Challenges

Focused, hands-on problems for sharpening your DevOps and server-side skills. Some teach specific concepts while others mirror real-world scenarios. Every challenge includes hints, feedback, and automated solution checks.

Collection
Category
Difficulty
Challenge

CKA Practice: Renew Expiring Control Plane Certificates

kubectl is dead: the kube-apiserver certificate expired and the control plane is down, while the workload quietly keeps serving. Diagnose the expiry offline, renew the certificates, bring the control plane back, and prove the cluster recovered.

Challenge

Troubleshoot CrashLoopBackOff Caused by a Missing TLS Secret

A deployment is failing because the application cannot load its TLS certificate. Create the missing secret and mount it into the deployment so the Flask app can serve TLS traffic.

Challenge

Schedule a Maintenance Pod with Host Namespace Access Using Taints, Tolerations, and NodeSelector

Learn how to taint a node, schedule a Pod using nodeSelector and tolerations, and share the host network, PID, and IPC namespaces with the Pod.

Challenge

Control Cross-Namespace Traffic Using NetworkPolicy

A multi-tier application runs across two namespaces. Learn how to isolate the application tier and restrict database access to only the application namespace.