Added new labs

Author: nirgeier

.claude/settings.local.json

@@ -0,0 +1,9 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(cd /Users/nirg/repositories/KubernetesLabs/Labs/16-Affinity-Taint-Tolleration && python3 << 'EOF'\nwith open\\('README.md', 'r'\\) as f:\n    content = f.read\\(\\)\n    \nfence_count = content.count\\('```'\\)\nprint\\(f\"Total code fences: {fence_count}\"\\)\nprint\\(f\"Is even \\(properly paired\\): {fence_count % 2 == 0}\"\\)\n\n# Check last 80 lines for issues\nlines = content.split\\('\\\\n'\\)\nlast_80_lines = lines[-80:]\nfence_in_last_80 = ''.join\\(last_80_lines\\).count\\('```'\\)\nprint\\(f\"\\\\nCode fences in last 80 lines: {fence_in_last_80}\"\\)\nEOF)",
+      "Bash(cd /Users/nirg/repositories/KubernetesLabs/Labs/16-Affinity-Taint-Tolleration && python3 << 'EOF'\nimport re\n\nwith open\\('README.md', 'r'\\) as f:\n    lines = f.readlines\\(\\)\n\n# Get total lines\ntotal_lines = len\\(lines\\)\n# Get last 80 lines \\(from total-80 to total\\)\nstart_idx = max\\(0, total_lines - 80\\)\nlast_80 = lines[start_idx:]\nlast_80_content = ''.join\\(last_80\\)\n\nprint\\(f\"File has {total_lines} total lines\"\\)\nprint\\(f\"Checking lines {start_idx+1} to {total_lines}\"\\)\nprint\\(\"\\\\n=== Checking code fence balance in last 80 lines ===\"\\)\n\n# Count code fences in last 80\nfence_count = last_80_content.count\\('```'\\)\nprint\\(f\"Code fences in last 80 lines: {fence_count}\"\\)\nprint\\(f\"Properly paired: {fence_count % 2 == 0}\"\\)\n\n# Check for unclosed code blocks\nin_code = False\nline_num = start_idx + 1\nfor i, line in enumerate\\(last_80, start=start_idx+1\\):\n    if line.startswith\\('```'\\):\n        in_code = not in_code\n        print\\(f\"  Line {i}: Fence toggle \\(in_code={in_code}\\): {line.strip\\(\\)}\"\\)\n\nprint\\(f\"\\\\n=== Checking links ===\"\\)\n# Find all markdown links\nlinks = re.findall\\(r'\\\\[\\([^\\\\]]+\\)\\\\]\\\\\\(\\([^\\\\\\)]+\\)\\\\\\)', last_80_content\\)\nfor text, url in links:\n    line_no = None\n    for i, line in enumerate\\(last_80, start=start_idx+1\\):\n        if text in line:\n            line_no = i\n            break\n    print\\(f\"  Line ~{line_no}: [{text}]\\({url}\\)\"\\)\n    \n    # Check relative links\n    if url.startswith\\('../'\\):\n        print\\(f\"    -> Relative link, needs verification\"\\)\n    elif url.startswith\\('http'\\):\n        print\\(f\"    -> External URL\"\\)\n\nEOF)",
+      "Bash(cd /Users/nirg/repositories/KubernetesLabs/Labs/16-Affinity-Taint-Tolleration && python3 << 'EOF'\nimport re\n\nwith open\\('README.md', 'r'\\) as f:\n    content = f.read\\(\\)\n    lines = content.split\\('\\\\n'\\)\n\n# Get last 80 lines\nlast_80_lines = lines[-80:]\n\nprint\\(\"=== COMPREHENSIVE MARKDOWN ANALYSIS \\(Last 80 Lines\\) ===\\\\n\"\\)\n\n# 1. Check for unclosed bold\nbold_markers = 0\nfor line in last_80_lines:\n    bold_count = line.count\\('**'\\)\n    if bold_count % 2 != 0:\n        print\\(f\"⚠ Odd number of ** in line: {line}\"\\)\n    bold_markers += bold_count\n\nprint\\(f\"✓ Bold markers properly paired \\(total: {bold_markers}\\)\"\\)\n\n# 2. Check for unclosed inline code\ninline_code = 0\nfor line in last_80_lines:\n    backtick_count = line.count\\('`'\\)\n    # Account for code fences \\(```\\)\n    code_fence_count = line.count\\('```'\\)\n    single_backticks = backtick_count - \\(code_fence_count * 3\\)\n    \n    if single_backticks % 2 != 0 and '```' not in line:\n        print\\(f\"⚠ Odd number of backticks in line: {line}\"\\)\n    inline_code += single_backticks\n\nprint\\(f\"✓ Inline code markers balanced\"\\)\n\n# 3. Check heading levels\nfor i, line in enumerate\\(last_80_lines, start=len\\(lines\\)-80\\):\n    if line.startswith\\('##'\\):\n        print\\(f\"Line {i}: Heading: {line}\"\\)\n\n# 4. Check for markdown structure consistency\nprint\\(\"\\\\n=== Structure Check ===\"\\)\nprint\\(\"Last 80 lines structure:\"\\)\nsection_count = 0\nfor i, line in enumerate\\(last_80_lines, start=len\\(lines\\)-80\\):\n    if line.startswith\\('##'\\):\n        section_count += 1\n        print\\(f\"  Line {i}: Section: {line}\"\\)\n\n# 5. Check list consistency in Troubleshooting\nprint\\(\"\\\\n=== Troubleshooting Section Structure ===\"\\)\nin_troubleshooting = False\nlist_item_count = 0\nfor i, line in enumerate\\(last_80_lines, start=len\\(lines\\)-80\\):\n    if '## Troubleshooting' in line:\n        in_troubleshooting = True\n        print\\(f\"Line {i}: Found Troubleshooting section\"\\)\n    elif in_troubleshooting and line.startswith\\('## '\\):\n        in_troubleshooting = False\n        print\\(f\"Line {i}: End of Troubleshooting, found next section: {line}\"\\)\n        break\n    elif in_troubleshooting and line.startswith\\('- **'\\):\n        list_item_count += 1\n        print\\(f\"  Line {i}: Troubleshooting item #{list_item_count}: {line[:50]}\"\\)\n\nprint\\(f\"\\\\nTotal troubleshooting items: {list_item_count}\"\\)\n\nEOF)"
+    ]
+  }
+}

