ypdate exercices

Author: sysops-26

.github/ISSUE_TEMPLATE/bug-report.md

@@ -0,0 +1,20 @@
+---
+name: Bug / Outdated Content
+about: Report incorrect, broken, or outdated content
+title: "[Bug] "
+labels: bug
+assignees: ''
+---
+
+**What's wrong?**
+<!-- Describe the issue — incorrect YAML, outdated version reference, broken command, etc. -->
+
+**Where?**
+<!-- Link to the specific file + section (e.g., README.md > Section 4.2 RBAC, or exercises/05-networkpolicy/README.md) -->
+
+**What should it say?**
+<!-- Provide the correct information with a source if possible -->
+
+**Environment (if applicable)**
+- Kubernetes version:
+- Platform (minikube/kind/cloud):

.github/ISSUE_TEMPLATE/exercise-request.md

@@ -0,0 +1,27 @@
+---
+name: Exercise Request
+about: Suggest a new exercise or practice scenario
+title: "[Exercise] "
+labels: enhancement
+assignees: ''
+---
+
+**Topic**
+<!-- What CKAD topic should this exercise cover? (e.g., StatefulSet, DaemonSet, NetworkPolicy, etc.) -->
+
+**CKAD Domain**
+<!-- Which exam domain does this fall under?
+- Application Design and Build (20%)
+- Application Deployment (20%)
+- Application Observability and Maintenance (15%)
+- Application Environment, Configuration, and Security (25%)
+- Services and Networking (20%)
+-->
+
+**Description**
+<!-- Brief description of what the exercise should test -->
+
+**Difficulty**
+- [ ] Easy
+- [ ] Medium
+- [ ] Hard

README.md

@@ -6,6 +6,14 @@
 
 > My CKAD study notes, practice questions, and kubectl cheat sheet. Kubernetes v1.35. I scored 91% — this is everything I used to prepare.
 
+<p align="center">
+  <a href="https://github.com/techwithmohamed/CKAD-Certified-Kubernetes-Application-Developer/stargazers">
+    <img src="https://img.shields.io/github/stars/techwithmohamed/CKAD-Certified-Kubernetes-Application-Developer?style=social" alt="Stars">
+  </a>
+</p>
+
+> **⭐ If this repo helps you pass the CKAD, a star helps other candidates find it.**
+
 # CKAD Certification Guide 2026 — How I Passed with 91%
 
 <p align="center">
@@ -26,30 +34,39 @@ Short on time? Here's the fast track:
 
 1. **Run the setup script** — `bash scripts/exam-setup.sh` to get aliases, vim config, and tab completion
 2. **Memorize the skeletons** — skim [`skeletons/`](skeletons/) once, then practice writing each from memory
-3. **Do exercises 1, 3, 5, 6, 10** — they cover pods, ConfigMaps, NetworkPolicy, rolling updates, and security (the highest-weighted domains)
-4. **Take the mock exam below** — 17 questions, 70% weight coverage. Time yourself (5–8 min per question)
-5. **Run killer.sh** — do both sessions. Review every wrong answer. Repeat the weak topics
-6. **Read [Exam Day Strategy](#exam-day-strategy) and [Common Mistakes](#mistakes-that-will-fail-you)** the night before
+3. **Do exercises 1, 3, 5, 6, 10, 11** — they cover pods, ConfigMaps, NetworkPolicy, rolling updates, security, and StatefulSets (the highest-weighted domains)
+4. **Run the interactive quiz** — `bash scripts/quiz.sh` for timed practice with auto-verification
+5. **Take the mock exam below** — 17 questions, 70% weight coverage. Time yourself (5–8 min per question)
+6. **Run killer.sh** — do both sessions. Review every wrong answer. Repeat the weak topics
+7. **Read [Exam Day Strategy](#exam-day-strategy) and [Common Mistakes](#mistakes-that-will-fail-you)** the night before
 
 If you score 80%+ on the mock exam **and** 70%+ on killer.sh, you're ready. Book the exam.
 
+> **Every exercise includes a `verify.sh` script** — run it after you attempt the exercise to auto-check your work: `bash exercises/01-pod-basics/verify.sh`
+
 ### Repo Structure
 
 ```
 README.md                      # This guide
-exercises/                     # 10 hands-on labs (one per folder)
-  01-pod-basics/
-  02-multi-container-pod/
-  03-configmap-secret/
-  04-rbac/
-  05-networkpolicy/
-  06-rolling-update/
-  07-helm/
-  08-probes/
-  09-ingress-gateway/
-  10-security-pvc/
-skeletons/                     # Bare YAML templates for quick reference
-scripts/exam-setup.sh          # Aliases + vim config (run first thing)
+exercises/                     # 14 hands-on labs (one per folder, each with verify.sh)
+  01-pod-basics/               # Easy
+  02-multi-container-pod/      # Medium
+  03-configmap-secret/         # Medium
+  04-rbac/                     # Medium
+  05-networkpolicy/            # Hard
+  06-rolling-update/           # Medium
+  07-helm/                     # Medium
+  08-probes/                   # Medium
+  09-ingress-gateway/          # Hard
+  10-security-pvc/             # Hard
+  11-statefulset/              # Hard      ← NEW
+  12-daemonset/                # Medium    ← NEW
+  13-init-containers/          # Medium    ← NEW
+  14-in-place-scaling/         # Hard      ← NEW (v1.35 GA feature)
+skeletons/                     # 14 bare YAML templates for quick reference
+scripts/
+  exam-setup.sh                # Aliases + vim config (run first thing)
+  quiz.sh                      # Interactive terminal quiz with auto-verification
 CONTRIBUTING.md
 LICENSE
 ```
@@ -3286,6 +3303,101 @@ spec:
 
