Enforce TLSv1.3-Only Policy on a Production NGINX Deployment
by Omkar Shelke
Update a production NGINX ConfigMap to restrict TLS to v1.3 only, then verify the change enforces the security policy.
Submissions: 14/15
Challenges
Focused hands-on problems designed to help you hone your DevOps or Server Side skills. Some challenges are more educational, while others are based on real-world scenarios. The platform provides hints and feedback for each challenge, including automated solution checks.
Disable API Server NodePort and Configure kube-scheduler Resource Requests
by Omkar Shelke
Configure the kube-scheduler static pod with CPU resource requests based on node allocatable, and disable the NodePort access to the Kubernetes API server so it is only reachable via ClusterIP.
Submissions: 21/28
Troubleshoot CrashLoopBackOff Caused by a Missing TLS Secret
by Omkar Shelke
A deployment is failing because the application cannot load its TLS certificate. Create the missing secret and mount it into the deployment so the Flask app can serve TLS traffic.
Submissions: 30/41
Schedule a Maintenance Pod with Host Namespace Access Using Taints, Tolerations, and NodeSelector
by Omkar Shelke
Learn how to taint a node, schedule a Pod using nodeSelector and tolerations, and share the host network, PID, and IPC namespaces with the Pod.
Submissions: 15/18
Control Cross-Namespace Traffic Using NetworkPolicy
by Omkar Shelke
A multi-tier application runs across two namespaces. Learn how to isolate the application tier and restrict database access to only the application namespace.
Submissions: 13/14