Create Secret from Hardcoded Variables

In namespace default, Deployment api-server exists with hard-coded environment variables: DB_USER=admin DB_PASS=Secret123!

Check live lab access → All CKAD tasks

Live lab access

This task description is public. Live practice requires full access unless this is the selected free weekly task. See this week's free task.

Create an account to continue →

Read this week's free task →

On a phone? Read the task and create your account here, then sign in on a desktop or laptop for the terminal lab. Nothing starts until you choose Start.

The task

Task

In namespace default, Deployment api-server exists with hard-coded environment variables:

DB_USER=admin
DB_PASS=Secret123!

Requirements

Create a Secret named db-credentials in namespace default containing these credentials
Update Deployment api-server to use the Secret via valueFrom.secretKeyRef
Do not change the Deployment name or namespace

Exam

CKAD

Domain

Application Environment, Configuration and Security

Grading

Programmatic · partial credit

Reference

Kubernetes docs ↗

What this tests

Wire up configmaps, secrets, service accounts, RBAC, securityContext, and resource limits. On the CKAD exam, Application Environment, Configuration and Security tasks are graded purely on what you build in the cluster - not multiple choice - so the only way to get faster is to do them on a real cluster against a clock.

Practice it for real

The public description lets you study the task before signing up. Full access includes this live lab; the selected Task of the Week is free with an account. You solve the task in a real terminal, hit validate, and a programmatic checker scores exactly what you got right and wrong (with partial credit). You can open the solution while practising, then retry and use the failed checks to improve your score.

Check live lab access → CKAD overview