Kubernetes · course, labs and mock exams
KCA course and practice labs
Kyverno Certified Associate: 6 modules of lessons and demos, 8 tasks from 8 lab templates on real kubeadm clusters, and 1 timed mock exams.
Labs store Kyverno policy objects and read them with kubectl. They do not install the Kyverno controllers.
- Modules
- 6
- Lessons
- 14
- Demos
- 0
- Labs
- 8
- Tasks
- 8
- Mock exams
- 1
The Linux Foundation · 90 minute exam
What you'll learn
Every domain of the exam, weighted like the exam
All 6 domains in the public curriculum. 3 of them already have labs.
Writing Policies
32%of the exam
11 competencies · 6 labs
Fundamentals of Kyverno
18%of the exam
4 competencies · 0 labs
Installation, Configuration, and Upgrades
18%of the exam
6 competencies · 0 labs
Kyverno CLI
12%of the exam
4 competencies · 0 labs
Applying Policies
10%of the exam
3 competencies · 1 labs
Policy Management
10%of the exam
3 competencies · 1 labs
What's included
A full course, not just a question bank
14 lessons
Short lessons for the exam competencies, with commands to copy and links to the official docs.
0 demos
Walk through a task step by step before you try it yourself.
8 hands-on labs
8 tasks with their variants, on a kubeadm cluster, graded check by check.
6 module quizzes
37 original questions, with an explanation for every answer.
1 mock exams
1 full mocks and 0 domain mocks. Pass mark 75%.
Certificate of completion
From The Cloud Panda when you finish the course. It is a course certificate, not one from The Linux Foundation.
Curriculum
6 modules
14 lessons and 0 demos: 1 h 58 min of reading and demos, about 3.5 hours with the practice. The lessons open with a free account.
01Fundamentals
Policies and rules as YAML, where they sit in admission, and what an OCI image means for Kyverno. Domain: Fundamentals of Kyverno.
- lessonPolicies, rules, and the manifest8 min
- lessonAdmission, and policies as OCI images8 min
02Installation and upgrades
Helm, the CRDs, controller flags, RBAC, more than one replica, and what an upgrade has to touch. Domain: Installation, Configuration, and Upgrades.
- lessonHelm, CRDs, and flags9 min
- lessonRBAC, high availability, and upgrades8 min
03Kyverno CLI
Install the kyverno binary, apply a policy to a file, run a test directory, and evaluate a JMESPath with jp. Domain: Kyverno CLI.
- lessonInstall the CLI and apply a policy offline8 min
- lessonkyverno test and kyverno jp8 min
04Applying policies
Put a policy in the cluster, select the right resources, and set the switches every rule shares. Domain: Applying Policies.
- lessonApply a policy in the cluster8 min
- lessonMatch, exclude, and the settings on a rule9 min
05Writing policies
Validate, mutate, generate, and verify images. Preconditions, variables, JSON patches, autogen, cleanup, and CEL. Domain: Writing Policies.
- lessonValidation, preconditions, and background scans9 min
- lessonMutation and generation9 min
- lessonImage verification and variables9 min
- lessonAutogen, cleanup, and CEL9 min
06Policy management
Reports, exceptions, and the metrics a running Kyverno exports. Domain: Policy Management.
- lessonPolicy reports and exceptions9 min
- lessonMetrics7 min
How a lab works
The same loop as a hands-on exam
A task, a live cluster, and checks that read the cluster.
We set the scene
A setup script puts a live environment into a real state, often a broken one: a broken workload, a missing permission, a Service with no endpoints. You get the task and a terminal.
You fix it
With the real tools and the official documentation, exactly as you will in the exam. Nothing is simulated and there are no multiple-choice shortcuts.
Checks grade it
Each lab runs checks against the live environment and shows which passed. There is no answer text to match: if a check fails, you know exactly what is left.
Lab library
Every lab, by exam domain
8 hands-on tasks across 6 domains, about 2 hours of practice.
- Writing Policies32%
- Fundamentals of Kyverno18%
- Installation, Configuration, and Upgrades18%
- Kyverno CLI12%
- Applying Policies10%
- Policy Management10%
Writing Policies 32% of the exam · 6 labs
Validation Rules
- WR1Validation policy requires a label12 min
Preconditions
- WR4Validation runs only for a tier12 min
Background Scans
No kubectl lab for this competency.
Mutation Rules
- WR2Mutation adds a label12 min
Generation Rules
- WR3Generate a ConfigMap for a namespace12 min
VerifyImage Rules
- WR6verifyImages rule for one registry12 min
Variables & API Calls in Policies
No kubectl lab for this competency.
JSON Patches
No kubectl lab for this competency.
Autogen Rules
No kubectl lab for this competency.
Cleanup Policies
No kubectl lab for this competency.
Common Expression Language (CEL)
- WR5CEL validation limits replicas12 min
Fundamentals of Kyverno 18% of the exam · 0 labs
Kyverno Policies & Rules
No kubectl lab for this competency.
YAML Manifests
No kubectl lab for this competency.
Admission Controllers
No kubectl lab for this competency.
OCI Images
No kubectl lab for this competency.
Installation, Configuration, and Upgrades 18% of the exam · 0 labs
Helm-based Installation and Configuration
No kubectl lab for this competency.
Kyverno Custom Resource Definitions (CRDs)
No kubectl lab for this competency.
Controller Configuration with Flags
No kubectl lab for this competency.
Configuring Kyverno RBAC, roles, and permissions
No kubectl lab for this competency.
High Availability Installations
No kubectl lab for this competency.
Upgrading Kyverno
No kubectl lab for this competency.
Kyverno CLI 12% of the exam · 0 labs
apply
No kubectl lab for this competency.
test
No kubectl lab for this competency.
jp
No kubectl lab for this competency.
Installing Kyverno CLI
No kubectl lab for this competency.
Applying Policies 10% of the exam · 1 labs
Applying Policy in Cluster
No kubectl lab for this competency.
Resource Selection
- AP1Match a namespace and exclude one pod12 min
Common Policy Settings for Kyverno Rules
No kubectl lab for this competency.
Policy Management 10% of the exam · 1 labs
Policy Reports
No kubectl lab for this competency.
PolicyExceptions
- PM1PolicyException for one pod12 min
Kyverno Metrics
No kubectl lab for this competency.
Mock exams
1 timed mock exams
Pass mark 75%. A task appears in only one mock.
| Mock | Kind | Tasks | Time |
|---|---|---|---|
| KCA Full Mock 01 | Full exam | 8 | 90 min |
Start the KCA course
A free account opens the lessons. The free starter labs on the CKA stay the CKA labs.