Lock Down Container Syscalls With Seccomp Profiles
by Omkar Shelke
Run a Deployment under the container runtime's seccomp profile, roll out a custom profile to the worker nodes, and fix a profile that blocks a syscall the application needs.
Materials by Omkar Shelke
Omkar Shelke has published 104 challenges and prepared 1 playground.
All materials
Troubleshoot an Ingress That Returns 503 Service Unavailable
by Omkar Shelke
A railway app publishes two endpoints through an Ingress, and both return 503. Find out why and make both endpoints answer again.
Troubleshoot an Ingress That Returns 404 Not Found
by Omkar Shelke
An nginx Deployment runs fine, but its address returns an error. Trace the path from the Ingress to the Pod and fix the manifests.
Roll Out Pod Security Standards Across Three Namespaces
by Omkar Shelke
The platform team is rolling out Pod Security Admission. A monitoring agent is already blocked, the storefront team needs a staged rollout, and payments must move to the strictest level without losing its running service.
Challenge on Kubernetes
Safe Node Drain With a Disruption Budget
by Omkar Shelke
node-01 is due for maintenance, and it hosts two of the three checkout-api replicas. Add a PodDisruptionBudget so the drain can never take checkout below two available replicas, then drain the node.
Migrate a Traefik Ingress to the Gateway API and Cut Traffic Over
by Omkar Shelke
The storefront APIs are served through a Traefik Ingress with TLS and two path rules. Reproduce that configuration with a Gateway and an HTTPRoute on the same hostname, cut traffic over to it, and retire the Ingress.
This playground was created by an iximiuz Labs user and is provided with no warranty.
Rust Programming
A disposable Rust development environment with stable, beta, and nightly toolchains, bacon, cargo-nextest, rustfmt, clippy, rust-analyzer, and the musl target pre-installed.