Kubernetes Engineer Master Program
An intensive 4-month online weekend live engineering cohort (Sat & Sun • 4 hours/day: 2h live faculty lectures + 2h supervised coding labs) covering Kubernetes Engineer production capstones and 580+ AI interviews, with eligible hiring-drive access under documented placement terms and tuition-refund protection where all policy conditions are met.
- Online Weekend Live Sessions (Sat & Sun • 4 Hours / Day)
- 4 Months (16 Weeks) Comprehensive Finish
- Guaranteed Placement Drives until Placed across 1,050+ top companies
- 26 Production Microservices & Capstones with GitHub code reviews
- 580+ Topic Mock Tests & 1-on-1 AI Voice Technical Interviews
Our Graduates Get Marketed to 1,050+ Global Tech Leaders & Unicorns
Continuous corporate interview referrals until job offer letter issuance:
Online Weekend Master Track: 4 Months of Live Mentorship & Placement Drives
Designed for college students and working professionals, our Online Weekend Master Track delivers intensive 4-hour live sessions every Saturday and Sunday across 16 weeks (4 Months). Complete 128+ hours of live faculty instruction, 26 production capstones, and 580+ AI interviews with unlimited corporate interview drives until you get placed!
Live Architecture & Core Mentorship
2 Hours of interactive enterprise architecture, live faculty coding, and design patterns followed by 2 Hours of supervised capstone development.
Hands-On Labs, Tests & AI Practice
2 Hours of advanced microservices, real-time queues & cloud deployment followed by 2 Hours of timed mock tests and 1-on-1 AI voice interview rounds.
4-Month Master Roadmap to Guaranteed Placement
We transform you into a battle-tested software engineer ready to clear Tier-1 technical and system design interview rounds in 4 months with weekend online sessions.
Architecture & Core Mechanics
Core OOP, memory mechanics, data structures, algorithms & clean design patterns.
Capstones & Microservices
Build production full stack SaaS, microservices, REST APIs, queues & cloud deployment.
System Design & AI Interviews
Simulate live FAANG interview rounds, timed topic mock tests and AI voice evaluations.
Corporate Drives until Placed
Resume marketing, hiring drives across 1,050+ partners, and placement guarantee.
Projected Target CTC After Program
Industry-verified compensation brackets achieved by graduates across 1,050+ hiring partners:
₹8.5L – ₹14L /yr
Software Engineer I, Junior Backend Developer, Full Stack Associate.
- 260+ Hours Live Mentorship
- 26 Capstone Projects on GitHub
- 580+ AI Technical Interview Scorecards
₹14L – ₹24L /yr
Full Stack Java Engineer, Spring Boot Microservices Specialist, Cloud Engineer.
- Kafka Event-Driven Architectures
- Redis Caching & Performance Tuning
- Docker, Kubernetes & AWS CI/CD
₹24L – ₹36L+ /yr
Senior Full Stack Engineer, Microservices Architect, Lead Consultant.
- High-Throughput System Design (LLD/HLD)
- Fault Tolerance & Distributed Transactions
- FAANG System Design Clearing Mentorship
Topic-Wise Curriculum & Practice Hub
191 Modules • 390 Deep-Dive Topics • 390 Integrated Topic Mock Tests & AI Interviews
4 Kubernetes topics: Cloud-native architecture, containers, orchestration, declarative systems.
Cloud-native architecture
CLOUD-NATIVE FOUNDATION: Cloud-native architecture. Teach:; Cloud-native architecture; containers; orchestration; declarative systems; immutable infrastructure; reconciliation
- Explain the Kubernetes API behavior, control loop or operational purpose of Cloud-native architecture.
- Configure or apply Cloud-native architecture in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
containers
CLOUD-NATIVE FOUNDATION: containers. Teach:; Cloud-native architecture; containers; orchestration; declarative systems; immutable infrastructure; reconciliation
- Explain the Kubernetes API behavior, control loop or operational purpose of containers.
- Configure or apply containers in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
orchestration
CLOUD-NATIVE FOUNDATION: orchestration. Teach:; Cloud-native architecture; containers; orchestration; declarative systems; immutable infrastructure; reconciliation
- Explain the Kubernetes API behavior, control loop or operational purpose of orchestration.
- Configure or apply orchestration in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
declarative systems
CLOUD-NATIVE FOUNDATION: declarative systems. Teach:; Cloud-native architecture; containers; orchestration; declarative systems; immutable infrastructure; reconciliation
- Explain the Kubernetes API behavior, control loop or operational purpose of declarative systems.
