Skip to content

[Bug] CKA Question 6: solution is not fully correct #65

Description

@alextelesh

Describe the bug

Volume mount is missing in the solution:

  • Add a volume mount:
    Create an emptyDir volume named 'html'
  • Mount the volume at '/usr/share/nginx/html'
    use default seccomp profile

Environment (please complete the following):

  • Architecture: x64
  • Docker Desktop: no
  • For Windows: Is WSL2 enabled? N/A
  • System resources: N/A
  • OS: Ubuntu 24.04
  • Browser: Chrome 145
  • CK-X Version: 1.0.0
  • Docker version: 28.4.0
  • How did you install CK-X? installer script

Report in Depth

Steps to reproduce

Expected Behavior

Mount volume is present in the manifest

    volumeMounts: 
    - name: html
      mountPath: /usr/share/nginx/html

Actual Behaviour

Volume mount is missing in the solution
https://github.com/sailor-sh/CK-X/blob/fb2bc9a77f17204c7c39c844fdfa95590e74a3b6/facilitator/assets/exams/cka/002/answers.md?plain=1#L207-L230

apiVersion: v1
kind: Pod
metadata:
  name: secure-pod
  namespace: security
spec:
  securityContext:
    runAsNonRoot: true
    runAsUser: 1000
    seccompProfile:
      type: RuntimeDefault 
  containers:
  - name: nginx
    image: nginx
    securityContext:
      allowPrivilegeEscalation: false
      runAsNonRoot: true
      runAsUser: 1000
      capabilities:
        drop:
          - ALL
  volumes:
  - name: html
    emptyDir: {}

Screenshots / Logs

Workaround

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions