| 🛡️ 01_foundations.md | Cryptography Basics | Plaintext, Symmetric vs Asymmetric, Signatures, X.509, CA, TLS/mTLS Handshake |
| 🏗️ 02_k8s_pki_architecture.md | Kubernetes PKI Topology | Control Plane CA, etcd CA, Client vs Server Certs, Component Matrix |
| 🛠️ 03_hands_on_generation.md | Manual Cert Provisioning | OpenSSL commands, Root CA setup, client/server certificates, SAN configuration |
| 🤖 04_k8s_certificates_api.md | Built-in K8s Automation | CertificateSigningRequest API, Kube-Controller-Manager, Approval workflow |
| 🔄 05_cert_manager.md | Workload Cert Automation | [[cert-manager]] architecture, Issuers, Certificates, Ingress TLS integration |
| 🔑 06_secrets_encryption.md | Data Security at Rest | etcd encryption configuration, provider hierarchy, key rotation |
| 📝 07_review_and_roadmap.md | Plan Review & Action plan | Learning plan evaluation, pitfalls to avoid, practical verification labs |