u/nopasswordhotspot

this was a hard exam but i managed to clear it first time. some of the questions take a lot of time and its easy to get stuck unless you have repeatedly practiced resolving issues and configuring them. i passed the cka on my third attempt but my cks on my first.

i saw another post of what came up and this what what i recall.

1. kubelet hardening
2. cluster rolebinding
3. configure admission controller and webhook
4. dockerfile hardening
5. falco configuration
6. hardening pod immutable fs/prevent priv escalation
7. configure aduit policy
8. network policies
9. ingress cilium
10. service account token/hardening
11. upgrade kubeadm cluster
12. bom/spdx to idenity package
13. pss configuration for pod
14. docker daemon update permissions
15. istio/mtls configuration
16. create a tls secret

wish you good luck with this one. its very hard!