Disable ServiceAccount Token Automounting in a Pod
Create a Pod that does not mount the default ServiceAccount token, preventing it from accessing the Kubernetes API server.
Focused hands-on problems designed to help you hone your DevOps or Server Side skills. Some challenges are more educational, while others are based on real-world scenarios. The platform provides hints and feedback for each challenge, including automated solution checks.
Challenges contributed by the community members sharing their knowledge and expertise.
Create a Pod that does not mount the default ServiceAccount token, preventing it from accessing the Kubernetes API server.
Create a LimitRange in a namespace to enforce minimum, maximum, and default resource constraints for containers, then deploy a compliant Pod.
Create a static pod named mcp-grafana on node-01 and delete an existing pod from the cluster.
Create a ServiceAccount with permissions to access only that specific Secret using RBAC resourceNames restriction.