Kubernetes CKA Professional plus Advanced

Having several years of experience as an engineer and being able to read code are qualities that make that someone has more insight into what is happening and keeps a better overview of what is going on in the training. A lot of work is done with the command-line (shell) and a variety of programming languages and containers pass by in exercises such as: Go, Node.js, Angular, Java, Ubuntu, Debian, CoreOS

Minimum dexterity/basic knowledge of Linux command-line (Bash, Linux commands), Private Keys and Public Keys are required to follow the pace of this training.

The training is mainly meant for:

• Engineers responsible for designing, deploying, or managing Kubernetes clusters. The level of entry is from beginning to medium level of knowledge of Kubernetes.
• For anyone who aims to obtain certification as a Certified Kubernetes Administrator (CKA). This training teaches the theory needed for the CKA Exam.

Fundamentals:This training follows the contents as prescribed for the CKA exam for certification by offering the theory in presentation form and performing 30 to 40 detailed exercises.Topics as they pass:

• Some IT history;
• Virtualization: what is a Virtual Machine and what is a Container. And what is the difference between the two?
• What is Kubernetes, what is Cloud Native? And why is this development important;
• Kubernetes architecture;
• Kubernetes principles;
• Kubernetes components;
• Kubernetes Resources (deployment, replicaset, pods);
• Basic concepts of Kubernetes: control plane, resources in detail, services, draining nodes, setting limits, tolerations, anti-affinity, horizontal scaling, deployments, release management & canary releases, liveliness checks, readiness checks updates, rollbacks, configsmaps & secrets, lifecycle-hooks & init containers, logging, monitoring, troubleshooting, bootstrapping, component configuration, DNS-networking, static pods, tls: communicating with apiserver, multi-containers, sidecar containers, pod-policies, Linux-capabilities, privileges and access control, application troubleshooting, network policies, service accounts;
• Storage
• Kubernetes use principles: Helmet, Ingress Controller;
• Kubernetes networks security: Role-Based Access Control (RBAC).

Selection of modules:The number of topics available in the training as choice modules is more than can be covered during the training. For each training, the trainer decides, in consultation with the group, which topics will be covered in the training. Sometimes this can mean that the group decides on day 5 to work with different components. The choice of modules goes into depth on Administration Expert parts, by means of exercises that are in line with the daily practice of working with Kubernetes, using working examples.

• Granulair Role-Based Access Control (RBAC) with, Keycloak, Single Sign-On
• Auditing, Policies & API-Server Central Security: validating & mutating webhooks, OPA, KRails
• Central Logging: ELK Stack
• Central Monitoring: Prometheus, Graphana;
• External (Federated) Storage: Rook, OpenEBS
• Advanced Security: Encryption at Rest, Sealed Secrets, KMS, Vault, Harbor, Notary, Falco
• Service Mesh: SMI, LinkerD, Istio, OSM, horizontal scaling based on latency (monitoring information)
• Operator & Controllers (Software) Overview
• Own Custom Resources: advanced WordPress, build your own WordPress operator
• Creating your own secure helm registry
• Cluster backup & Generic State Management
• High Available Kubernetes Cluster
• Infrastructure as Code with Terraform