Multi-Container Pod Security Design
Create a multi-container Pod with different user IDs per container while sharing a common group ID at the Pod level for collaborative file access.
Focused hands-on problems designed to help you hone your DevOps or Server Side skills. Some challenges are more educational, while others are based on real-world scenarios. The platform provides hints and feedback for each challenge, including automated solution checks.
Create a multi-container Pod with different user IDs per container while sharing a common group ID at the Pod level for collaborative file access.
Update a production NGINX ConfigMap to restrict TLS to v1.3 only, then verify the change enforces the security policy.
A Deployment is using a disk-backed emptyDir volume. Convert it to a memory-backed tmpfs volume for better performance — but make sure to set a size limit to prevent the Pod from exhausting the node's RAM.
A distroless pod running in the cherry namespace has no shell or debugging tools. Use kubectl debug to attach an ephemeral container, test connectivity to the request-logger service, and verify the request was received in its logs.
A Deployment is stuck with Pods in ContainerCreating state because the required ConfigMap was not created. Fix the issue to make the application accessible.
Create a Pod in the processing namespace that runs a short task and exits successfully, reaching a Completed status without using a Job controller.
Update container images, container names, update strategy, and replica count in an existing multi-container Kubernetes Deployment.
Build a Pod from scratch, exec into it, try to edit an immutable field, explore all three restart policies, and observe graceful termination.
Create a Kubernetes Job template for Team Aurora that runs a busybox command across multiple completions in parallel, with specific pod labels and container configuration.
Perform a blue-green deployment by creating a new green version of a web application, then switch live traffic from blue to green with zero downtime by updating the Service selector.