Challenges | iximiuz Labs

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Networking, Security

Pick and Deploy the Least Permissive NetworkPolicy

by Omkar Shelke

The security team left five NetworkPolicy files on the workstation. Only one of them lets the frontend reach the backend while granting nothing more. Identify it and deploy it, unchanged.

#cka #ckad #cks #network-policy

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Security

Expose the Snake Game via TLS Ingress

by Omkar Shelke

A Snake game Deployment and ClusterIP Service are already running in the snake namespace. Create a Traefik Ingress that serves the game over HTTPS using an existing cert-manager-issued TLS Secret.

#cka #ckad #ingress #tls #traefik

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Security

Enforce TLSv1.3-Only Policy on a Production NGINX Deployment

by Omkar Shelke

Update a production NGINX ConfigMap to restrict TLS to v1.3 only, then verify the change enforces the security policy.

#cka #ckad #tls #configmap #deployment

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Security, Networking

Control Cross-Namespace Traffic Using NetworkPolicy

by Omkar Shelke

A multi-tier application runs across two namespaces. Learn how to isolate the application tier and restrict database access to only the application namespace.

#ckad #cka #cks #network-policy