Certified Kubernetes Security Specialist (CKS): Unit 5

About this course

This course covers enforcing pod security, managing secrets, and using advanced container isolation tools like OPA Gatekeeper, GVisor, and Kata Containers. You’ll also learn to implement pod-to-pod encryption with Celium to secure service communication. By the end, you’ll know how to minimize vulnerabilities, control configurations, and protect your microservices—skills valuable for both the CKS exam and real-world security.

What you will learn

• Enforce pod security standards and prevent privilege escalation using security contexts and policy tools.
• Securely manage Kubernetes secrets, including encryption at rest and best practices for sensitive data.
• Implement advanced container isolation with sandbox pods, GVisor, and Kata Containers.
• Enable pod-to-pod encryption with Celium to protect inter-service communications.