What's new on Gnoseed

Azure AI Cloud Developer (AI-200)

105 cards across 5 modules.

PostgreSQL Internals

112 cards across 7 modules.

Claude Certified Developer — Foundations · 2026-10-21

1 card tracking 2026-10-21.

• A request to the Messages API with anthropic-version: 2026-10-21 still sends temperature: 0. What happens?

  Source →

Claude Certified Developer — Foundations · claude-sonnet-5-5

1 card tracking claude-sonnet-5-5.

• A request to Claude Sonnet 5.5 sends thinking: {"type": "disabled"} and gets a 400 error. How do you turn off up-front thinking on that model?

  Source →

Git & GitHub · 2.56

1 card tracking 2.56.

• Git 2.56 runs git refs update refs/heads/main <new> <old>. What does Git check before it moves main to <new>?

  Source →

HTTP & Networking · RFC 10024

1 card tracking RFC 10024.

• RFC 10024 defines X25519MLKEM768 as a hybrid key agreement group for TLS 1.3. What makes it hybrid, and when does the shared secret stay secure?

  Source →

Kubernetes Basics · 1.35

1 card tracking 1.35.

• Two containers must share one GPU, chosen by its attributes with a CEL expression. Why does Dynamic Resource Allocation fit where a device plugin does not?

  Source →

Kubernetes Basics · 1.37

4 cards tracking 1.37.

• You rotate the encryption-at-rest key, but objects already in etcd stay encrypted under the old one. What rewrites them?

  Source →

• kube-proxy in Kubernetes 1.37 warns when it starts with no proxy mode set. Which mode is the Linux default today, and which is it due to become?

  Source →

• Kubernetes 1.37 turns SELinuxMount on by default. Which Pod field restores the old recursive relabelling for a workload the change breaks?

  Source →

• Kubernetes 1.37 adds an Unused condition to every PVC. Besides a Running Pod, which Pod phase referencing the claim keeps that condition at False?

  Source →

K8s Ops: Scheduling & Resources · 1.35

3 cards tracking 1.35.

• A node still runs cgroup v1, and its Kubernetes 1.36 kubelet configuration does not mention failCgroupV1. What happens when the kubelet starts?

  Source →

• What Kubernetes feature allows container resources to change without Pod restart?

  Source →

• Which Pod field controls whether resizing a container's resources requires a restart?

  Source →

MITRE ATT&CK · v20

2 cards tracking v20.

• ATT&CK v20 added Direct Prompt Injection (T1699) and Indirect Prompt Injection (T1698) to the Enterprise matrix. Under which tactic do they sit, and how are they related?

  Source →

• An account has MFA turned on, yet an adversary who steals one of its application-specific passwords (ATT&CK T1697) can sign in. Why?

  Source →

OPA / Gatekeeper — Policy as Code · 1.21

1 card tracking 1.21.

• OPA 1.21 loads a GitHub Actions workflow containing on: push through --data. What does that part of data look like now?

  Source →

OpenTelemetry · v1

1 card tracking v1.

• OpenTelemetry's Go compile-time instrumentation reached v1. How does a Go service get zero-code instrumentation with it?

  Source →

Prometheus & Observability · 3.15

1 card tracking 3.15.

• Prometheus 3.15 has been writing chunks with storage.tsdb.chunk_encoding.floats: xor2, and you must downgrade to a release without XOR2 support. What does the downgrade require?

  Source →

Terraform Associate: Fundamentals · 1.17

2 cards tracking 1.17.

• Terraform 1.17 adds terraform plan -minimal-refresh. Which resource instances does that plan refresh?

  Source →

• Terraform 1.17 lets a required_providers entry take its source or version from a variable. What must be true of that variable?

  Source →

Web Security · RFC 10017

1 card tracking RFC 10017.

• RFC 10017 (BCP 212) describes architectures for browser-based OAuth apps. Which one does it strongly recommend for business apps and apps handling personal data?

  Source →

Amazon EKS

97 cards across 6 modules.

AWS IAM: Policies & Access Control

102 cards across 6 modules.

Helm · 4.0

3 cards tracking 4.0.

• Which helm upgrade flag rolls the release back to its previous revision when the upgrade fails?

  Source →

• What status does a release show after a helm upgrade fails and --rollback-on-failure was not set?

  Source →

• A release installed by Helm 3 is upgraded with Helm 4 and no extra flags. Does that upgrade use server-side apply?

  Source →

K8s Ops: Reliability & Security · 1.37

2 cards tracking 1.37.

• A Pod mounts a podCertificate projected volume naming a signer. Who generates the private key and creates the PodCertificateRequest?

  Source →

• Which RBAC verb must a controller hold on a signer to create a ClusterTrustBundle linked to that signer?

  Source →

Kyverno — Kubernetes Policy Engine · 1.19

1 card tracking 1.19.

• What does the --warnings-as-errors flag do when you run kyverno apply?

  Source →

Kyverno — Kubernetes Policy Engine · 1.19.1

1 card tracking 1.19.1.

• In Kyverno 1.19.1, what happens to a NamespacedValidatingPolicy whose CEL expression calls globalContext.get()?

  Source →

Google Cloud Associate Cloud Engineer

115 cards across 7 modules.

K8s Security: Cluster Hardening · 1.37

1 card tracking 1.37.

• What does the KubeletInUserNamespace feature gate place inside a user namespace?

  Source →

K8s Ops: Scheduling & Resources · 1.37

1 card tracking 1.37.

• Now that native HPA can scale to zero, what does KEDA still provide that HPA does not?

  Source →

Terraform Associate: Advanced · 1.16

1 card tracking 1.16.

• Ephemeral values are deliberately not persisted. Which Terraform 1.16 construct keeps one in state between runs?

  Source →

Azure AI Fundamentals (AI-901)

112 cards across 7 modules.

Secrets Management

113 cards across 7 modules.

SRE Interview Prep

34 cards across 4 modules.

Platform Engineer Interview Prep

41 cards across 5 modules.

Platform Engineering

114 cards across 6 modules.