This repository is a companion to the CKS (Certified Kubernetes Security) course, providing shell scripts and Kubernetes manifests to set up a learning environment and demonstrate security hardening techniques. It is not a running application but a collection of infrastructure-as-code resources that users execute on cloud VMs to create a Kubernetes cluster and apply security configurations. The core functionality includes automated installation scripts for Kubernetes master and worker nodes on Ubuntu 24.04 using kubeadm and containerd, along with a Weave CNI plugin for networking. The course-content directory contains dozens of YAML files that illustrate network policies, Open Policy Agent (OPA) gatekeeper policies, secure ingress, node metadata protection, runtime auditing, supply chain security (image footprint, static analysis, vulnerability scanning, image policy webhooks), and system hardening (AppArmor, seccomp). Architecturally, the repo is a set of entry points: the install scripts (cluster-setup/latest/install_master.sh, install_worker.sh) and the Kubernetes manifests applied via kubectl. External dependencies include Ubuntu 24.04, Kubernetes packages, containerd, Podman, and various security tools (Falco, Trivy, Clair, conftest). The code is well-organized and current, with several reusable security profiles (seccomp, AppArmor, OPA policies) that demonstrate non-obvious skill and can be extracted for other projects.