Challenges | iximiuz Labs

This challenge was prepared for you by the iximiuz Labs team.

Challenge on Containers, Kubernetes

Edit a File in a Running Kubernetes Pod: a Non-Root Container Case

by Ivan Velichko

Learn how to edit a file in a running Kubernetes Pod when the container's user has no write access to it.

#kubectl #kubectl-debug #ephemeral-container #troubleshooting

This challenge was prepared for you by the iximiuz Labs team.

Challenge on Kubernetes, Containers

Edit a File in a Running Kubernetes Pod: a Distroless Container Case

by Ivan Velichko

Learn how to edit a file in a distroless container that runs as a non-root user in a Kubernetes namespace that enforces the baseline Pod Security Standard.

#kubectl #kubectl-debug #ephemeral-container #distroless #troubleshooting

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Networking

Use a Kubernetes Job to Test NATS Pub/Sub

by Omkar Shelke

A payment service subscribes to payment requests through NATS. Run the checkout team's test script as a Job in the checkout namespace, with the required settings, and make sure the payment request arrives.

#ckad #cka #jobs #pub-sub #troubleshooting

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes

Fix a Deployment Stuck in ImagePullBackOff

by Omkar Shelke

A freshly rolled out Deployment has its Pods stuck in ImagePullBackOff, and the catalog page it serves returns 503. Read what the cluster reports about the failed pulls, find out why the image does not pull, and get the Pods running.

#secrets #imagepullbackoff #ckad #cka #troubleshooting

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes

Safe Node Drain With a Disruption Budget

by Omkar Shelke

node-01 is due for maintenance, and it hosts two of the three checkout-api replicas. Add a PodDisruptionBudget so the drain can never take checkout below two available replicas, then drain the node.

#cka #pdb #poddisruptionbudget #drain #maintenance

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Security

Lock Down Container Syscalls With Seccomp Profiles

by Omkar Shelke

Run a Deployment under the container runtime's seccomp profile, roll out a custom profile to the worker nodes, and fix a profile that blocks a syscall the application needs.

#cks #seccomp #securitycontext #syscalls

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Security

Roll Out Pod Security Standards Across Three Namespaces

by Omkar Shelke

The platform team is rolling out Pod Security Admission. A monitoring agent is already blocked, the storefront team needs a staged rollout, and payments must move to the strictest level without losing its running service.

#cks #pod-security #psa #securitycontext

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Networking

Troubleshoot an Ingress That Returns 503 Service Unavailable

by Omkar Shelke

A railway app publishes two endpoints through an Ingress, and both return 503. Find out why and make both endpoints answer again.

#ingress #probes #troubleshooting #ckad #cka

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Networking

Troubleshoot an Ingress That Returns 404 Not Found

by Omkar Shelke

An nginx Deployment runs fine, but its address returns an error. Trace the path from the Ingress to the Pod and fix the manifests.

#ingress #service #ckad #troubleshooting #cka

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes

Node Is Ready, but Pods Won't Schedule

by Omkar Shelke

node-02 is back from a kernel upgrade but still shows Ready,SchedulingDisabled, and the Pods that can only run on it are stuck in Pending. Bring the node back into service and get the workload running, without touching the workload itself.

#cka #scheduling #nodes #troubleshooting