Skip to content

fix: env-config validation type and partial-outage bypass protection#19

Merged
pbrissaud merged 1 commit intomainfrom
fix/env-config-partial-outage
Jan 25, 2026
Merged

fix: env-config validation type and partial-outage bypass protection#19
pbrissaud merged 1 commit intomainfrom
fix/env-config-partial-outage

Conversation

@pbrissaud
Copy link
Member

Summary

Final fixes for the two remaining "needs work" challenges.

env-config (14/20 → ~17/20)

Issues fixed:

  1. Validation type condition is invalid → changed to status
  2. Deployment contained spoiler comment showing exact solution → removed

partial-outage (12/20 → ~16/20)

Issue fixed:

  • Kyverno policy didn't properly block DELETE operations
  • Users could bypass by running kubectl delete networkpolicy deny-all
  • Fixed with correct syntax using operations: ["DELETE"] in match block

Impact

After this PR + #18:

  • All remaining 16 challenges should be functional
  • No more "BROKEN" status challenges
  • Expected average score: ~17/20

Test plan

  • env-config: Verify CLI can validate (no "unknown type" error)
  • partial-outage: Verify kubectl delete networkpolicy deny-all is blocked

🤖 Generated with Claude Code

env-config:
- Change validation type from `condition` to `status` (valid type)
- Remove spoiler comment showing exact solution in deployment.yaml

partial-outage:
- Fix Kyverno policy to properly block DELETE operations on deny-all NetworkPolicy
- Use correct syntax with operations: ["DELETE"] in match block
- Users must now add ingress rules instead of deleting the policy

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@github-actions
Copy link

✅ Challenge Validation Passed

Validated challenges: 2

  • env-config
  • partial-outage

All challenge files are valid and ready for review! 🎉

@pbrissaud pbrissaud merged commit ddfa9e7 into main Jan 25, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant