Lock Down Container Syscalls With Seccomp Profiles
by Omkar Shelke
Run a Deployment under the container runtime's seccomp profile, roll out a custom profile to the worker nodes, and fix a profile that blocks a syscall the application needs.
Explore the Catalog
Tutorials, challenges, courses, skill paths, playgrounds, and more — search the whole library in one place.
Roll Out Pod Security Standards Across Three Namespaces
by Omkar Shelke
The platform team is rolling out Pod Security Admission. A monitoring agent is already blocked, the storefront team needs a staged rollout, and payments must move to the strictest level without losing its running service.
Pick and Deploy the Least Permissive NetworkPolicy
by Omkar Shelke
The security team left five NetworkPolicy files on the workstation. Only one of them lets the frontend reach the backend while granting nothing more. Identify it and deploy it, unchanged.
Challenge on Kubernetes
Puzzle Block Game Application Is Gone, Recover It from etcd
by Omkar Shelke
Practice real-world disaster recovery — restore a deleted production workload by restoring an etcd snapshot and reconfiguring the etcd static pod to use the recovered data directory.