Certificate

# Kubernetes certificate - outline

## Part 1 - hands-on exam (90 min)

Operate against a fresh cluster (kind or k3d):
- Create a Deployment + Service exposing nginx on a NodePort
- Add a NetworkPolicy denying all egress except DNS + the API server
- Create a CronJob that runs a script every five minutes and writes to a PVC
- Configure HPA to scale on CPU
- Make a rolling update fail, then roll back

Grading: each task is graded on outcome via a verification script.

## Part 2 - operator project (take-home, ~10 hours)

Build a small operator using controller-runtime or Operator SDK:
- Watch a CRD with a desired-state spec
- Reconcile to a Deployment + Service + ConfigMap
- Reflect status (Ready, Progressing, Failed) on the CR
- Include reconcile tests (envtest)
- Helm chart for installation

Submit a Git repo plus a short demo video showing reconcile in action.

## Grading

- Correctness (40 percent)
- Production-readiness (25 percent): retries, exponential backoff, finalisers
- Tests (20 percent)
- Documentation (15 percent)

## Tips

- Use the operator only where state is involved; for stateless apps, a Helm chart is enough
- Always set resource requests + limits and a PodDisruptionBudget
- Add a finaliser to clean up external resources

# /certificate/kubernetes