# Kubernetes
All Kubernetes notes →1 — CKAD Objectives
Maps the CNCF CKAD curriculum domains (application design, deployment, observability, networking, state) to weighted exam percentages and the specific kubectl imperative commands each domain tests
10 — Incident Response Exercises
Simulated compromise scenarios (exposed API server, malicious container escape, leaked service account token) that train the CKS incident-response workflow: isolate, capture forensic evidence, and remediate
11 — CKS Mock Exams
Full-length timed mock exams that simulate the CKS's 2-hour, security-remediation task format to train fast triage of hardening gaps, admission-control debugging, and forensic response under time pressure
2 — CKAD Hands-on Labs
Timed lab exercises that drill Deployment/Job/CronJob manifests, ConfigMap and Secret wiring, and multi-container Pod patterns using only kubectl and vim under the exam's browser-terminal constraints
3 — CKAD Mock Exams
Full-length timed mock exams that simulate the CKAD's 2-hour, 15-19 task format to train question triage, kubectl imperative speed, and flagging-for-review under real exam time pressure
4 — CKA Objectives
Maps the CNCF CKA curriculum domains (cluster architecture/installation, workloads, services/networking, storage, troubleshooting) to weighted exam percentages and the kubeadm/etcd/control-plane operations each domain tests
5 — Cluster Administration Labs
Hands-on labs covering kubeadm cluster bootstrap, etcd backup/restore, node cordon/drain/upgrade sequencing, and control-plane component troubleshooting via static pod manifests
6 — CKA Mock Exams
Full-length timed mock exams that simulate the CKA's 2-hour, multi-cluster task format to train fast context-switching between kubeconfig contexts, ssh-into-node debugging, and etcd/control-plane recovery under time pressure
7 — CKS Objectives
Maps the CNCF CKS curriculum domains (cluster hardening, minimize microservice vulnerabilities, supply chain security, monitoring/logging/runtime security) to weighted exam percentages and their required CIS benchmark and admission-control tooling
8 — CKS Security Labs
Hands-on labs applying PodSecurity admission, NetworkPolicy default-deny, image signature verification, and kube-bench CIS hardening remediation against a live cluster
9 — Runtime Security Labs
Hands-on labs using Falco rule tuning and seccomp/AppArmor profile enforcement to detect and block anomalous syscalls, container drift, and privilege escalation at runtime