- Configure or apply declarative systems in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: deployment, scaling, service discovery, self-healing.
deployment
WHY KUBERNETES?: deployment. Problems Kubernetes solves:; deployment; scaling; service discovery; self-healing; configuration; rollout; orchestration; Also teach what Kubernetes does not solve automatically.
- Explain the Kubernetes API behavior, control loop or operational purpose of deployment.
- Configure or apply deployment in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
scaling
WHY KUBERNETES?: scaling. Problems Kubernetes solves:; deployment; scaling; service discovery; self-healing; configuration; rollout; orchestration; Also teach what Kubernetes does not solve automatically.
- Explain the Kubernetes API behavior, control loop or operational purpose of scaling.
- Configure or apply scaling in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
service discovery
WHY KUBERNETES?: service discovery. Problems Kubernetes solves:; deployment; scaling; service discovery; self-healing; configuration; rollout; orchestration; Also teach what Kubernetes does not solve automatically.
- Explain the Kubernetes API behavior, control loop or operational purpose of service discovery.
- Configure or apply service discovery in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
self-healing
WHY KUBERNETES?: self-healing. Problems Kubernetes solves:; deployment; scaling; service discovery; self-healing; configuration; rollout; orchestration; Also teach what Kubernetes does not solve automatically.
- Explain the Kubernetes API behavior, control loop or operational purpose of self-healing.
- Configure or apply self-healing in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: image, container, registry, layers.
image
CONTAINER FUNDAMENTALS: image. Refresh:; image; container; registry; layers; namespaces/cgroups concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of image.
- Configure or apply image in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
container
CONTAINER FUNDAMENTALS: container. Refresh:; image; container; registry; layers; namespaces/cgroups concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of container.
- Configure or apply container in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
registry
CONTAINER FUNDAMENTALS: registry. Refresh:; image; container; registry; layers; namespaces/cgroups concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of registry.
- Configure or apply registry in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
layers
CONTAINER FUNDAMENTALS: layers. Refresh:; image; container; registry; layers; namespaces/cgroups concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of layers.
- Configure or apply layers in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: Dockerfile, multi-stage build, networks, volumes.
Dockerfile
DOCKER ESSENTIALS: Dockerfile. Teach:; Dockerfile; multi-stage build; networks; volumes; registries
- Explain the Kubernetes API behavior, control loop or operational purpose of Dockerfile.
- Configure or apply Dockerfile in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
multi-stage build
DOCKER ESSENTIALS: multi-stage build. Teach:; Dockerfile; multi-stage build; networks; volumes; registries
- Explain the Kubernetes API behavior, control loop or operational purpose of multi-stage build.
- Configure or apply multi-stage build in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
networks
DOCKER ESSENTIALS: networks. Teach:; Dockerfile; multi-stage build; networks; volumes; registries
- Explain the Kubernetes API behavior, control loop or operational purpose of networks.
- Configure or apply networks in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
volumes
DOCKER ESSENTIALS: volumes. Teach:; Dockerfile; multi-stage build; networks; volumes; registries
- Explain the Kubernetes API behavior, control loop or operational purpose of volumes.
- Configure or apply volumes in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: non-root containers, minimal images, immutable tags, scanning.
non-root containers
CONTAINER SECURITY: non-root containers. Teach:; non-root containers; minimal images; immutable tags; scanning; secret separation
- Explain the Kubernetes API behavior, control loop or operational purpose of non-root containers.
- Configure or apply non-root containers in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
minimal images
CONTAINER SECURITY: minimal images. Teach:; non-root containers; minimal images; immutable tags; scanning; secret separation
- Explain the Kubernetes API behavior, control loop or operational purpose of minimal images.
- Configure or apply minimal images in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
immutable tags
CONTAINER SECURITY: immutable tags. Teach:; non-root containers; minimal images; immutable tags; scanning; secret separation
- Explain the Kubernetes API behavior, control loop or operational purpose of immutable tags.
- Configure or apply immutable tags in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
scanning
CONTAINER SECURITY: scanning. Teach:; non-root containers; minimal images; immutable tags; scanning; secret separation
- Explain the Kubernetes API behavior, control loop or operational purpose of scanning.
- Configure or apply scanning in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: KUBERNETES ARCHITECTURE, Control Plane, Nodes.