.devcontainer/Dockerfile

@@ -0,0 +1,36 @@
+FROM mcr.microsoft.com/devcontainers/base:ubuntu
+
+# Install common tools
+RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
+    && apt-get install -y --no-install-recommends \
+    zsh \
+    jq \
+    curl \
+    wget \
+    bash-completion \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install Kind
+ARG KIND_VERSION="v0.27.0"
+RUN curl -Lo /usr/local/bin/kind "https://kind.sigs.k8s.io/dl/${KIND_VERSION}/kind-linux-amd64" \
+    && chmod +x /usr/local/bin/kind
+
+# Install k9s
+RUN curl -sS https://webi.sh/k9s | sh 2>/dev/null; \
+    mv ~/.local/bin/k9s /usr/local/bin/k9s 2>/dev/null || true
+
+# Install kubewall
+ARG KUBEWALL_VERSION="v0.0.16"
+RUN curl -Lo /tmp/kubewall.tar.gz \
+    "https://github.com/kubewall/kubewall/releases/download/${KUBEWALL_VERSION}/kubewall_Linux_x86_64.tar.gz" \
+    && tar -xzf /tmp/kubewall.tar.gz -C /usr/local/bin kubewall \
+    && chmod +x /usr/local/bin/kubewall \
+    && rm /tmp/kubewall.tar.gz
+
+# Install kubectx + kubens
+RUN curl -Lo /usr/local/bin/kubectx https://github.com/ahmetb/kubectx/releases/latest/download/kubectx \
+    && curl -Lo /usr/local/bin/kubens https://github.com/ahmetb/kubectx/releases/latest/download/kubens \
+    && chmod +x /usr/local/bin/kubectx /usr/local/bin/kubens
+
+

