Challenges | iximiuz Labs

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Medium, on Kubernetes, Networking

Extend the Cluster with an Additional Service CIDR for the dev Team

by Omkar Shelke

Add a new, separate Service CIDR range for the dev team using the ServiceCIDR API object — without touching or restarting the cluster's default Service CIDR — then create a Service with an explicit ClusterIP inside that new range and verify DNS resolution.

cka ckad service service-cidr cluster-ip

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Medium, on Kubernetes, Networking

Pin a Client to the Same Pod Using Service Session Affinity

by Omkar Shelke

Configure a Kubernetes Service so that requests from the same client IP are always routed to the same backend Pod for a sustained period, using ClientIP-based session affinity.

cka ckad service session-affinity load-balancing

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Medium, on Kubernetes, Networking

Canary Deployment Using Kubernetes Gateway API Traffic Splitting

by Omkar Shelke

Implement a canary deployment strategy using the Kubernetes Gateway API. Route the majority of traffic to a stable version of a service while gradually shifting a small percentage to a new canary version.

cka gateway-api httproute canary

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Medium, on Kubernetes, Networking

Cross-Namespace Gateway and HTTPRoute Binding with Kubernetes Gateway API

by Omkar Shelke

Configure a Kubernetes Gateway API setup with the Gateway in a dedicated infrastructure namespace and HTTPRoute in the application namespace, using path-based routing to expose railway platform services.

cka gateway-api httproute nginx

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Medium, on Kubernetes, Networking

Expose Internal Services Using NGINX Kubernetes Gateway API

by Omkar Shelke

Configure a Kubernetes Gateway API setup to expose aviation platform services using path-based routing for flight and booking services.

cka gateway-api httproute nginx

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Medium, on Kubernetes, Networking

Configure Ingress Routing with Traefik for a Multi-Service Shop Application

by Omkar Shelke

Create an Ingress resource for a shop application with path-based routing to multiple backend services and configure /etc/hosts for local DNS resolution.

cka ckad ingress traefik routing

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Medium, on Kubernetes, Networking

Resolve a Container Port Conflict and Expose Multiple Ports Through a Single Service

by Omkar Shelke

A Deployment with two nginx containers has a port conflict — both containers use port 80. Fix the conflict by updating the ConfigMap, mounting it into the second container, updating the containerPort, and exposing both containers via a NodePort Service.

ckad cka multi-container service

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Medium, on Kubernetes, Networking

Enforce a NetworkPolicy to Block All Traffic Except DNS

by Omkar Shelke

A Pod must be fully isolated from the cluster network. Deny all incoming traffic and block all outgoing traffic except DNS queries on port 53.

ckad cka cks network-policy

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Medium, on Kubernetes, Security, Networking

Control Cross-Namespace Traffic Using NetworkPolicy

by Omkar Shelke

A multi-tier application runs across two namespaces. Learn how to isolate the application tier and restrict database access to only the application namespace.

ckad cka cks network-policy

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge, Easy, on Kubernetes, Networking

CKA Practice: Configure Network Policies To Restrict Traffic Between Pods

by Adam Leskis

This exercise tests your ability to configure kubernetes network policies to make sure only pods with specific labels can communicate with each other.

cka network-policies