Covers the security operations of Kubernetes clusters, from the 4Cs of cloud native security to RBAC, Pod Security Standards and Admission, NetworkPolicies and protecting Secrets with encryption at rest. Also covers policy engines such as OPA Gatekeeper and Kyverno, image provenance checks, Falco runtime detection, CIS Benchmark scans and hardening the API server and etcd.