.devcontainer/devcontainer.json

@@ -0,0 +1,46 @@
+{
+  "name": "KubernetesLabs",
+  "build": {
+    "dockerfile": "Dockerfile"
+  },
+  "features": {
+    "ghcr.io/devcontainers/features/docker-in-docker:2": {
+      "dockerDashComposeVersion": "v2"
+    },
+    "ghcr.io/devcontainers/features/kubectl-helm-minikube:1": {
+      "kubectl": "latest",
+      "helm": "latest",
+      "minikube": "none"
+    },
+    "ghcr.io/devcontainers/features/github-cli:1": {}
+  },
+  "postCreateCommand": "bash .devcontainer/post-create.sh",
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "ms-kubernetes-tools.vscode-kubernetes-tools",
+        "redhat.vscode-yaml",
+        "ms-azuretools.vscode-docker",
+        "tim-koehler.helm-intellisense"
+      ],
+      "settings": {
+        "terminal.integrated.defaultProfile.linux": "zsh"
+      }
+    }
+  },
+  "hostRequirements": {
+    "cpus": 2,
+    "memory": "4gb",
+    "storage": "32gb"
+  },
+  "remoteUser": "vscode",
+  "forwardPorts": [
+    8443
+  ],
+  "portsAttributes": {
+    "8443": {
+      "label": "Kubewall Dashboard",
+      "onAutoForward": "notify"
+    }
+  }
+}

.devcontainer/kind-config.yaml

@@ -0,0 +1,29 @@
+kind: Cluster
+apiVersion: kind.x-k8s.io/v1alpha4
+nodes:
+  - role: control-plane
+    kubeadmConfigPatches:
+      - |
+        kind: InitConfiguration
+        nodeRegistration:
+          kubeletExtraArgs:
+            node-labels: "ingress-ready=true"
+    extraPortMappings:
+      # HTTP
+      - containerPort: 80
+        hostPort: 80
+        protocol: TCP
+      # HTTPS
+      - containerPort: 443
+        hostPort: 443
+        protocol: TCP
+      # NodePort range
+      - containerPort: 30000
+        hostPort: 30000
+        protocol: TCP
+      - containerPort: 30001
+        hostPort: 30001
+        protocol: TCP
+      - containerPort: 30002
+        hostPort: 30002
+        protocol: TCP

.devcontainer/post-create.sh

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+
+# Wait for Docker-in-Docker to be ready
+echo "==> Waiting for Docker daemon..."
+for i in $(seq 1 30); do
+  if docker info &>/dev/null; then
+    break
+  fi
+  echo "    Waiting for Docker... ($i/30)"
+  sleep 2
+done
+
+if ! docker info &>/dev/null; then
+  echo "ERROR: Docker daemon not available. Kind cluster will not be created."
+  echo "       You can retry manually: bash .devcontainer/post-create.sh"
+  exit 0
+fi
+
+echo "==> Creating Kind cluster..."
+if kind get clusters 2>/dev/null | grep -q "^labs$"; then
+  echo "    Kind cluster 'labs' already exists, skipping."
+else
+  kind create cluster \
+    --name labs \
+    --config .devcontainer/kind-config.yaml \
+    --wait 120s || {
+    echo "WARNING: Kind cluster creation failed. You can retry manually."
+    exit 0
+  }
+fi
+
+echo "==> Setting kubectl context..."
+kubectl cluster-info --context kind-labs || true
+
+echo ""
+echo "============================================"
+echo "  KubernetesLabs devcontainer is ready!"
+echo "  - Kind cluster 'labs' is running"
+echo "  - kubectl, helm, k9s are available"
+echo "  - Run: kubewall     (dashboard on port 8443)"
+echo "============================================"