 </details>
 
+<details>
+<summary>StatefulSet + Headless Service</summary>
+
+```yaml
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: myapp
+spec:
+  serviceName: myapp-headless
+  replicas: 3
+  selector:
+    matchLabels:
+      app: myapp
+  template:
+    metadata:
+      labels:
+        app: myapp
+    spec:
+      containers:
+      - name: app
+        image: nginx:1.25
+        ports:
+        - containerPort: 80
+        volumeMounts:
+        - name: data
+          mountPath: /data
+  volumeClaimTemplates:
+  - metadata:
+      name: data
+    spec:
+      accessModes:
+      - ReadWriteOnce
+      resources:
+        requests:
+          storage: 1Gi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: myapp-headless
+spec:
+  clusterIP: None
+  selector:
+    app: myapp
+  ports:
+  - port: 80
+    targetPort: 80
+```
+
+</details>
+
+<details>
+<summary>DaemonSet</summary>
+
+```yaml
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: myagent
+spec:
+  selector:
+    matchLabels:
+      app: myagent
+  template:
+    metadata:
+      labels:
+        app: myagent
+    spec:
+      tolerations:
+      - key: node-role.kubernetes.io/control-plane
+        effect: NoSchedule
+      containers:
+      - name: agent
+        image: fluentd:v1.16-1
+        resources:
+          requests:
+            cpu: 50m
+            memory: 64Mi
+          limits:
+            cpu: 100m
+            memory: 128Mi
+        volumeMounts:
+        - name: host-logs
+          mountPath: /var/log
+          readOnly: true
+      volumes:
+      - name: host-logs
+        hostPath:
+          path: /var/log
+          type: Directory
+```
+
+</details>
+
 <details>
 <summary>SecurityContext</summary>
 
@@ -3415,7 +3527,13 @@ The stuff I practiced was the stuff that showed up. If something in this guide i
 
 Good luck.
 
-If this guide helped you, star the repo.
+If this guide helped you, star the repo. ⭐
+
+<p align="center">
+  <a href="https://github.com/techwithmohamed/CKAD-Certified-Kubernetes-Application-Developer/stargazers">
+    <img src="https://img.shields.io/github/stars/techwithmohamed/CKAD-Certified-Kubernetes-Application-Developer?style=social" alt="Stars">
+  </a>
+</p>
 
 [techwithmohamed.com](https://techwithmohamed.com/) · [Blog Post](https://techwithmohamed.com/blog/ckad-exam-study-guide/)
 

exercises/01-pod-basics/README.md

@@ -1,4 +1,4 @@
-# Exercise 1 — Pod Basics
+# Exercise 1 — Pod Basics `Easy`
 
 > Related: [Application Design and Build](../../README.md#1-application-design-and-build-20) | [YAML Skeleton: Pod](../../skeletons/pod.yaml)
 

