Kubernetes Challenges
Sharpen your Kubernetes skills with our interactive challenges. Learn by doing and track your progress.
Secrets Leaked in Environment Variables
A sensitive password was accidentally exposed. You need to secure it properly.
advanced
30 min.Create a Job That Cleans Old Logs
Write and deploy a one-time Kubernetes Job that purges logs older than 7 days.
beginner
15 min.Restrict Access with RBAC
A user should only be able to get and list pods in the 'dev' namespace.
advanced
20 min.Scale a Deployment Based on CPU
Autoscale a deployment so it can handle increased load.
intermediate
20 min.Run a sidecar container
You must add a log forwarding container to an existing Pod.
beginner
10 min.Label and select Pods properly
A Service is not matching any endpoints.
intermediate
20 min.Recover from a broken ConfigMap
An app won't start because the ConfigMap was updated incorrectly.
beginner
15 min.Investigate failed liveness probe
Pods are restarting due to a failing liveness probe.
advanced
50 min.Debug a Non-Responsive Service
A frontend app cannot reach the backend — the service might be broken.
intermediate
25 min.Deploy a Pod with host networking
Debug network latency by running directly on the host network.
beginner
10 min.Configure a multi-container Pod
Your app uses a sidecar for metrics.
advanced
40 min.Fix a failing readiness probe
The app is running but the service never routes traffic.
intermediate
40 min.Limit egress with NetworkPolicy
Only allow HTTP egress to a specific domain.
beginner
15 min.Tolerate node taints
A deployment fails because of a taint on all nodes.
beginner
15 min.Migrate a deployment to another namespace
The team moved environments but forgot some configs.
beginner
20 min.Prevent scheduling with PodDisruptionBudgets
Ensure at least one replica remains during updates.
advanced
50 min.Patch a running deployment
Update container image without downtime.
advanced
50 min.Mount secrets as volumes
An app expects certificates in a specific path.
advanced
50 min.Fix Helm chart values
A Helm release is broken due to misconfigured `values.yaml`.
beginner
20 min.Add lifecycle hooks
The app needs a preStop sleep to avoid broken connections.
intermediate
20 min.Debug Init Container
An init container is preventing the Pod from starting.
beginner
20 min.Configure node affinity
Pods must only run on SSD-enabled nodes.
beginner
10 min.Enforce CPU/memory limits
Resources are being over-consumed in the cluster.
beginner
20 min.Create an Ingress with TLS
Expose your app securely using an Ingress and TLS certificate.
intermediate
25 min.Diagnose API server latency
High latency observed in kubectl responses.
advanced
30 min.Fix the Broken Deployment
A developer pushed a new deployment manifest, but the application isn't running.
intermediate
20 min.