Container Sovereignty: Kubernetes Without Cloud Dependencies Training Course

Gitea is a lightweight, open-source, self-hosted Git service offering repository management, code review, issue tracking, and CI/CD integration. It is an increasingly preferred alternative to GitHub and GitLab.com for teams requiring full sovereignty over source code, free from third-party service terms or data export restrictions.

GitLab Self-Managed is the on-premises deployment of the complete GitLab DevSecOps platform, encompassing source code management, CI/CD, container registry, security scanning, and monitoring. It represents a premier option for government and public sector organizations seeking comprehensive tooling capabilities without reliance on SaaS vendors or the risk of data exiting controlled networks.

This instructor-led, live training in US (online or onsite) is tailored for engineers aiming to employ Helm to streamline the deployment and administration of Kubernetes applications within government operations.

By the conclusion of this training, participants will be equipped to:

• Install and configure Helm.
• Establish reproducible builds for Kubernetes applications.
• Distribute applications via Helm charts.
• Deploy third-party applications encapsulated in Helm charts.
• Oversee the release management of Helm packages.

This live, instructor-led training, available online or onsite, is designed for cloud professionals responsible for designing and implementing multi-cloud architectures that mitigate vendor lock-in and ensure data sovereignty.

Upon completion, participants will be equipped to identify vendor lock-in risks, design portable architectures, implement data sovereignty controls, and leverage cloud-agnostic tools.

This instructor-led, live training session, offered in US (online or onsite), is designed for entry-level to mid-level software developers and DevOps specialists seeking to acquire proficiency in establishing and administering local Kubernetes infrastructure using Minikube for government and public sector operations.

Upon successful completion of this program, participants will be equipped to:

• Execute the installation and configuration of Minikube on designated local systems.
• Demonstrate a comprehensive understanding of Kubernetes fundamental concepts and structural design.
• Execute the deployment and management of containerized workloads using kubectl and the Minikube dashboard.
• Configure durable storage frameworks and network connectivity solutions within a Kubernetes environment.
• Leverage Minikube for the rigorous development, testing, and diagnostic assessment of applications for government systems.

This instructor-led, live training in US (available online or on-site) is directed at intermediate-level developers and DevOps engineers intending to utilize Minikube within their development workflows.

Upon completion of this training, participants will be able to:

• Configure and administer a local Kubernetes environment using Minikube.
• Understand the deployment, management, and debugging of applications on Minikube.
• Integrate Minikube into continuous integration and deployment pipelines.
• Optimize development processes by leveraging Minikube’s advanced features.
• Apply established best practices for local Kubernetes development.

This instructor-led, live training in US (available online or onsite) is tailored for network engineers and infrastructure specialists seeking to utilize SONiC and ONL for the deployment and management of open network infrastructure on white-box switches.

Upon completion, participants will demonstrate proficiency in understanding SONiC and ONL architectures, deploying open-source network operating systems on white-box hardware, configuring advanced networking features, and implementing monitoring and automation solutions for government environments.

This instructor-led, live training session, delivered either online or onsite, targets system administrators and infrastructure engineers engaged in the design, deployment, and management of private OpenStack cloud infrastructure for enterprise operations.

By the conclusion of this training, participants will demonstrate proficiency in understanding OpenStack architecture, deploying private cloud infrastructure, managing compute and storage resources, implementing security controls via Keystone, and applying enterprise-grade best practices.

This instructor-led live training in US (available online or onsite) is targeted at intermediate-level network engineers and infrastructure administrators who are responsible for implementing software-defined networks using open-source tools and technologies for government and other public sector operations.

By the conclusion of this training, participants will be proficient in designing SDN architectures, implementing Open vSwitch, configuring FRRouting, deploying SDN controllers, and automating network management processes.

This instructor-led, live training in US (available online or onsite) is designed for intermediate-level network and infrastructure professionals who aim to leverage open-source routing, switching, Wi-Fi, and management tools to design, deploy, and operate a self-managed enterprise network for government use.

By the conclusion of this training, participants will be equipped to design an open-source enterprise network architecture, configure routing, switching, and wireless services, enhance security and observability, and formulate an operational plan for sustained support.

Terraform is an open-source infrastructure-as-code platform that enables teams to define and provision data center infrastructure through a declarative configuration language. When utilized with self-hosted backends and on-premise providers, Terraform serves as a critical tool for sovereign infrastructure management, effectively mitigating risks associated with cloud vendor lock-in for government operations.

This instructor-led, live training program (available online or on-site) is tailored for intermediate infrastructure engineers aiming to utilize Terraform for managing self-hosted environments, including Proxmox, VMware, libvirt, and bare-metal provisioning.

Upon completion of this training, participants will possess the ability to:

• Construct robust Terraform configurations for on-premise and hybrid resources.
• Manage state securely using self-hosted backends such as PostgreSQL, S3-compatible storage, and Gitea.
• Leverage provisioners and custom providers to oversee the entire bare-metal lifecycle.
• Implement efficient workspaces, modular architectures, and variable hierarchies.
• Integrate Terraform into CI/CD pipelines for automated infrastructure delivery.

Format of the Course

• Interactive lectures and guided discussions.
• Extensive exercises and practical labs.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training track tailored to specific government requirements, please contact us to arrange specific details.

Uptime Kuma is a user-friendly, self-hosted monitoring tool designed to track the operational availability of web properties, services, and underlying infrastructure. It serves as a sovereign alternative to Pingdom, Datadog Synthetics, and UptimeRobot for organizations requiring direct control over monitoring data. This instructor-led, live training (available online or onsite) is tailored for beginner-to-intermediate Site Reliability Engineers (SREs) and DevOps professionals seeking to transition from cloud-based uptime monitoring to a self-hosted, sovereign status tracking platform for government and enterprise environments.

This instructor-led, live training in US (available online or on-site) is directed at security engineers and system administrators responsible for deploying and managing enterprise-grade self-hosted VPN solutions utilizing WireGuard and OpenVPN.

By the conclusion of this training, participants will be capable of deploying WireGuard and OpenVPN environments, designing scalable network architectures, integrating with enterprise identity systems, and maintaining the security and monitoring of VPN infrastructure.

OpenVPN and WireGuard represent the prevailing open-source protocols for virtual private networks. Establishing independent infrastructure ensures that no external entity can record traffic metadata, introduce advertisements, or respond to foreign data mandates. This training addresses both protocols to accommodate varying threat models and performance standards for government operations.

Wazuh is an open-source security platform that delivers unified XDR and SIEM capabilities for threat detection, integrity monitoring, incident response, and compliance. It consolidates endpoint telemetry into a self-managed analysis engine, serving as a reliable alternative to commercial platforms such as Splunk Enterprise Security, Microsoft Sentinel, and other cloud-native SIEMs, especially in contexts requiring data sovereignty for government use.