Exam
CKS
Home › CKS › Topics › Practice tasks › Cilium Ingress with TLS Termination and HTTP-to-HTTPS Redirect
CKS · Cluster Hardening
Cilium Ingress with TLS Termination and HTTP-to-HTTPS Redirect
Create an Ingress resource named web in the prod namespace and configure it as follows: Route traffic for host web.k8s.local and all paths to the existing Service web.
Live lab access
This task description is public. Live practice requires full access unless this is the selected free weekly task. See this week's free task.
Create an account to continue →
On a phone? Read the task and create your account here, then sign in on a desktop or laptop for the terminal lab. Nothing starts until you choose Start.
The task
Context
You must expose a web application using HTTPS routes. A default Cilium IngressClass is configured in the cluster.
Task
Create an Ingress resource named web in the prod namespace and configure it as follows:
- Route traffic for host
web.k8s.localand all paths to the existing Serviceweb. - Enable TLS termination using the existing Secret
web-cert. - Redirect HTTP requests to HTTPS.
> You can test your Ingress configuration with the following command: >
> curl -L http://web.k8s.local
> What this tests
Restrict RBAC and service accounts, tighten API server flags, and keep the cluster patched. On the CKS exam, Cluster Hardening tasks are graded purely on what you build in the cluster - not multiple choice - so the only way to get faster is to do them on a real cluster against a clock.
Practice it for real
The public description lets you study the task before signing up. Full access includes this live lab; the selected Task of the Week is free with an account. You solve the task in a real terminal, hit validate, and a programmatic checker scores exactly what you got right and wrong (with partial credit). You can open the solution while practising, then retry and use the failed checks to improve your score.