Kubernetes security & hardening

Assumes you already administer clusters (CKA-level). Twenty-four lessons across the six official CKS domains, one topic at a time: cluster setup and network policy, cluster and API hardening, host and kernel hardening with seccomp and AppArmor, microservice security from security contexts to sandboxes, a signed and scanned supply chain, and runtime detection with Falco and audit logs — each section ends with a self-test.