Skip to content
CKACluster Architecture, Installation & ConfigurationSingle nodeMedium

Install an application with Helm

Scenario cka-arc-007 · about 10 minutes · 7 points · 3 grader checks

Add a chart repository and install a chart as a named release into a namespace using Helm.

  • helm
  • package-management
  • release

What you will practise

  • Add and update a Helm chart repository
  • Install a chart as a release in a namespace
  • Verify a release and its workload

Start this lab

With the CLI installed and signed in, this command provisions a single node cluster on your Mac, applies the scenario setup and prints the task below.

goldenkube start cka-arc-007

Task

The task text exactly as the CLI shows it. Solve it on the cluster, then run goldenkube submit.

Using Helm on the control plane node, install the "podinfo" chart as a release named "web" in the namespace "web" (create the namespace if needed). Add the chart repository https://stefanprodan.github.io/podinfo and install podinfo/podinfo as release "web" in namespace "web". The release must be deployed and its Deployment must have at least 1 Ready replica.

Requirements and details

Certification
CKA · Certified Kubernetes Administrator
Domain
Cluster Architecture, Installation & Configuration
Difficulty
Medium
Cluster topology
Single node
Cluster features
None beyond the base cluster
Recommended time
10 minutes
Points
7
Grader checks
3
Kubernetes version
1.37
Minimum CLI version
0.1.0
Scenario version
1
Published

Grading runs locally: 3 state checks read your cluster when you submit; the scenario passes when every check passes. Hints, the reference solution and the check definitions are available only inside the CLI, not on this page.

CKACluster Architecture, Installation & ConfigurationMedium

Namespaced RBAC: Role and RoleBinding for a ServiceAccount

Grant a ServiceAccount read access to pods in one namespace using a Role and a RoleBinding.

Single node · ~6 min · 6 points

  • rbac
  • role
  • rolebinding
  • serviceaccount
  • namespace

goldenkube start cka-arc-001

CKACluster Architecture, Installation & ConfigurationMedium

Cluster-scoped RBAC: ClusterRole for listing nodes

Grant a namespaced ServiceAccount cluster-wide read access to nodes using a ClusterRole and ClusterRoleBinding.

Single node · ~6 min · 6 points

  • rbac
  • clusterrole
  • clusterrolebinding
  • serviceaccount
  • nodes

goldenkube start cka-arc-002

CKACluster Architecture, Installation & ConfigurationMedium

etcd snapshot backup

Take a snapshot of the cluster's etcd datastore and store it as a file on the control plane node.

Single node · ~8 min · 6 points

  • etcd
  • backup
  • etcdctl
  • control-plane

goldenkube start cka-arc-003

CKACluster Architecture, Installation & ConfigurationEasy

Long-lived ServiceAccount token Secret

Create a ServiceAccount and a controller-populated long-lived token Secret bound to it.

Single node · ~6 min · 5 points

  • serviceaccount
  • secret
  • token
  • authentication

goldenkube start cka-arc-004

Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation. Lab results are practice feedback, not an exam score.