Materials by Omkar Shelke

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Security

Lock Down Container Syscalls With Seccomp Profiles

by Omkar Shelke

Run a Deployment under the container runtime's seccomp profile, roll out a custom profile to the worker nodes, and fix a profile that blocks a syscall the application needs.

#cks #seccomp #securitycontext #syscalls

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Security

Roll Out Pod Security Standards Across Three Namespaces

by Omkar Shelke

The platform team is rolling out Pod Security Admission. A monitoring agent is already blocked, the storefront team needs a staged rollout, and payments must move to the strictest level without losing its running service.

#cks #pod-security #psa #securitycontext

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Networking, Security

Pick and Deploy the Least Permissive NetworkPolicy

by Omkar Shelke

The security team left five NetworkPolicy files on the workstation. Only one of them lets the frontend reach the backend while granting nothing more. Identify it and deploy it, unchanged.

#cka #ckad #cks #network-policy

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Security

Expose the Snake Game via TLS Ingress

by Omkar Shelke

A Snake game Deployment and ClusterIP Service are already running in the snake namespace. Create a Traefik Ingress that serves the game over HTTPS using an existing cert-manager-issued TLS Secret.

#cka #ckad #ingress #tls #traefik