Enforce TLSv1.3-Only Policy on a Production NGINX Deployment
Update a production NGINX ConfigMap to restrict TLS to v1.3 only, then verify the change enforces the security policy.
Focused hands-on problems designed to help you hone your DevOps or Server Side skills. Some challenges are more educational, while others are based on real-world scenarios. The platform provides hints and feedback for each challenge, including automated solution checks.
Update a production NGINX ConfigMap to restrict TLS to v1.3 only, then verify the change enforces the security policy.
A Deployment is using a disk-backed emptyDir volume. Convert it to a memory-backed tmpfs volume for better performance — but make sure to set a size limit to prevent the Pod from exhausting the node's RAM.
Troubleshoot a Deployment where containers are repeatedly OOMKilled. Inspect Vertical Pod Autoscaler (VPA) recommendations and manually apply the recommended memory request and memory limit to stabilize the workload.
Update container images, container names, update strategy, and replica count in an existing multi-container Kubernetes Deployment.
Build a ReplicaSet by hand, observe self-healing, then update its template and end up with Pods running different images. Layer a Deployment on top and confirm the full ownership chain.
Identify and fix deprecated API versions in a Kubernetes manifest using the kubectl-convert plugin, then deploy the updated manifest.
Create a Deployment with specific scheduling, labels, and port configuration, then expose it externally using a NodePort Service.
Update a Deployment with a new image using a rolling update strategy, then roll back to the previous revision and verify the rollout history.
Convert an existing Pod manifest into a Deployment and move the hardcoded environment variables into a Kubernetes Secret.
Create a PersistentVolume with hostPath, bind it to a PersistentVolumeClaim, and mount it in a Deployment. This demonstrates storage management in Kubernetes.