Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of Self-Managed Kubernetes
- Core components and Kubernetes architecture
- Comparing managed versus self-managed Kubernetes: trade-offs and considerations
- Mitigating vendor lock-in and leveraging sovereignty benefits
- Exploration of deployment methods: kubeadm, kOps, and manual installation
Infrastructure Planning and Preparation
- Determining hardware requirements for control plane and worker nodes
- Defining high-availability needs and architectural topologies
- Selecting and preparing operating systems (Ubuntu, RHEL, Rocky Linux)
- Network prerequisites and firewall rule configuration
Installing and Configuring Container Runtimes
- Evaluating runtime options: containerd versus CRI-O
- Installation and configuration workflows for containerd
- Installation and configuration workflows for CRI-O
- Addressing runtime-level security considerations
Cluster Bootstrapping with kubeadm
- Installing kubeadm, kubelet, and kubectl components
- Initializing the primary control plane node
- Setting up kubeconfig for secure cluster access
- Adding secondary control plane nodes to achieve high availability
- Onboarding worker nodes into the cluster
Establishing High Availability
- Comparing stacked versus external etcd configurations
- Implementing HAProxy or Keepalived for API server load balancing
- Managing certificate lifecycles and renewals
- Developing backup and recovery strategies for etcd
Container Networking Implementation
- Selecting CNI plugins: Calico, Cilium, Flannel, or Weave
- Deployment and configuration of Calico
- Defining network policies for enhanced security
- Facilitating node-to-node communication and pod networking
- Exposing services without reliance on cloud-based load balancers
Service Load Balancing Strategies
- Utilizing MetalLB for bare-metal load balancing
- Configuring Layer 2 and BGP operational modes
- Evaluating Keepalived and HAProxy as alternative solutions
- Deploying Ingress controllers (nginx, Traefik)
Implementing Storage Solutions
- Understanding StorageClass and CSI driver concepts
- Utilizing local persistent volumes
- Setting up NFS provisioners
- Exploring distributed storage options: Ceph RBD and OpenEBS
- Leveraging snapshot and cloning capabilities
Enhancing Cluster Security
- Managing Certificate Authorities and PKI
- Configuring RBAC and managing service accounts
- Applying Pod security standards and admission controllers
- Hardening the API server and etcd
- Implementing image signing and verification processes
Deploying a Self-Hosted Container Registry
- Setting up Harbor registry
- Configuring Docker Registry
- Managing image replication and vulnerability scanning
- Integrating registry authentication
Building Monitoring and Observability Capabilities
- Deploying the Prometheus and Grafana stack
- Using VictoriaMetrics as a lightweight alternative
- Collecting metrics from nodes and pods
- Creating custom alerting rules and visual dashboards
- Aggregating logs with Loki or Fluentd
Cluster Maintenance Operations
- Upgrading Kubernetes versions via kubeadm
- Performing rolling updates for control plane components
- Executing certificate rotation procedures
- Managing node maintenance and cordoning
Backup and Disaster Recovery Planning
- Executing etcd backup and restore tasks
- Using Velero for cluster resource and PV backups
- Designing cross-site replication strategies
- Validating recovery procedures through testing
Multi-Cluster Management
- Managing clusters using Rancher or Portainer
- Understanding cluster federation concepts
- Implementing workload distribution strategies
Requirements
- A solid grasp of containers and the containerization process
- Hands-on experience with Linux system administration
- Foundational knowledge of computer networking
- Proficiency with command-line interfaces and SSH
Target Audience
- DevOps and SRE engineers
- System administrators
- Technical architects
- Infrastructure engineers prioritizing vendor independence
21 Hours
Testimonials (1)
The knowledge and the patience from the trainer to answer to our questions.
