Introduce

The author once shared a lot in this column CKA & CKS Content related to the examination site , For some reason jubao Off the shelf , But considering that many netizens and group friends want to know more CKS Relevant core knowledge , So here I sort out my previous records , I hope it can help you .
If you want to know more relevant knowledge , You can join K8S & Cloud native communication Q Group (284134230) Learn and improve with you …

Knowledge point

1. ServiceAccount relevant
   docs/tasks/configure-pod-container/configure-service-account/
2. kube-bench misarrangement
   github.com/aquasecurity/kube-bench
   Kubernetes Documentation/Reference/Component tools/kube-apiserver
   Kubernetes Documentation/Reference/Component tools/kubelet
   Kubernetes Documentation/Tasks/Administer a Cluster/Operating etcd clusters for Kubernetes
3. Default NetworkPolicy
   Kubernetes Documentation/Concepts/Services, Load Balancing, and Networking/Network Policies
4. Pod The security policy -PodSecurityPolicy
   Configure a Security Context for a Pod or Container
   Kubernetes Documentation/Concepts/Policies/Pod Security Policies
5. Role & RoleBinding
   Kubernetes Documentation/Reference/API Access Control/Using RBAC Authorization
6. Log audit audit-log
   Kubernetes Documentation/Tasks/Monitoring, Logging, and Debugging/Auditing
7. secret
   Kubernetes Documentation/Concepts/Configuration/Secrets
8. Optimize Dockerfile and deployment.yaml
   Best practices for writing Dockerfiles
   Kubernetes Documentation/Concepts/Security
   Kubernetes Documentation/Tasks/Configure Pods and Containers/Configure a Security Context for a Pod or Container
   Dockerfile Security Best Practice
   Docker Container Security 101: Risks and 33 Best Practices
9. RuntimeClass & gVisor
   github.com/google/gvisor
   Kubernetes Documentation/Concepts/Containers/Runtime Class
10. pod Security -stateless & immutable
    Kubernetes Documentation/Tasks/Configure Pods and Containers/Configure a Security Context for a Pod or Container
    Kubernetes Documentation/Concepts/Security/Pod Security Standards
11. modify API-Server Parameters
    Kubernetes Documentation/Reference/Component tools/kube-apiserver
    k8s Security 04–kube-apiserver Security configuration
12. ImagePolicyWebhook
    Kubernetes Documentation/Reference/API Access Control/Using Admission Controllers
13. Trivy Detect mirror
    github.com/aquasecurity/trivy
    trivy/v0.21.2/getting-started/quickstart/
14. AppArmor
    Kubernetes file / course / colony / Use AppArmor Restrict container access to resources
15. sysdig & falco
    docs.sysdig.com
    Kubernetes blogs/Monitoring Kubernetes with Sysdig

explain

1. This article only provides official document guidance related to core knowledge points , No zhenti Information , If you need to know the latest test site information, you can refer to github.com/cncf/curriculum Medium pdf .
2. Please don't discuss it in the comment area of this article zhenti Information , Thank you for your cooperation !