate Authority (CA).
  • Minimize the use of and access to GUI elements
  • Exercise caution when using service accounts, e.g., disable defaults, minimize permissions for newly created accounts.
  • Setting up appropriate security domains at the operating system level, for example, using PSP, OPA, and security contexts.
  • Pod security policy
  • Sandboxes for container runtime environments
  • Open Container Initiative
  • Kata Containers – Sandbox
  • Minimizing the storage requirements of base images through static analysis of user workloads (e.g., Kubernetes resources, Docker files)
  • Secure supply chain
  • ImagePolicyWebhook
  • Performing behavioral analysis of system calls, process, and file activities at the host and container levels to detect malicious activity.
  • Kernel vs. User Space
  • Falco
  • Immutability of containers in Runme
  • Use of audit logs for access monitoring
  • Tools for Kernel Backup
  • Isolation of the Linux kernel
  • Minimizing the operating system footprint – Reducing the attack surface

Frequently Asked Questions

  • Even minor configuration errors can leave entire container environments vulnerable. This is precisely where practical security measures come into play.
  • Secure cluster configuration, attack detection, network security, and protection for sensitive container workloads.
  • Tools used include Falco, Trivy, kube-bench, kubectl, and policy tools for secure deployments.
  • The focus is on real-world scenarios, concrete security measures, and common vulnerabilities.
  • Data loss, compromised containers, and unplanned outages can quickly have a significant impact.
  • Suitable for DevOps professionals, platform engineers, cloud teams, and those responsible for container security.
  • Cluster hardening, access control, runtime security, image scanning, and secure network communication.
  • Cloud-native platforms are growing rapidly. Companies are actively seeking professionals with security expertise in Kubernetes.

Do you have any further questions? Please contact us.