Home › CKS practice tasks › Cilium Ingress with TLS Termination and HTTP-to-HTTPS Redirect

CKS · Cluster Hardening

Cilium Ingress with TLS Termination and HTTP-to-HTTPS Redirect

Create an Ingress resource named web in the prod namespace and configure it as follows: Route traffic for host web.k8s.local and all paths to the existing Service web.

Solve this on a real cluster - free → All CKS tasks

🗓️ Free Task of the Week: one CKS task is unlocked free for everyone every week - no card, real cluster, auto-graded (2 tries/week). Create a free account and check whether this one is live now.

The task

Context

You must expose a web application using HTTPS routes. A default Cilium IngressClass is configured in the cluster.

Task

Create an Ingress resource named web in the prod namespace and configure it as follows:

Route traffic for host web.k8s.local and all paths to the existing Service web.
Enable TLS termination using the existing Secret web-cert.
Redirect HTTP requests to HTTPS.

> You can test your Ingress configuration with the following command: >

> curl -L http://web.k8s.local
>

Exam

CKS

Domain

Cluster Hardening

Grading

Programmatic · partial credit

Reference

Kubernetes docs ↗

What this tests

Restrict RBAC and service accounts, tighten API server flags, and keep the cluster patched. On the CKS exam, Cluster Hardening tasks are graded purely on what you build in the cluster - not multiple choice - so the only way to get faster is to do them on a real cluster against a clock.

Practice it for real

prepium.sh drops you into your own isolated Kubernetes cluster in the browser - no install, no credit card. You solve the task in a real terminal, hit validate, and a programmatic checker scores exactly what you got right and wrong (with partial credit). The canonical solution unlocks after you attempt it, so you learn the fast, exam-ready way to do it.

Start free → CKS overview