Bump VERSION to 2026.10.26.4 and date its CHANGELOG.md entry: every
CKA lesson step shown the exam way, ./ksim lesson lint, failed host
setups marked, from 226ef19.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Show me how gave the commands the audit runs: sed, awk and yq edits,
heredoc manifests, JSON patches, --overrides, sleeps and wait loops -
nothing anyone types in the exam. A step's show is now a list of
parts (sim/bank.py): cmd() is what you type as it stands; hand() is
what you do by hand - vim on a generated skeleton or on a manifest
pasted from the docs page it names, kubectl edit, ssh NODE and sudo
-i, a value you read and echo - with a script that does the same for
the audit. All 135 CKA steps are rewritten so, with k for kubectl;
their checks, titles and texts are unchanged.
Add ./ksim lesson lint, which reads what every step has you type and
flags scripts. The lesson audit runs it first.
Record the hosts whose setup failed when a session started. The page
warns above that task or lesson and offers Rebuild this host; the CLI
names ./ksim reset N on each step.
Render *italics* in lessons and tasks, outside code spans.
Audited on v1.37: CKA lessons 27/27, 135/135 steps, done the exam
way; lint clean. kubectl edit --subresource resize, the one edit the
audit replaces with a patch, was proven on its own.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Bump VERSION to 2026.10.26.3 and date its CHANGELOG.md entry: the
stale ./ksim web guard from 95f9d1b.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
./ksim web reads web/index.html from disk on every request but runs
the code it started with. After the Teach a domain update, a server
from before it got the page's new start request, did not know
"teach", and started its default instead: a full 20-task exam.
Report "stale" in /api/session: whether ksim or sim/*.py changed on
disk since the server started. The page treats a server that sends
no "stale" as stale too, since it predates the check. While the
server is stale, the lobby says to restart it and launch() starts no
session.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Add runs of a domain's lessons: ./ksim lesson ARCH, the lobby's Teach
a domain card, or the Teach a domain session in the Start exam
dialog. A run is one lesson session over the domain's lessons not
done yet (--all: every one), each on its own host, all made before it
starts, so there is no waiting between lessons. The session keeps
the lesson you are on and each lesson's checks. A lesson's wrap-up
leads to the next, the list at the top of a lesson goes to any lesson
of the run, and ./ksim lesson next and ./ksim lesson OBJ do the same
in a terminal. Finishing the run sends you to the domain's drill.
Stamp a lesson done the moment its last step passes, not when the
session ends, so terminating a lesson or a run keeps what it taught.
Tested on a real STOR run in a copy of the repo: every host up before
step 1; lesson 1.1 done step by step through the CLI and the web API,
and stamped done as its last step passed; next, jump, a lesson
outside the run refused, and the finish report as expected.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Bump VERSION to 2026.10.26.1 and date its CHANGELOG.md entry: the
noVNC cache fix from cf4f5be.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The desktop failed to start in a browser that had cached noVNC 1.6
from the Debian desktop image: its vnc.html, which has no clipboard
Clear button, ran the Ubuntu image's 1.3 ui.js, which wires one up
and threw "Cannot read properties of null". websockify sends only
Last-Modified, so browsers cache noVNC on a guess, and it answers a
revalidation with 304 when the file on disk is older than the copy.
Serve noVNC through websockify-no-store, which adds Cache-Control:
no-store to every response, and from /novnc/ rather than /, so no
browser holds a stale copy at the paths the desktop now uses.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The release reaches main on 2026-10-21, when feat/lessons is merged:
replace the Unreleased heading with the version and that date, and
name the commits its entries came in.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HDuDkQHyHPvYZQAE1z5CF2
Q103 failed to seed once in an audit of six hosts at a time: a minute
passed without a Falco alert naming the Pod. When that happens, the
setup now replaces the Pod - a new container, which Falco's container
plugin looks up afresh - and waits one minute more before it gives up.
Record the final audit in README.md and CHANGELOG.md: CKS 110/110 on
v1.37, Q103 passing alone and with the other seven VM tasks six at a
time, and CKA Q132, CKAD Q1 and CKS Q60, Q61 and Q64 passing on the
images rebuilt with hexdump and xxd.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HDuDkQHyHPvYZQAE1z5CF2
Add lessons: untimed guided labs, one per curriculum objective, on a
host of their own, in the browser and in the terminal. Each step has
a check, a hint and its commands; a lesson writes no history or
scores, only a done mark on its objective. CKAD 2.1-2.4 (24 steps)
and all 27 CKA objectives (135 steps) have one, and `./ksim lesson
audit` proves that every step fails, is done by its own commands,
then passes.
Add CKA tasks 132-147 (cka/bank_course.py) on what a full CKA course
teaches beyond the bank: a real upgrade from v1.36, a drain under a
PodDisruptionBudget, QoS and eviction, in-place resize, kube-proxy's
chains, encryption at rest, an operator, and CSI expansion, snapshots
and clones (ensure_csi_hostpath).
