Description
In this course, you will :
- Cover the most important Kubernetes concepts, such as pods, services, and deployments, that you will need to know to be proficient.
- Learn about the Kubernetes architecture, how to build clusters, and how to deploy and manage applications.
- Delve into threat modelling and real-world security practises.
- You will have a valuable new skill to add to your resume and be able to use Kubernetes in your own projects.
Syllabus :
1. Kubernetes Primer
- Kubernetes Background
- The Evolution of Kubernetes
- The Operating System of the Cloud
2. Kubernetes Principles of Operation
- Kubernetes From 40K Feet
- Masters and Nodes: Masters
- Masters and Nodes: Nodes
- Kubernetes DNS
- Packaging Apps for Kubernetes
- Quiz: Kubernetes Principles
- The Declarative Model and the Desired State
- Pods
- Deployments
- Services and Network Stable Networking
3. Installing Kubernetes
- Kubernetes Playgrounds
- Hosted Kubernetes
- Installing Kubernetes
- Play With Kubernetes
- Docker Desktop
- Google Kubernetes Engine (GKE)
- Other Methods
- kubectl
4. Working With Pods: Theory
- Pod Theory
- Multi-Container Pods: The Typical Example
- How Do We Deploy Pods
- Pods and Shared Networking
- Pods and cgroups
- Pod Lifecycle
5. Working With Pods: Hands-On
- Pod Manifest Files
- Manifest Files: Empathy as Code
- Introspecting Running Pods
- kubectl exec: Running Commands in Pods
6. Kubernetes Deployments
- Deployment Theory
- Self-Healing and Scalability
- Rolling Updates With Deployments
- How to Create a Deployment
- Quiz: Basics of Kubernetes Deployments
- Accessing Deployments
- Accessing the Apps
- Performing a Rolling Update
- How to Perform a Rollback
7. Kubernetes Services: Theory
- Labels and Loose Coupling
- Services and Endpoints Objects
- Accessing Services From Inside the Cluster
- Accessing Services From Outside the Cluster
- Service Discovery
8. Kubernetes Services: Hands-On
- The Imperative Way
- The Declarative Way
- Introspecting Services and Endpoint Objects
- Real World Example
9. Service Discovery
- Service Registration
- Service Discovery
- Service Discovery and Namespaces
- Troubleshooting Service Discovery
10. Kubernetes Storage
- The Big Picture
- Storage Providers and Container Storage Interface
- The Kubernetes Persistent Volume Subsystem
- Persistent Volume Claim
- Storage Classes and Dynamic Provisioning
- Demo
11. ConfigMaps
- ConfigMap Theory
- Hands-On: Creating ConfigMaps Imperatively
- Hands-On: Creating ConfigMaps Declaratively
- Injecting ConfigMap and Secret Data Into Pods and Containers
12. StatefulSets
- Ordered Creation and Deletion
- Volumes and Handling Failures
- Network and Headless Services
- Hands-On With StatefulSets
- Creating a Governing Headless Service
- Deploy the StatefulSet
- Testing Peer Discovery
- Scaling StatefulSets
- Test a Pod Failure
13. Threat Modeling Kubernetes
- Spoofing
- Tampering
- Repudiation
- Information Disclosure
- Denial of Service
- Elevation of Privilege
- Protecting Pods
- Pod Security Policies
14. Real-World Kubernetes Security
- CI/CD Pipeline
- Moving Images From Non-Production to Production
- Infrastructure and Networking
- Identity and Access Management (IMS)
- Auditing and Security Monitoring
- Real-World Example