.github/workflows/build-devlab.yml

@@ -0,0 +1,82 @@
+# -----------------------------------------------------------------------------
+# GitHub Actions Workflow: Build & Push devlab Image to GHCR
+#
+# This workflow builds the standalone devlab Docker image and pushes it to
+# GitHub Container Registry as a multi-arch image (amd64 + arm64).
+#
+# Main Steps:
+#   1. Checkout the repository.
+#   2. Set up QEMU for cross-platform builds.
+#   3. Set up Docker Buildx.
+#   4. Login to GitHub Container Registry.
+#   5. Extract image metadata (tags, labels).
+#   6. Build and push the multi-arch image.
+#
+# The image is published to ghcr.io/<owner>/klabs-devlab with `latest` and
+# `sha-<short>` tags so users can pull a ready-to-use environment.
+# -----------------------------------------------------------------------------
+
+name: Build devlab Image
+
+# Event triggers for the workflow
+on:
+  push:
+    branches:
+      - main
+      - master
+    paths:
+      - "scripts/Dockerfile.devlab"
+      - "scripts/entrypoint-devlab.sh"
+  workflow_dispatch:
+
+# Workflow permissions
+permissions:
+  contents: read
+  packages: write
+
+# Concurrency settings
+concurrency:
+  cancel-in-progress: true
+  group: "devlab-build"
+
+# The build job
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels)
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository_owner }}/klabs-devlab
+          tags: |
+            type=raw,value=latest
+            type=sha,prefix=sha-,format=short
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: scripts/
+          file: scripts/Dockerfile.devlab
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

CLAUDE.md

@@ -0,0 +1,74 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+KubernetesLabs is a hands-on Kubernetes learning repository with 33+ numbered labs and 7 task collections. Content is published as an MkDocs Material site at https://nirgeier.github.io/KubernetesLabs/.
+
+## Build & Serve Commands
+
+```bash
+# Install dependencies
+pip install -r mkdocs/requirements.txt
+
+# Local development server (http://localhost:8000)
+mkdocs serve --config-file mkdocs.yml
+
+# Build static site (output: mkdocs-site/)
+mkdocs build --config-file mkdocs.yml
+
+# Deploy to GitHub Pages (done automatically by CI on push to main/master)
+mkdocs gh-deploy --force --clean --config-file mkdocs.yml --no-history
+```
+
+## Architecture
+
+### MkDocs Configuration
+
+The single `mkdocs.yml` at root is a merged file containing all config sections. The modular source files live in `mkdocs/`:
+
+- `01-mkdocs-site.yml` - Site metadata (name, URL, author)
+- `02-mkdocs-theme.yml` - Material theme settings
+- `03-mkdocs-extra.yml` - Social links, extra CSS/JS
+- `04-mkdocs-plugins.yml` - Plugins (git-committers, search, minify, print-site, include-markdown)
+- `05-mkdocs-extensions.yml` - Markdown extensions (pymdownx, mermaid, admonitions, tabs)
+- `06-mkdocs-nav.yml` - Navigation structure
+
+**Important:** `docs_dir` is set to `Labs` - all content lives under `Labs/`.
+
+### Lab Structure
+
+Each lab follows this pattern:
+```
+Labs/XX-TopicName/
+├── README.md          # Main lab content (this is the MkDocs page)
+├── manifests/         # Kubernetes YAML files
+├── scripts/           # Shell automation scripts
+└── [Dockerfile, etc.]
+```
+
+Tasks live in `Labs/Tasks/Kubernetes-*-Tasks/README.md`.
+
+### Navigation
+
+When adding a new lab, update the nav in both:
+- `mkdocs.yml` (the merged config)
+- `mkdocs/06-mkdocs-nav.yml` (the source file)
+
+## Lab README Conventions
+
+- Start with optional YAML frontmatter
+- Include sections: description, "What will we learn?", "Official Documentation & References" (table format), "Prerequisites", then numbered content sections (01, 01.01, etc.)
+- Use `=== "macOS"` / `=== "Linux"` tab syntax for platform-specific instructions
+- Use admonitions (`!!! note`, `!!! warning`, `!!! tip`) for callouts
+- Use mermaid fenced blocks for architecture diagrams
+- Code blocks use language hints: `bash`, `yaml`, `go`, `dockerfile`
+
+## CI/CD
+
+GitHub Actions (`.github/workflows/deploy-mkdocs.yml`) deploys on push to `main` or `master`. Requires Python 3.11, full git history (`fetch-depth: 0`), and `mkdocs/requirements.txt`.
+
+## Commit Message Convention
+
+Follow the pattern: `labXX: <description>` (e.g., `lab32: Add EFK stack`).