Course Introduction
This course is for devs, ops, and architects, who have already started working with Kubernetes and want to learn more advanced concepts. Students will complete numerous labs and exercises.
This course is part of the Intensive Docker & Kubernetes track. Not sold separately.
Note: All of our bundles are for a one-year subscription.
At the end of the subscription period, your membership does not automatically renew.
Requirements:
- Understanding of Pods, Deployments, Services.
- How to deploy an app and expose it on a Kubernetes cluster.
- Basic notions of what are labels, selectors, YAML manifests.
- Basic shell commands (navigate directories, set environment variables…).
- Using a text editor like vi, nano, or similar.
Course Outline
Day 1: security focus:
- Securing access with network policies
- Managing permissions with RBAC
- Managing secrets with Sealed Secrets
- Pod Security Settings and Admission
Day 2: resource management:
- Understanding requests and limits
- Compressible vs incompressible resources
- Pod eviction and kubelet under pressure
- Horizontal, vertical, and cluster- autoscaling
- Priorities and preemption
- Scaling with custom metrics
Day 3: extending the Kubernetes API:
- Overview of the different extension mechanisms
- Custom Resource Definitions
- Dynamic admission control with webhooks
- The aggregation layer
- Operator concepts
Day 4: operator and controller implementation:
- Operator design techniques
- Studying operators (e.g. Kyverno, cert-manager)
- The kubebuilder framework
- Writing a small operator with kubebuilder
- Events, finalizers, owners and dependents
Day 5: stateful applications:
- Stateful Sets, PV, PVC, Storage Classes
- Use-case: running a Consul cluster
- Dynamic storage provisioning
- Use-case: stateful failover of an active database
