How clhlc/cks_prepare works
CKS Prepare is a collection of Kubernetes security study materials, not an application with an evidenced runtime pipeline. The likely user workflow is to study the topic-specific guides and examples as preparation for the CKS exam. The tree shows capabilities across admission, access control, workload security, auditing, and assessment tools; source excerpts were not provided, so relationships between those topics are omitted.
Main entry points: Readme.md Image policy webhook · 02.ClusterRole/README.md ClusterRole · 03.Secrets/README.md Secrets · 06.ServiceAccount/README.md ServiceAccount
Components 17
Admission and access
- Image policy webhook
01.ImagePolicyWebhook/Readme.md - ClusterRole
02.ClusterRole/README.md - Secrets
03.Secrets/README.md - ServiceAccount
06.ServiceAccount/README.md - Role
16.Role/README.md
Workload security
- Network policy
04.NetworkPolicy/README.md - AppArmor
05.AppArmor/README.md - RuntimeClass
07.RuntimeClass/README.md - Pod security policy
08.PodSecurityPolicy/README.md
Audit and assessment
- Trivy
09.Trivy/README.md - kube-bench
10.kube-bench/README.md - Kubernetes audit
13.Audit/README.md - Sysdig
14.Sysdig/README.md
Platform hardening
- Dockerfile Pod
11.Dockerfile-Pod/README.md - Container
12.Container/README.md - API server
15.API-Server/README.md
Other components
- CKS learner
Connections 16
- CKS learner → Image policy webhook: studies
- CKS learner → ClusterRole: studies
- CKS learner → Secrets: studies
- CKS learner → ServiceAccount: studies
- CKS learner → Role: studies
- CKS learner → Network policy: studies
- CKS learner → AppArmor: studies
- CKS learner → RuntimeClass: studies
- CKS learner → Pod security policy: studies
- CKS learner → Trivy: studies
- CKS learner → kube-bench: studies
- CKS learner → Kubernetes audit: studies
- CKS learner → Sysdig: studies
- CKS learner → Dockerfile Pod: studies
- CKS learner → Container: studies
- CKS learner → API server: studies