Kyverno Certified Associate (KCA)

Position yourself as an expert in managing and securing Kubernetes environments. Kyverno expertise shows you understand the advanced aspects of cloud management and security, one of today’s most in-demand skill sets.

A KCA possesses comprehensive knowledge of Kyverno, the open-source policy management solution for Kubernetes. This includes expertise in defining and implementing security policies, ensuring compliance with industry standards, and actively contributing to the overall security posture of Kubernetes clusters. The KCA is proficient in configuring Kyverno policies, conducting security assessments, and collaborating to identify and mitigate security threats and vulnerabilities within Kubernetes environments.

Earning the KCA certification accelerates your journey toward senior cloud computing roles, establishes you as the "go-to" resource for cloud infrastructure security, sets you stand out as a capable problem-solver for positions such as SRE and Kubernetes Architect, strengthen your professional credibility among industry peers, and lets you center your career around specialized security tracks including DevSecOps and Cloud Security Engineer.

Fundamentals of Kyverno - 18%

• Kyverno Policies & Rules
• YAML Manifests
• Admission Controllers
• OCI Images

Installation, Configuration, and Upgrades - 18%

• Helm-based Installation and Configuration
• Kyverno Custom Resource Definitions (CRDs)
• Controller Configuration with Flags
• Configuring Kyverno RBAC, roles, and permissions
• High Availability Installations
• Upgrading Kyverno

Kyverno CLI - 12%

• apply
• test
• jp
• Installing Kyverno CLI

Applying Policies - 10%

• Applying Policy in Cluster
• Resource Selection
• Common Policy Settings for Kyverno Rules

Writing Policies - 32%

• Validation Rules
• Preconditions
• Background Scans
• Mutation Rules
• Generation Rules
• VerifyImage Rules
• Variables & API Calls in Policies
• JSON Patches
• Autogen Rules
• Cleanup Policies
• Common Expression Language (CEL)

Policy Management - 10%

• Policy Reports
• PolicyExceptions
• Kyverno Metrics

1. After purchase the exam voucher, please log into your portal LFOSSA website, your exam voucher will be available under "Exam & Learning Voucher" (password-protected).

2. You need an LFID to register for and take Linux Foundation (LF) certification exams. If you already have a Linux Foundation ID (LFID), you can redeem your exam voucher at https://trainingportal.linuxfoundation.org/redeem . If you do not have a LFID, click here (https://trainingportal.linuxfoundation.org/access/saml/login) to create one.

3. Log in to your LF Education portal,  enter your exam voucher code in the Enter Registration Code field and click Validate, then check the box: " I agree to The Linux Foundation Training Terms, Conditions & Policies and the Thought Industries Terms & Conditions." 

4. A confirmation message “Congrats, your code has been validated” will appear upon successful validation, confirming your voucher is valid. Click Register to complete the exam voucher registration.

5. Log in to LF Education global website with your LFID.   After the registration process, the certification exam will be available in the learner's portal within 24 hours, then the candidate will be available to take and schedule exam. 

Linux Foundation Global Certification & Confidentiality Agreement

Candidate Handbook

Important Instructions

Frequently Asked Questions

The Exam Voucher is non-refundable upon purchase.

Exam Voucher is redeemable within 90 days post-purchase; Exam eligibility will be valid for 1 year from your registration date. You now have 90 days + 365 days for exam preparation!