Kubernetes¶

K8s primitives, distributions, security, operations. Eight years past 1.0, K8s is no longer optional knowledge for anyone touching production infrastructure.

flowchart TB
  subgraph CP[Control plane]
    API[API server]
    SCH[Scheduler]
    CM[Controller manager]
    ETCD[(etcd)]
  end
  subgraph N1[Worker node]
    K[kubelet]
    P1[Pod]
    P2[Pod]
  end
  USER[kubectl / GitOps] --> API
  CP -.- N1
  SVC[Service / Ingress] -.routes traffic.-> P1
  ADD[Add-ons:<br/>Istio mesh, Argo, Prometheus] -.- N1

Learn¶

• Kubernetes in 10 minutes - pods, deployments, services, namespaces
• Containers vs VMs - what containers actually are
• IaaS / PaaS / SaaS - where K8s sits

Compare¶

• Containers and Kubernetes services - EKS vs AKS vs GKE vs OpenShift vs self-hosted

Reference¶

• Architecture pattern: Microservices
• Architecture pattern: Cell-based
• Troubleshooting: Kubernetes
• CLI cheat sheet: kubectl
• CLI cheat sheet: Helm

Build¶

• Kubernetes cluster setup - cluster end-to-end
• Build a CI/CD pipeline - container builds and rollouts

Certify¶

CNCF - KCNA - Kubernetes and Cloud Native Associate - foundational - KCSA - Kubernetes Security Associate - CKA - Certified Kubernetes Administrator - CKAD - Certified Kubernetes Application Developer - CKS - Certified Kubernetes Security Specialist - PCA - Prometheus Certified Associate - observability - ICA - Istio Certified Associate - service mesh

Vendor distributions - Red Hat OpenShift Administrator (EX280)

Cloud-side managed K8s - AWS EKS coverage in SAA, DVA, DOP - Azure AKS coverage in AZ-104, AZ-400 - GCP GKE coverage in Cloud Engineer, Cloud DevOps Engineer

Adjacent - HashiCorp Consul Associate - service mesh alternative - HashiCorp Nomad Associate - non-K8s scheduler - Cisco CCNA - the underlying network you'll debug

Roadmap¶

The full-stack view lives in Kubernetes Specialist roadmap and Platform Engineer roadmap.