Google GKE Kubernetes Training

A few things about Altoros, getting to know each other and instructors, overall information on the schedule and agenda of the course, as well as useful links.

Learn how to deploy Kubernetes. Get familiar with managed K8s platforms, infrastructure providers, and Kubernetes components.

Get familiar with Kubernetes and its benefits compared to other products, an intro to CNCF. Create a Docker image by yourself, start a Docker container, mount volume inside the container, and change the network to host.

Create a deployment and observe how Kubernetes restarts containers. Get to know the most common deployment use cases, as well as learn how to update and roll back deployments.

Deploy a pod with a health check, learn how to use readiness probe, as well as create health check for an nginx pod and the one using TCP sockets.

Get practical skills in using selectors and labels in pods.

Launch a pod using a container image and the one using a configuration file, deploy a pod from a custom image, and practice in limiting pod resources. Learn about pods, multi-container pod design, and pod’s life cycle.

Familiarize with Persistent volume, Persistent volume claim, Volume life cycle and types, access modes and a storage class. Deploy WordPress and MySQL with Persistent Volumes, do the Static persistent volume provisioning, and observe how persistent volume is reattached.

Discussion around continuous integration / delivery tools, understanding a CI/CD pipeline structure, and deploying a sample application using the Jenkins pipeline.

Learn how to update clusters and familiarize with Addons. Install the Kubernetes Dashboard Addon by yourself, change the cluster configuration, deploy a highly available cluster, and learn how to add Heapster metrics to the Kubernetes Dashboard.

Learn how to manage multiple Kubernetes clusters, create federated cluster, and deploy a multi-cloud application by yourself.

Install the Kubernetes Elasticsearch logging add-on, setup a Kibana Dashboard for Kube-System, learn how to parse logs, as well as familiarize with Node-level logging, Sidecar log streaming, Sidecar with a logging agent, system components logs, ELK log flow, and Grok filters.

Deploy a new application and configure it for monitoring, while getting familiar with alerting. Discover general monitoring architecture, cAdvisor and InfluxDB + Grafana.

Manually deploy a new cluster using Terraform, perform advanced cluster troubleshooting (optional), and learn Terraform.

Understand how Kubernetes uses DNS internally for service discovery and how to integrate internal Kubernetes DNS with the external one. Explore service name resolution in practice.

Deploy a sample app using ingress, as well as practice in specifying an app host and in using TLS. Familiarize with ingress controllers, singe-services ingress, simple-fanout ingress, and name-based virtual hosting ingress; get an introduction to TLS termination.

Install Kubernetes Addons, learn how to track iptables changes while re-deploying the service. Familiarize with cluster networking, Container Networking Interface (CNI), plug-in comparison, network policies, cluster DNS along with external load balancers, service networking internals, as well as pod and service iptables rules.

Discover Service types and proxy modes. Deploy a PHP Guestbook application with Redis, investigate source code of the sample, manually connect to Redis from an app pod, and perform the Blue-Green deployment.

Get practical skills in using namespaces and RBAC, work with namespace resource limits, assign the default view cluster role to a user, and try to deploy a pod. Get familiar with Role and ClusterRole, Binding roles, as well as user, groups, and service accounts and API Objects.

Resource limits and requests, default admission controller for the namespace and different resource types. Configure the quota for the namespace and try to schedule pods that use more resources.

Practice in storing secrets on Kubernetes, learn how to access secrets from environment variables and to use config maps. Discover more about storing sensitive information and configuration.

Get to know how to secure your cluster, familiarize with API Authentication, Authorization and Access, explore Admission Control, and learn more about Securing Docker Images, Pod Security Policy (PSP), and Security Contexts.

Learn about extending Kubernetes beyond the standard resource types. Create custom resource definition and explore it.

Learn how a container can get data about the environment it is running—what the resource limitations are, what the namespace is. Use both environmental variables and volumes.

Learn what is Helm, how to use it to deploy prometheus and how to secure it.

Investigate kubelet, manually access Kubernetes API, deploy a pod using an API or run a static pod (optional). Discover how to work with kubelet, cluster initialization, static pods, API Server and the scheduling algorithm, as well as learn more about using custom schedulers.