Home › practice tasks
Kubernetes · hands-on

Kubernetes Practice Tasks

50 hands-on CKA, CKAD, and CKS tasks on real Kubernetes clusters in your browser — each graded by a programmatic validator with partial credit. One task per cert is unlocked free for everyone every week.

Start free →

CKA Practice Tasks

17 tasks · CKA lab · curriculum

Cluster Architecture, Installation & Configuration · 25%

CNI InstallationArgo CD Helm InstallationCertificate Management

Workloads & Scheduling · 15%

PriorityClass ConfigurationHorizontal Pod AutoscalerSplit Node ResourcesSidecar ContainerTaints and Tolerations

Services & Networking · 20%

Network PolicyGateway API MigrationTLS Version RestrictionNodePort ServiceIngress

Storage · 10%

StorageClass ConfigurationRestore MariaDB with PVC

Troubleshooting · 30%

cri-dockerd SetupControl Plane Failure

CKAD Practice Tasks

17 tasks · CKAD lab · curriculum

Application Design and Build · 20%

Create CronJob with History LimitsBuild Container Image with PodmanFix Broken Deployment YAML

Application Deployment · 20%

Canary Deployment Traffic SplitRolling Update and RollbackRight-size Deployment Memory within a Namespace LimitCreate and Expose a Deployment

Application Observability and Maintenance · 15%

Add Readiness ProbeFix Service Selector

Application Environment, Configuration and Security · 25%

Create Secret from Hardcoded VariablesServiceAccount, Role, and RoleBindingFix Broken Pod ServiceAccountPod and Container Security Context

Services & Networking · 20%

Fix NetworkPolicy Pod LabelsCreate NodePort ServiceExpose an Application via IngressFix a Misconfigured Ingress

CKS Practice Tasks

16 tasks · CKS lab · curriculum

Cluster Setup · 10%

Fix Insecure Kubelet and etcdUpgrade a Worker Node by One Patch VersionSecure API Server Authentication and Authorization

Cluster Hardening · 15%

Create a TLS SecretCreate a Restrictive NetworkPolicyExpose HTTPS Through Ingress with TLS TerminationConfigure Cilium Network Policy with Mutual Authentication

System Hardening · 15%

Secure the Docker Daemon

Minimize Microservice Vulnerabilities · 20%

Enforce Container ImmutabilityDisable API Credential Auto-MountingFix Deployment for Restricted Pod Security Standard

Supply Chain Security · 20%

Dockerfile and Deployment Security Best PracticesGenerate SPDX Document and Remove Vulnerable ContainerConfigure ImagePolicyWebhook Admission Control

Monitoring, Logging and Runtime Security · 20%

Detect and Stop a Pod Accessing /dev/memConfigure API Server Audit Logging