Challenges | iximiuz Labs

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Security

Lock Down Container Syscalls With Seccomp Profiles

by Omkar Shelke

Run a Deployment under the container runtime's seccomp profile, roll out a custom profile to the worker nodes, and fix a profile that blocks a syscall the application needs.

#cks #seccomp #securitycontext #syscalls

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes, Security

Roll Out Pod Security Standards Across Three Namespaces

by Omkar Shelke

The platform team is rolling out Pod Security Admission. A monitoring agent is already blocked, the storefront team needs a staged rollout, and payments must move to the strictest level without losing its running service.

#cks #pod-security #psa #securitycontext

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes

Enforce Immutable Container

by Omkar Shelke

Harden a container by implementing a read-only root filesystem with specific writable volumes for nginx. This is a critical security practice to prevent runtime modifications.

#cks #securitycontext #immutable-container #volumes

This challenge was created by a community author. Community content is reviewed by the iximiuz Labs team on a best effort basis.

Challenge on Kubernetes

Secure a Deployment with Security Context and Capabilities

by Omkar Shelke

The security team has identified that a deployment needs hardening with proper security context settings. Apply security best practices including user ID, privilege escalation control, and Linux capabilities.

#securitycontext #capabilities #deployment #ckad