CKS_FINALE

submissions/CKS-008-skipped.md

@@ -0,0 +1,27 @@
+# CKS-008 — Correct manifest ownership
+
+Domain: **1.2 CIS benchmark review**  
+Time: **2 minutes** · Reward: **100 XP + topic bonus**
+
+## Task
+
+On `controlplane`, check `1.1.4` fails:
+
+```text
+/etc/kubernetes/manifests/kube-scheduler.yaml  mode=0600 owner=root group=adm
+```
+
+Required commands:
+
+- back up outside the manifest directory;
+- change ownership to `root:root` without changing mode;
+- verify numeric mode and `owner:group`;
+- rerun only master check `1.1.4`.
+
+## Section B — scored answer
+
+```bash
+# Your four commands
+```
+
+Say **Grade CKS-008** when saved.