Certified Kubernetes Security Specialist Study Guide for Cilium

Recent updates to the CNCF's Certified Kubernetes Security Specialist (CKS) Exam introduced Cilium for certain domains and competencies. This study guide aims to help the candidates prepare for the domain and competencies specific to Cilium in the CKS exam.

About the Certification

You can find everything you need about the Certification on its official page.

Cluster Setup – 15%

Topic

• Use Network security policies to restrict cluster-level access

Resources

• Getting Started with Cilium - Lab 🥼
• Identity Based - Cilium Docs 📖
• Network Policy Use Cases 📖
• From IP to identity: making cattle out of pets in cloud native 📖
• Zero Trust Security with Cilium 📖
• Network Policy - Cilium Docs 📖
• Policy Enforcement Mode - Cilium Docs 📖
• eCHO Episode 43: Deep dive on FQDN Policy 📺
• Network Policy Editor (Check out the tutorial section of the editor)🥼
• Cilium Host Firewall🥼
• Using Kubernetes Constructs In Policy📖

Minimize Microservice Vulnerabilities Domain – 20%

Topic

• Implement Pod-to-Pod encryption using (Cilium, Istio)

Resources

• Transparent Encryption Usecase 📖
• Tutorial: Transparent Encryption with IPsec and WireGuard
• eCHO Episode 79: Transparent Encryption with IPsec and WireGuard📺
• Cilium Transparent Encryption with IPsec and WireGuard📺
• Cilium Transparent Encryption with IPSec and WireGuard - Lab 🥼
• Transparent Encryption - docs 📖

Additional Resource

• KillerCoda CKS Cilium environment🥼