Move CKA and CKS to Kubernetes v1.37 and rebuild the hosts on Ubuntu
24.04, with kubelet, kubeadm and kubectl as held packages from
pkgs.k8s.io; the desktop runs Ubuntu too. Hosts gain man pages,
hexdump and xxd.
Fix CKS Q4, which gave 3 of 12 points untouched, and CKA Q4 and Q49,
whose solutions raced their new CRD.
Audited on v1.37: CKA 147/147, CKAD 105/105, CKS 109/110 (Q103, a
Falco task, failed to seed once and awaits a re-audit); lessons: 135
of 135 CKA steps and 24 of 24 CKAD steps.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Add a changelog from the first release (2026.10.12.1) up to
2026.10.15.3, newest first, with Added/Changed/Removed/Fixed sections
and the commit behind each entry. List dark mode under 2026.10.15.3,
since it shipped without a version bump.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JZPd3GGWyxTgAkL6a4gAJz
Every colour of the page is now a token with a light and a dark value.
Auto, the default, follows the system's light or dark setting; Light
and Dark override it. The switch is in the landing page's top bar, in
the Exam Interface menu and on the results page, and the browser keeps
the choice - applied before the page draws, so the other theme never
flashes. Native controls and scrollbars follow the theme; the remote
desktop keeps its own look.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JZPd3GGWyxTgAkL6a4gAJz
Rebuilt web/index.html after the layout of CK-X (itself modelled on the
Linux Foundation exam UI), written from scratch and loading nothing from
the network:
- landing page: track switch in the top bar, a Start exam dialog to pick
the session (path, objective, domain, next domain, whole bank, picked
tasks, simulator sets, full exam with its gate, hard mode), the path,
a card per domain, every objective with its notes and skip links, and
an overlay with the clusters' progress while a session is prepared
- exam screen: dark top bar with the clock and the Exam Interface /
Exam Controls / Exam Information menus, a light question panel with
< Question N >, "Solve this question on instance", Flag for review,
Satisfied with answer, and Check this task in drills; the remote
desktop with reconnect and fullscreen beside it
- results page: points, pass or fail, domains, every task's checks and
reference solution, answers, drill what I missed, review on the hosts
A session started in the browser opens a dialog whose Start puts the
full time on the clock. New POST /api/terminate backs Terminate session
(an open session ends ungraded, as ./ksim abort) and Delete the hosts
(a finished session loses its hosts); both delete that session's hosts
only. The session payload says whether a session was aborted.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JZPd3GGWyxTgAkL6a4gAJz
Puts the session's full time back on the clock and starts it running,
keeping the hosts, the work on them, results, flags and notes. Like
pause it is recorded nowhere: the attempt's time used counts from the
restart. Refused once a session has been submitted. POST /api/restart
backs the button, which asks before it resets; a ./ksim web started
before this says so instead of failing silently.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JZPd3GGWyxTgAkL6a4gAJz
Study mode is gone: no more untimed sessions with the reference
solutions open from the start. The path is now objective drills against
the clock, then a mock, then the fixed sets, and an objective is done
when every task passed on its latest timed attempt. In the lobby "Study
mode" becomes "Drill an objective" (the objective list, with one
"Against the clock" button per objective); ./ksim study is removed and
./ksim next always drills. study-<track>.json keeps focus, known and the
done stamps; results of old study sessions stay in it, read by nothing.
Also in this commit, from the work before it:
- ./ksim skip / unskip, and links beside each domain in the lobby: mark
a domain or an objective as known, so the path, the no-argument drill
and drill all leave it out; a mock still draws from every domain
- DOMAIN:N picks N tasks of a domain, spread over its objectives
- a command with neither --track nor KSIM_TRACK is for the track whose
session is under way; ./ksim show says where the task's host resolves
- CKAD Q60: the check names which file holds which run's output
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JZPd3GGWyxTgAkL6a4gAJz
kubestronaut-sim runs each exam task on a host of its own - a kind (kubeadm)
cluster in rootless podman, or a QEMU/KVM Ubuntu VM for the CKS tasks that
need their own kernel (Falco, AppArmor) - and puts a browser desktop in front
of them, the way killer.sh and sailor.sh do.
- ksim, sim/: the engine (sessions, drills, study mode, grading, coverage,
audit), host and VM lifecycle, the desktop
- images/: exam host images (common, CKS variant with its tools, VM guest)
- cka/ (131 tasks), ckad/ (105), cks/ (110): task banks, curricula with
study notes, reference solutions and scripted solutions
Every domain of every track has at least 17 pool tasks. `./ksim audit` proves
a task three ways: it seeds cleanly on its own host, scores nothing before
anyone has worked on it, and reaches full marks when its scripted solution is
run on the host as `candidate`. All 346 tasks pass (CKA audited 2026-10-13,
CKAD and CKS 2026-10-12).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JZPd3GGWyxTgAkL6a4gAJz
