CKAD — Security Contexts & ServiceAccounts
Security Contexts & ServiceAccounts
Security is the largest CKAD domain at 25%. You need to understand how to run containers securely — controlling user IDs, capabilities, filesystem access, and API authentication with ServiceAccounts.
This chapter covers SecurityContexts, Linux capabilities, and ServiceAccounts from the Application Environment, Configuration & Security domain.
| Topic | What You’ll Learn |
|---|---|
| Security Contexts | Pod-level vs container-level settings, runAsUser, readOnly filesystem |
| Linux Capabilities | Dropping ALL, adding specific capabilities, running as non-root |
| ServiceAccounts | Default SA, creating, assigning, disabling token auto-mount |
| RBAC for ServiceAccounts | Role, RoleBinding, testing permissions |
| Production Security | Putting it all together — production-ready Pod spec |
| Hands-On Lab | Security labs with 5 practice questions |
