Drift-Detect and Self-Heal a Multi-Tenant Kubernetes Estate
Overview
What this challenge is about.
Design drift-detection and self-heal for 28 LegalTech clusters using ArgoCD and Kyverno, then build a Grafana drift dashboard. Get a verifiable certificate.
The scenario
Clerkly is a vertical software-as-a-service scaleup serving mid-market law firms, where strict per-firm data isolation is the reason it runs one dedicated Kubernetes cluster per customer rather than a shared platform. A small platform team supports all 28 clusters, so manual, undocumented fixes do not scale and quietly raise the risk of every upgrade.
The Brief
What you'll do, and what you'll demonstrate.
Roll out automated drift detection and self-heal across 28 single-customer Kubernetes clusters with baseline policy guardrails and a drift dashboard the platform team can act on.
Earning criteria — what you'll demonstrate
- Design a GitOps continuous-sync and self-heal strategy for a fleet of isolated single-tenant clusters
- Encode baseline platform standards as admission-time policies that block drift without breaking legitimate work
- Turn raw drift-event data into a dashboard that drives a recurring operational ritual
- Build a humane exception process that balances customer-specific fixes against long-term consistency
- Communicate an infrastructure cleanup to non-technical customer stakeholders
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Aligned coursework coming soon.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Argocd
Apply argocd to solve real industry problems and demonstrate production-level capability.
- Kyverno
Apply kyverno to solve real industry problems and demonstrate production-level capability.
- Drift Detection
Apply drift detection to solve real industry problems and demonstrate production-level capability.
- Self Heal
Apply self heal to solve real industry problems and demonstrate production-level capability.
- Policy Enforcement
Apply policy enforcement to solve real industry problems and demonstrate production-level capability.
- Multi Tenancy
Apply multi tenancy to solve real industry problems and demonstrate production-level capability.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles:
Platform Engineer
This challenge mirrors the day-to-day of a platform engineer running a multi-cluster fleet: you take an estate riddled with undocumented manual changes and bring it under automated control without breaking customers, exactly the judgment hiring teams probe for.
This challenge sharpens
- argocd
- drift-detection
- multi-tenancy
Site Reliability Engineer
Self-heal automation and a metrics-driven drift dashboard are core SRE work. You practice reducing toil and turning operational signal into a weekly ritual, the reliability mindset SRE interviews are built around.
This challenge sharpens
- self-heal
- drift-detection
- argocd
DevOps Engineer
Encoding standards as policy-as-code and shipping a GitOps rollout across many clusters is the heart of modern DevOps. This challenge gives you a portfolio piece showing you can enforce consistency at scale.
This challenge sharpens
- kyverno
- policy-enforcement
- argocd