CKS_FINALE

lessons/0004-cis-kubelet-anonymous-auth.html

@@ -0,0 +1,30 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>CKS-004 · Kubelet CIS Repair</title><link rel="stylesheet" href="../assets/course.css">
+</head>
+<body>
+  <main class="page">
+    <header class="hero">
+      <p class="eyebrow">CKS mastery journey · CIS transfer</p>
+      <h1>Repair one kubelet failure</h1>
+      <p class="deck">One configuration change, one recovery check, one targeted benchmark.</p>
+      <div class="meta"><span class="pill">CKS-004</span><span class="pill">5 minutes</span></div>
+    </header>
+    <div class="layout">
+      <section class="card">
+        <h2>Task</h2>
+        <pre><code>[FAIL] 4.2.1 Ensure that the --anonymous-auth argument is set to false</code></pre>
+        <p>On <code>node01</code>, back up <code>/var/lib/kubelet/config.yaml</code> outside its directory. Change <code>authentication.anonymous.enabled: true</code> to the secure value.</p>
+        <p>Restart the correct service, verify the node becomes <code>Ready</code>, and rerun only check <code>4.2.1</code> for the node target.</p>
+      </section>
+      <aside class="rail card">
+        <p class="eyebrow">Fresh attempt</p><h2>Keep it compact</h2>
+        <p>Only commands and corrected YAML are required.</p>
+        <a class="button" href="../ANSWER.md">Open answer file</a>
+      </aside>
+    </div>
+  </main>
+</body>
+</html>