Course Outline
Introduction
- Course Objectives
- Audience Profile
- The Linux Foundation
- Educational Offerings from the Linux Foundation
- Certification Programs and Digital Credentialing
- System Preparation Requirements
- Enrollment Procedures
- Hands-On Lab Exercises
Kubernetes Architecture
- Overview of Kubernetes
- Core Kubernetes Components
- Operational Challenges
- Historical Context: The Borg System
- Architectural Framework
- Key Terminology
- Control Plane (Master Node)
- Worker Nodes (formerly Minion Nodes)
- Pod Architecture
- Service Abstraction
- Controllers and Operators
- Unique Pod IP Addresses
- Networking Infrastructure Configuration
- Container Network Interface (CNI) Configuration Files
- Inter-Pod Communication Protocols
- Cloud Native Computing Foundation
- Infrastructure Resource Recommendations
- Lab Exercises for Government and Public Sector Applications
Build
- Containerization Options
- Process of Application Containerization
- Dockerfile Construction
- Establishing a Local Image Repository
- Creating Deployment Manifests
- Executing Commands Within Containers
- Multi-Container Pod Configurations
- Readiness Probes
- Liveness Probes
- Testing Methodologies
- Lab Exercises for Government and Public Sector Applications
Design
- Considerations for Traditional Application Migration
- Resource Decoupling Strategies
- Ephemeral Resource Management
- Framework Flexibility and Scalability
- Resource Utilization Management
- Implementation of Label Selectors
- Multi-Container Pod Designs
- Sidecar Container Patterns
- Adapter Container Patterns
- Ambassador Container Patterns
- Key Design Considerations
- Job Management
- Lab Exercises for Government and Public Sector Applications
Deployment Configuration
- Overview of Volume Storage
- Introduction to Persistent Storage
- Volume Specification Syntax
- Types of Volumes
- Example: Shared Volume Implementation
- Persistent Volumes and Claims Framework
- Persistent Volume Details
- Persistent Volume Claim Definitions
- Dynamic Storage Provisioning
- Management of Secrets
- Injecting Secrets via Environment Variables
- Mounting Secrets as Volume Sources
- Configuration Data Portability with ConfigMaps
- Utilizing ConfigMaps in Deployments
- Monitoring Deployment Status
- Scaling Strategies and Rolling Updates
- Execution of Deployment Rollbacks
- Lab Exercises for Government and Public Sector Applications
Security
- Security Framework Overview
- API Access Protocols
- Authentication Mechanisms
- Authorization Controls
- Attribute-Based Access Control (ABAC)
- Role-Based Access Control (RBAC)
- RBAC Workflow Overview
- Admission Controllers
- Security Contexts for Containers
- Pod Security Policies (Historical)
- Network Policy Enforcement
- Example of Network Security Policy
- Default Network Policy Implementation
- Lab Exercises for Government and Public Sector Applications
Exposing Applications
- Service Type Classifications
- Service Architecture Diagrams
- Service Update Patterns
- Application Access via Services
- Manual Service Endpoint Management
- ClusterIP Configuration
- NodePort Configuration
- LoadBalancer Configuration
- ExternalName Configuration
- Ingress Resource Management
- Ingress Controller Deployment
- Service Mesh Integration
- Lab Exercises for Government and Public Sector Applications
CKAD Exam Review
Requirements
To maximize the benefits of this instructional program, participants are expected to possess:
Foundational proficiency in Linux command-line operations and text editing, along with practical experience in programming languages such as Python, Node.js, or Go. Familiarity with Cloud Native application architectures—consistent with concepts presented in the complimentary Introduction to Kubernetes edX MOOC offered by The Linux Foundation—is advantageous.
Note that prior completion of Kubernetes Administration (LFS458) is not required. While course content may overlap, each module is engineered to function independently and supports preparation for associated certification examinations, serving as a valuable resource for government entities seeking specialized training for government technical staff.
Audience
This curriculum targets seasoned application developers tasked with containerizing, hosting, deploying, and configuring applications within multi-node cluster environments.
Experience Level: Intermediate
Testimonials (1)
trainer has hands-on knowledge