exercises/01-pod-basics/verify.sh

@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+# Verify script for Exercise 01 — Pod Basics
+# Usage: bash exercises/01-pod-basics/verify.sh
+
+set -euo pipefail
+
+NAMESPACE="exercise-01"
+POD_NAME="web"
+PASS=0
+FAIL=0
+
+check() {
+  local desc="$1"
+  local result="$2"
+  if [ "$result" = "true" ]; then
+    echo "  ✓ $desc"
+    PASS=$((PASS + 1))
+  else
+    echo "  ✗ $desc"
+    FAIL=$((FAIL + 1))
+  fi
+}
+
+echo "Verifying Exercise 01 — Pod Basics"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+# Check namespace exists
+ns_exists=$(kubectl get namespace "$NAMESPACE" --no-headers 2>/dev/null && echo true || echo false)
+check "Namespace '$NAMESPACE' exists" "$ns_exists"
+
+# Check pod exists and is running
+pod_phase=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.status.phase}' 2>/dev/null || echo "")
+check "Pod '$POD_NAME' is Running" "$([ "$pod_phase" = "Running" ] && echo true || echo false)"
+
+# Check image
+pod_image=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.spec.containers[0].image}' 2>/dev/null || echo "")
+check "Image is nginx:1.25" "$([ "$pod_image" = "nginx:1.25" ] && echo true || echo false)"
+
+# Check labels
+app_label=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.metadata.labels.app}' 2>/dev/null || echo "")
+tier_label=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.metadata.labels.tier}' 2>/dev/null || echo "")
+check "Label app=web" "$([ "$app_label" = "web" ] && echo true || echo false)"
+check "Label tier=frontend" "$([ "$tier_label" = "frontend" ] && echo true || echo false)"
+
+# Check resources
+cpu_req=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.spec.containers[0].resources.requests.cpu}' 2>/dev/null || echo "")
+mem_req=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.spec.containers[0].resources.requests.memory}' 2>/dev/null || echo "")
+cpu_lim=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.spec.containers[0].resources.limits.cpu}' 2>/dev/null || echo "")
+mem_lim=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.spec.containers[0].resources.limits.memory}' 2>/dev/null || echo "")
+check "CPU request 100m" "$([ "$cpu_req" = "100m" ] && echo true || echo false)"
+check "Memory request 128Mi" "$([ "$mem_req" = "128Mi" ] && echo true || echo false)"
+check "CPU limit 250m" "$([ "$cpu_lim" = "250m" ] && echo true || echo false)"
+check "Memory limit 256Mi" "$([ "$mem_lim" = "256Mi" ] && echo true || echo false)"
+
+echo ""
+echo "Result: $PASS passed, $FAIL failed out of $((PASS + FAIL)) checks"
+[ "$FAIL" -eq 0 ] && echo "🎉 Exercise 01 PASSED!" || echo "❌ Exercise 01 has failures — review and retry."

exercises/02-multi-container-pod/README.md

@@ -1,4 +1,4 @@
-# Exercise 2 — Multi-Container Pod (Sidecar)
+# Exercise 2 — Multi-Container Pod (Sidecar) `Medium`
 
 > Related: [Application Design and Build](../../README.md#1-application-design-and-build-20) | [What Changed in v1.35](../../README.md#what-changed-in-v135) | [YAML Skeleton: Pod](../../skeletons/pod.yaml)
 

exercises/02-multi-container-pod/verify.sh

@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+# Verify script for Exercise 02 — Multi-Container Pod (Sidecar)
+# Usage: bash exercises/02-multi-container-pod/verify.sh
+
+set -euo pipefail
+
+NAMESPACE="exercise-02"
+POD_NAME="app-with-sidecar"
+PASS=0
+FAIL=0
+
+check() {
+  local desc="$1"
+  local result="$2"
+  if [ "$result" = "true" ]; then
+    echo "  ✓ $desc"
+    PASS=$((PASS + 1))
+  else
+    echo "  ✗ $desc"
+    FAIL=$((FAIL + 1))
+  fi
+}
+
+echo "Verifying Exercise 02 — Multi-Container Pod (Sidecar)"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+ns_exists=$(kubectl get namespace "$NAMESPACE" --no-headers 2>/dev/null && echo true || echo false)
+check "Namespace '$NAMESPACE' exists" "$ns_exists"
+
+pod_phase=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.status.phase}' 2>/dev/null || echo "")
+check "Pod '$POD_NAME' is Running" "$([ "$pod_phase" = "Running" ] && echo true || echo false)"
+
+# Check container count
+container_count=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.spec.containers[*].name}' 2>/dev/null | wc -w || echo 0)
+check "Pod has 2 containers" "$([ "$container_count" -eq 2 ] && echo true || echo false)"
+
+# Check container names
+containers=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.spec.containers[*].name}' 2>/dev/null || echo "")
+check "Container 'app' exists" "$(echo "$containers" | grep -q 'app' && echo true || echo false)"
+check "Container 'log-agent' exists" "$(echo "$containers" | grep -q 'log-agent' && echo true || echo false)"
+
+# Check shared volume
+vol_count=$(kubectl get pod "$POD_NAME" -n "$NAMESPACE" -o jsonpath='{.spec.volumes[*].name}' 2>/dev/null | wc -w || echo 0)
+check "Shared volume exists" "$([ "$vol_count" -ge 1 ] && echo true || echo false)"
+
+# Check sidecar is producing logs
+sidecar_logs=$(kubectl logs "$POD_NAME" -n "$NAMESPACE" -c log-agent --tail=1 2>/dev/null || echo "")
+check "Sidecar is streaming logs" "$([ -n "$sidecar_logs" ] && echo true || echo false)"
+
+echo ""
+echo "Result: $PASS passed, $FAIL failed out of $((PASS + FAIL)) checks"
+[ "$FAIL" -eq 0 ] && echo "🎉 Exercise 02 PASSED!" || echo "❌ Exercise 02 has failures — review and retry."

exercises/03-configmap-secret/README.md

@@ -1,4 +1,4 @@
-# Exercise 3 — ConfigMap + Secret Injection
+# Exercise 3 — ConfigMap + Secret Injection `Medium`
 
 > Related: [Environment, Configuration, and Security](../../README.md#4-application-environment-configuration-and-security-25) | [YAML Skeleton: ConfigMap + Secret](../../skeletons/configmap-secret.yaml)