Certification955 problems· 24 reviewed

CKA

955 incident response problems that help with CKA prep.

All problems (955)

K8S-1378A cert-manager HTTP01 challenge failsA global ingress annotation cleanup lands and later only HTTP01 certificate renewals begin to fail.KubernetesIntermediate12 minProK8S-1368A cert-manager HTTP01 challenge fails (http01-solver-ingress-inherited-global-https-redirect)A cert-manager HTTP01 challenge fails (http01-solver-ingress-inherited-global... focuses on reverse-proxy-security and asks the reader to isolate the key signal in NGINX. Temporary challenge routes can inherit cluster-wide ingress behavio...KubernetesIntermediate12 minProK8S-1479A Cilium Hubble flow looks blocked by policy and the real failure is MTUOnly encrypted inter-node traffic fails after overlay networking is reconfigured, while flow logs implicate policy.KubernetesAdvanced12 minProK8S-1470A CSI secret rotates and the JVM still serves the old truststoreA truststore update takes effect only after pod restart even though CSI secret rotation finished successfully.KubernetesAdvanced12 minProK8S-1486A device plugin advertises GPUs and pods stay pendingAccelerator workloads remain pending only after a BIOS or driver change on one hardware generation.KubernetesAdvanced12 minProK8S-1468A device plugin loses access to the pod-resources socketAccelerator scheduling breaks only after a node image refresh tightens kubelet socket permissions.KubernetesAdvanced12 minProK8S-1477A device plugin registers successfully and scheduling still failsAccelerator pods remain pending after a driver upgrade even though the device plugin reports healthy resources.KubernetesAdvanced12 minProK8S-1497A Grafana Loki write path scales out and one distributor still rejects chunksOne Loki distributor keeps rejecting chunks after a scale-out and gossip key rotation.KubernetesAdvanced12 minProK8S-1475A kubelet eviction threshold is met and one node still thrashesEviction storms begin after a container runtime path migration on one node image line.KubernetesAdvanced12 minProK8S-1484A kubelet image GC runs and disk pressure staysOnly one node pool remains under disk pressure after a runtime storage migration and repeated image GC cycles.KubernetesAdvanced12 minProK8S-1517A Loki ingester scale-out completes and one distributor still rejects chunksChunk rejections persist on one Loki distributor after scale-out and secret rotation.KubernetesAdvanced12 minProK8S-1527A Loki ring expands and one distributor still rejects chunksChunk rejections persist on one Loki distributor after scale-out and secret rotation.KubernetesAdvanced12 minProK8S-1537A Loki ring expands and one distributor still rejects chunksChunk rejections persist on one distributor after scale-out and secret rotation.KubernetesAdvanced12 minProK8S-1507A Loki scale-out adds ingesters and one distributor still rejects chunksA single Loki distributor rejects chunks after scale-out and gossip key rotation.KubernetesAdvanced12 minProK8S-1480A secret rotation succeeds and one Java pod still serves stale trustA Java service keeps serving an old trust bundle after a successful secret rotation until the pod restarts.KubernetesAdvanced12 minProK8S-1555A StatefulSet pod remounts and still times outA StatefulSet pod times out only after node pool replacement.KubernetesAdvanced12 minProK8S-1515A StatefulSet pod reschedules and hangsA StatefulSet pod can not mount after a scale set node rotation even though the PVC looks healthy.KubernetesAdvanced12 minProK8S-1525A StatefulSet pod reschedules and hangsA stateful workload fails to remount after a node pool rotation.KubernetesAdvanced12 minProK8S-1535A StatefulSet pod reschedules and hangsA stateful workload fails to remount after node pool rotation.KubernetesAdvanced12 minProK8S-1565A StatefulSet recovers and one pod still lands in the wrong zoneOne StatefulSet pod lands in the wrong zone after topology label cleanup.KubernetesAdvanced12 minPro