Use Code TRYNOW15 for a One-Time, Extra 15% OFF at KodeKloud
Certification
DevOps

Kyverno Certified Associate

Step into Kubernetes-native policy management! Our Kyverno Certified Associate (KCA) Course equips you to secure, standardize, and automate clusters. Hands-on labs, real-world demos, and mock exams prep you for KCA success. Enroll today!
Mariam Fahmy
Software Engineer & Kyverno Maintainer
DevOps Pre-Requisite Course
Play Button
Fill this form to get a notification when course is released.
book
13
Lessons
book
Challenges
Article icon
108
Topics

What you’ll learn

Our students work at..

Description

Welcome to the Kyverno Certified Associate (KCA) Certification Course!

Step into the world of Kubernetes-native policy management and governance with Kyverno. This comprehensive course is designed to equip you with the knowledge and hands-on skills to author, apply, and manage policies that secure, standardize, and automate Kubernetes environments. Through structured lectures, in-depth demos, hands-on labs, real-world scenarios, and dedicated mock exams, this course ensures you are fully prepared to clear the KCA exam and apply Kyverno effectively in production.

Course Modules

Kyverno Introduction

Understand what Kyverno is, explore its architecture and core components, install it on your cluster, and learn the structure of Kyverno policies to build a strong foundation.

Resource Filters

Learn how to target Kubernetes resources using match, any/all, and exclude statements, apply preconditions and JMESPath expressions, and practice these filters through hands-on labs.

Validate Rules

Master Kyverno’s validation capabilities to enforce security and configuration standards, including failure actions, patterns, deny rules, ForEach constructs, Pod Security Standards, exemptions, CEL expressions, and autogen rules.

Mutate Rules

Use JSONPatch and strategic merge patch to modify resources dynamically, implement conditional anchors, mutate existing resources, and apply ForEach mutations for bulk updates.

Generate Rules

Automate resource creation using data sources, clone sources, clone lists, and generate existing rules while understanding synchronization behavior to maintain consistent cluster state.

External Data Sources

Enrich policies with external data from ConfigMaps, API calls, global contexts, and container image registries to make policy enforcement dynamic and context-aware.

ImageVerify Rules

Implement container image signing and verification using Notary, validating both image signatures and attestations to secure the Kubernetes supply chain.

Policy Exceptions

Configure and manage policy exceptions and Pod Security exemptions to allow flexibility in governance without compromising cluster security.

Cleanup Policies

Automate the removal of unused or outdated resources using cleanup policies and labels to maintain a clean and compliant Kubernetes environment.

Reporting

Generate PolicyReports from admission requests and background scans, understand the report schema, and interpret results to improve visibility into policy enforcement.

Kyverno CLI

Master the kyverno CLI for policy management, using apply and test commands to validate, test, and deploy policies efficiently in real-world scenarios.

Hands-On Labs and Real-World Projects

  • Deploy and manage Kyverno on real Kubernetes clusters.
  • Implement real-world policies to enforce best practices, secure workloads, and automate resource management.

Mock Exams and Exam Readiness

To help you succeed, this course includes mock exams that mirror the format, difficulty, and coverage of the actual KCA exam. These practice tests will help you evaluate your readiness, reinforce your learning, and boost your confidence.

About This Certification

The Kyverno Certified Associate (KCA) is a foundational certification that validates your understanding of Kyverno concepts, policy design, and operational best practices.
Earning this certification demonstrates your ability to secure and govern Kubernetes clusters using Kyverno, ensuring compliance and standardization at scale.

Who Should Enroll

  • Kubernetes administrators and platform engineers.
  • DevOps and security engineers focused on policy enforcement and cluster governance.
  • Cloud-native practitioners aiming to specialize in policy-as-code.
  • Anyone preparing for the Kyverno Certified Associate (KCA) exam.

Prerequisites

  • Foundational knowledge of Kubernetes concepts and objects.
  • Basic understanding of YAML, container security, and cloud-native principles.

Empower your Kubernetes journey with policy-as-code — enroll today and become a Certified Kyverno Associate! 🚀

Read More

What our students say

About the instructor

Mariam Fahmy is a Software Engineer at Nirmata and a maintainer of Kyverno, the Kubernetes-native policy engine. With deep expertise in policy-as-code, Mariam has contributed extensively to the growth and evolution of Kyverno, from validating and mutating rules to pioneering new CEL-based policy types. She is also an active mentor in the CNCF LFX Mentorship program, where she guides and supports new contributors in open source, helping them gain confidence and develop their skills.Beyond her technical contributions, Mariam regularly shares knowledge through talks, labs, and workshops focused on Kubernetes governance, cloud security, and policy management. She is passionate about building community, empowering others to succeed in open source, and advancing cloud-native security practices at scale.

No items found.

