Kubernetes Security

I work at the intersection of Kubernetes and security — all five Kubernetes certifications (CKA, CKAD, CKS, KCNA, KCSA), a bias for vendor-neutral and open-source tooling, and a growing focus on policy as code and secure software delivery. This page collects the series.

Certifications

• Becoming a Kubestronaut Before GTA 6 — the full journey: five certifications, the failed attempts, and why I chose the cloud-native path.
• How to prepare for CKA? — courses, labs, discounts, exam-day logistics, and what to do if you fail.
• Navigating the CKA Certification: Lessons Learned — short notes from my second attempt.
• Preparing for CKS — the resource list I used (a complete CKS guide is coming).

Kubernetes fundamentals

• K8s Extensibility — CRDs, custom resources, and operators explained.
• Operator Pattern in Kubernetes — when and why to write an operator.
• Helm guide — packaging and deploying applications the practical way.
• K8 Secrets Management — notes on the secrets threat model.

Landscape

• State of DevSecOps 2025 — agentic security, supply chain, and policy as code.
• State of DevOps 2024 — platform engineering and the cost question.
• State of MLOps-AIOps — running ML workloads on Kubernetes.
• What is Model Context Protocol? — the building block behind AI agents and their new attack surface.

Coming next

• How I passed CKS after failing it — the complete preparation guide
• Kyverno from zero: writing your first policy that actually blocks something
• The Kubernetes hardening checklist — secure defaults for every cluster
• Killer.sh vs the real exam, measured across five certifications