Course Description
This course covers advanced topics like security, capacity planning (including autoscaling), Kubernetes API extensions points (including operators and CRDs), and presents a number of popular operators. It is a great addition to the “Kubernetes Bootstrap”, but can also be taken independently by folks who have a bit of Kubernetes experience and are familiar with key concepts like Pods, Deployments, Services, working with YAML, and want to take their Kubernetes mastery to the next level.
Course Outline
- Isolating workloads with Network Policies
- Securing the k8s API: authentication, authorization, RBAC, Service Accounts
- Extending the k8s API: operators, CRDs, admission webhooks, aggregation layer
- Capacity planning with resources, limits, and quotas
- Dealing with resource pressure at node- and cluster-levels
- Autoscaling with HPA, HPAv2, custom metrics, and cluster autoscaling
- Deploying stateful/persistent applications (Stateful Sets, PV, PVC, Storage Classes)
- Presentation and analysis of to many popular operators (Sealed Secrets, cert-manager, Kyverno, and many more)
- Design considerations when writing operators