Course Introduction

lock
lock
2
Topics
Lesson Content

Module Content

Course Introduction 03:49
How to Reach Out to KodeKloud and Engage with the Community

Kyverno Introduction

lock
lock
6
Topics
Lesson Content

Module Content

Section Introduction 01:30
Kyverno Overview 03:01
Kyverno Architecture - Part 1 06:01
Kyverno Architecture - Part 2 09:30
Installing Kyverno on Your Cluster 04:21
Kyverno Policies 08:09

Resource Filters

lock
lock
15
Topics
Lesson Content

Module Content

Section Introduction 02:49
Match Statements 14:36
Match Statements 06:21
Lab - Match Statements
Any and All Statements 05:32
Demo: Any and All Statements 04:54
Lab - Any/All Resource Filters
Exclude Statements 06:13
Demo: Exclude Statements 04:20
Lab - Exclude Statements
Introduction to JMESPath 06:42
Preconditions - Part 1 06:05
Preconditions - Part 2 06:44
Demo: Preconditions 04:00
Lab - Preconditions

Validate Rules

lock
lock
31
Topics
Lesson Content

Module Content

Section Introduction 02:58
Basic Validations 05:03
Failure Action 10:16
Demo: Failure Action 11:14
Lab - Failure Action
Failure Action Overrides 03:24
Patterns - Wildcards 06:18
Demo: Patterns - Wildcards 04:19
Patterns - Operators 05:15
Demo: Patterns - Operators 05:56
Lab - Patterns - Operators
Patterns - Anchors (Part 1) 11:39
Patterns - Anchors (Part 2) 11:44
Demo: Patterns - Anchors 10:20
Lab - Patterns - Anchors
anyPattern 07:46
Deny rules 06:24
Lab - Deny rules
ForEach - Part 1 07:38
ForEach - Part 2 06:00
Demo: ForEach 05:58
Lab - ForEach
Pod Security 07:53
Lab - Pod Security
Pod Security Exemptions 07:33
Lab - Pod Security Exemptions - Part 1
Lab - Pod Security Exemptions - Part 2
CEL Expressions - Part 1 09:36
CEL Expressions - Part 2 12:55
Lab - CEL Expressions
Autogen Rules 10:11

Mutate Rules

lock
lock
10
Topics
Lesson Content

Module Content

Section Introduction 03:38
JSONPatch 08:47
Lab - JSONPatch
Strategic Merge Patch 04:54
Lab - Conditional anchors
Mutate Existing Resources - Part 1 09:11
Mutate Existing Resources - Part 2 06:31
Lab - Mutate Existing Resources
ForEach 07:17
Lab - ForEach

Generate Rules

lock
lock
9
Topics
Lesson Content

Module Content

Section Introduction 04:37
Data Source 09:07
Data Source - Syncronization Effect 04:38
Lab - Data Source
Clone Source 08:01
Lab - Clone Source
Clone List 04:08
Generate Existing 04:21
Lab - Generate Existing

External Data Sources

lock
lock
7
Topics
Lesson Content

Module Content

Section Introduction 03:38
Variables from ConfigMaps 09:44
Lab - Variables from ConfigMaps
Variables from API Calls 16:10
Lab - Variables from API Calls
Global Context 10:18
Variables from Image Registeries 09:58

ImageVerify Rules

lock
lock
5
Topics
Lesson Content

Module Content

Section Introduction 03:11
Container Image Signing 08:43
Image Signature using Notray 06:00
Verify Image Signature using Notray 09:29
Verify Image Attestations using Notray 11:12

Policy Exceptions

lock
lock
4
Topics
Lesson Content

Module Content

Section Introduction 02:10
Policy Exceptions 09:44
Lab - Policy Exceptions
Pod Security Exemptions 05:22

Cleanup Policies

lock
lock
4
Topics
Lesson Content

Module Content

Section Introduction 01:56
Cleanup Policy 08:11
Lab - Cleanup Policies
Cleanup Label 07:13

Reporting

lock
lock
6
Topics
Lesson Content

Module Content

Section Introduction 03:11
PolicyReport Schema 08:11
PolicyReport from Admission Requests 07:13
Lab - PolicyReport from Admission Requests
PolicyReport from Background Scan 07:57
Lab - PolicyReport from Background Scan

Kyverno CLI

lock
lock
7
Topics
Lesson Content

Module Content

Section Introduction 02:43
`apply` Command - Part 1 08:55
`apply` Command - Part 2 07:10
`apply` Command - Part 3 04:58
Lab - `apply` Command
`test` Command 10:33
Lab - `test` Command

Mock Exams

lock
lock
2
Topics
Lesson Content

Module Content

Mock Exam - 1
Mock Exam - 2
Play Button
Fill this form to get a notification when course is released.
This course comes with hands-on cloud labs
book
13
Modules
book
Lessons
Article icon
108
Lessons
check mark
Course Certificate
Videos icon
08.83
Hours of Video
laptop
Hours of Labs
Story Format
Videos icon
Videos
Case Studies
ondemand_video icon
Demo
laptop
Labs
laptop
Cloud Labs
checklist
Mock exams
Quizzes
Discord Community Support
people icon
Community support
language icon
English
Closed Captions