mosiur/CKS-Lessons
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

completed upto lab 38

Browse Source
This commit is contained in:
Mosiur Rahman
2026-08-27 14:03:17 +06:00
parent d74b79cfc6
commit ac6292db20
19 changed files with 220 additions and 204 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
CKS-MASTERY-CHECKLIST.md
View File

@@ -58,18 +58,18 @@ Minor syntax corrections during training are expected. A cold retest fails when
## Next Task
Finish the one-time local lab installation after Windows restarts, then run `CS-02.Q1` as revised Lesson 0036 on `kind-cks-lab`. Do not use the learner's Kubernetes v1.36 production cluster: kube-bench v0.16.0 has automatic version mappings only through v1.34.
Run `CS-02.Q4`: review CoreDNS deployment, ServiceAccount, RBAC, ConfigMap, image, and security context; distinguish CIS-relevant component configuration from workload hardening. Do not use the learner's Kubernetes v1.36 production cluster.
## Local Lab Environment
Status: `WINDOWS RESTART REQUIRED`
Status: `READY`
- Platform: Ubuntu 24.04 on WSL2, Docker Engine, two-node Kind cluster, and Calico.
- Kubernetes: pinned to v1.34.0; kube-bench: pinned to v0.16.0.
- Cluster and context: `cks-lab` / `kind-cks-lab`.
- Kubeconfig: `/opt/cks-lab/kubeconfig`; it is never merged with a production config.
- Setup and recovery files: `lab-environment/`.
- Resume after restart: run `lab-environment\\02-install-and-build.ps1`, then `lab-environment\\verify-lab.ps1`.
- Enter the ready lab with `lab-environment\\enter-lab.ps1`; verify or rebuild it with `lab-environment\\verify-lab.ps1` and `lab-environment\\02-install-and-build.ps1`.
- Lesson scope: use Kind nodes for Kubernetes tasks and the disposable Ubuntu WSL2 VM for host/kernel hardening tasks.
---
@@ -603,6 +603,9 @@ Append one row after every graded attempt.
| Date | Task | Topic | Time | Result | Critical errors | Evidence | Next action |
|---|---|---|---:|---|---:|---|---|
| 2026-08-27 | Lesson 0038 | CS-02 | Not recorded | Training pass | 0 after verifier correction | `lab/lesson-38-verify.sh /tmp/lesson-38-kubelet.yaml`: all PASS | Continue CS-02.Q4 |
| 2026-08-27 | Lesson 0037 | CS-02 | Not recorded | Training pass | 0 after one correction | `lab/lesson-37-verify.sh /tmp/lesson-37-etcd.yaml`: all PASS | Continue CS-02.Q3 |
| 2026-08-27 | Lesson 0036 | CS-02 | 90 minutes | Partial training evidence | etcd and worker checks not captured | `lab/lesson-36-controlplane-after.txt` shows 1.2.1 and 1.2.7 PASS | Run focused CS-02.Q2, then require PASS evidence |
| 2026-08-26 | Lesson 0035 | CH-03 / MR-05 | Not recorded | Training pass | 0 after review | `lab/lesson-35-kube-apiserver-answer.yaml`, `lab/lesson-35-audit-policy.yaml` | Cold retest later |
| 2026-08-26 | Lesson 0034 | CS-01 / MM-01 | Not recorded | Training pass | 0 after review | `lab/lesson-34-answer.yaml` | Cold retest later |
| 2026-08-25 | Lesson 0032 | MR-03 | Not recorded | Training; evidence incomplete | 0 substantive; command omitted | `lab/lesson-32-answer.md` | Require structured query next time |