Challenges | iximiuz Labs

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Easy, on Kubernetes, Networking

Access the Kubernetes API Server via kubectl proxy

by Omkar Shelke

Use kubectl proxy to open a local, already authenticated HTTP endpoint to the Kubernetes API server, then use curl to list every Secret in the gliese-581 namespace and save the raw JSON response to /home/laborant/secret-list.json.

#cka #ckad #kubectl-proxy #api-server #secrets

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Hard, on Kubernetes, Security

Disable API Server NodePort and Configure kube-scheduler Resource Requests

by Omkar Shelke

Configure the kube-scheduler static pod with CPU resource requests based on node allocatable, and disable the NodePort access to the Kubernetes API server so it is only reachable via ClusterIP.

#cks #cka #kube-scheduler #api-server