CKA and CKS. Admission controllers, pod security standards, secrets-at-rest, image signing.

• 2026-09-09CKA Network Policies: least-permissive frontend to backend allowlists
• 2026-09-06CKS: projected ServiceAccount tokens and EKS IRSA least privilege
• 2026-09-03CKA Ingress — Host, Path, Backend, and the Path That Is Not a Service · Hedronite Lesson
• 2026-08-31CKS System Hardening — AppArmor, seccomp, and the Host That Is Not the Cluster · Hedronite Lesson
• 2026-08-28CKA App Lifecycle — Rolling Update, maxUnavailable, and the Surge That Is Not a Second Cluster · Hedronite Lesson
• 2026-08-25CKS Cluster Hardening — Anonymous Auth, NodeRestriction, and the API That Still Answers · Hedronite Lesson
• 2026-08-22CKA Storage — Retained PV, Default StorageClass, and the Volume That Survived the Claim · Hedronite Lesson
• 2026-08-19CKS Encryption at Rest — AES-CBC, Identity Fallback, and the Secret That Is Still Plaintext · Hedronite Lesson
• 2026-08-16CKA Workloads and Scheduling — Requests, Limits, Taints, PriorityClass, and the Pod the Scheduler Refused · Hedronite Lesson
• 2026-08-13CKS Runtime Security (20%) — Falco, Audit Policy, Immutable Containers, and gVisor RuntimeClass · Hedronite Lesson
• 2026-08-10CKA Troubleshooting (30%) — the Static-Pod Control Plane, Node NotReady, and Reading a Failing Pod · Hedronite Lesson
• 2026-08-07CKS — Supply Chain Security · Hedronite Cert-Prep Lesson
• 2026-08-04CKA — RBAC, ServiceAccounts, and Certificate-Based Authentication · Hedronite Cert-Prep Lesson
• 2026-08-01CKS — Cluster Setup · Hedronite Cert-Prep Synthesis Lesson
• 2026-07-29CKA — Services and Networking · Hedronite Cert-Prep Lesson
• 2026-07-26CKS — Pod Security Standards, PSA, and the SecurityContext · Hedronite Cert-Prep Lesson
• 2026-07-23CKA — Cluster Architecture and the Control Plane · Hedronite Cert-Prep Lesson
• 2026-07-15Kubernetes Workload Identity and Bound SA Tokens
• 2026-07-08Kubernetes Secrets Managementand Rotation
• 2026-07-01Kubernetes Supply-Chain Security: CKA + CKS
• 2026-06-24Kubernetes RBAC and Audit Policy: CKA + CKS
• 2026-06-17Kubernetes Runtime Security and the SecurityContext
• 2026-06-10Kubernetes Network Policies and the Default-Deny Discipline
• 2026-06-03Image Signing, Sigstore, and Admission-Time Verification — Hedronite CKA+CKS Cert Lesson
• 2026-05-27CKA + CKS — Admission Controllers, PSS, Secrets Encryption at Rest — Hedronite Cert-Prep Lesson