KUBERNETES ARCHITECTURE
KUBERNETES ARCHITECTURE: KUBERNETES ARCHITECTURE. Understand:; Control Plane; API Server; Scheduler; Controller Manager; etcd; Nodes; kubelet; container runtime; kube-proxy / networking implementation concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of KUBERNETES ARCHITECTURE.
- Configure or apply KUBERNETES ARCHITECTURE in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Control Plane
KUBERNETES ARCHITECTURE: Control Plane. Understand:; Control Plane; API Server; Scheduler; Controller Manager; etcd; Nodes; kubelet; container runtime; kube-proxy / networking implementation concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of Control Plane.
- Configure or apply Control Plane in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Nodes
KUBERNETES ARCHITECTURE: Nodes. Understand:; Control Plane; API Server; Scheduler; Controller Manager; etcd; Nodes; kubelet; container runtime; kube-proxy / networking implementation concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of Nodes.
- Configure or apply Nodes in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: API SERVER.
API SERVER
API SERVER: API SERVER. Everything revolves around Kubernetes API objects.
- Explain the Kubernetes API behavior, control loop or operational purpose of API SERVER.
- Configure or apply API SERVER in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: cluster state, consistency, backup, restore concepts.
cluster state
ETCD: cluster state. Teach:; cluster state; consistency; backup; restore concepts; security
- Explain the Kubernetes API behavior, control loop or operational purpose of cluster state.
- Configure or apply cluster state in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
consistency
ETCD: consistency. Teach:; cluster state; consistency; backup; restore concepts; security
- Explain the Kubernetes API behavior, control loop or operational purpose of consistency.
- Configure or apply consistency in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
backup
ETCD: backup. Teach:; cluster state; consistency; backup; restore concepts; security
- Explain the Kubernetes API behavior, control loop or operational purpose of backup.
- Configure or apply backup in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
restore concepts
ETCD: restore concepts. Teach:; cluster state; consistency; backup; restore concepts; security
- Explain the Kubernetes API behavior, control loop or operational purpose of restore concepts.
- Configure or apply restore concepts in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: SCHEDULER.
SCHEDULER
SCHEDULER: SCHEDULER. Understand how workloads get assigned to nodes.
- Explain the Kubernetes API behavior, control loop or operational purpose of SCHEDULER.
- Configure or apply SCHEDULER in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: CONTROLLERS.
CONTROLLERS
CONTROLLERS: CONTROLLERS. Kubernetes continuously reconciles:; Actual State; toward:; Desired State
- Explain the Kubernetes API behavior, control loop or operational purpose of CONTROLLERS.
- Configure or apply CONTROLLERS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
2 Kubernetes topics: DECLARATIVE CONFIGURATION, Desired state in versioned configuration.
DECLARATIVE CONFIGURATION
DECLARATIVE CONFIGURATION: DECLARATIVE CONFIGURATION. Bad operational model:; Manually create and remember everything.; Preferred:; Desired state in versioned configuration.
- Explain the Kubernetes API behavior, control loop or operational purpose of DECLARATIVE CONFIGURATION.
- Configure or apply DECLARATIVE CONFIGURATION in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Desired state in versioned configuration
DECLARATIVE CONFIGURATION: Desired state in versioned configuration. Bad operational model:; Manually create and remember everything.; Preferred:; Desired state in versioned configuration.
- Explain the Kubernetes API behavior, control loop or operational purpose of Desired state in versioned configuration.
- Configure or apply Desired state in versioned configuration in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: KUBECTL.
KUBECTL
KUBECTL: KUBECTL. Teach:; get; describe; apply; delete; logs; exec; top; rollout; scale; explain; api-resources
- Explain the Kubernetes API behavior, control loop or operational purpose of KUBECTL.
- Configure or apply KUBECTL in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: YAML.
YAML
YAML: YAML. Students must understand:; yaml; apiVersion:; kind:; metadata:; spec:
- Explain the Kubernetes API behavior, control loop or operational purpose of YAML.
- Configure or apply YAML in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: API groups, versions, resource types.
API groups
API DISCOVERY: API groups. Teach:; API groups; versions; resource types
- Explain the Kubernetes API behavior, control loop or operational purpose of API groups.
- Configure or apply API groups in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
versions
API DISCOVERY: versions. Teach:; API groups; versions; resource types
- Explain the Kubernetes API behavior, control loop or operational purpose of versions.
- Configure or apply versions in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
resource types
API DISCOVERY: resource types. Teach:; API groups; versions; resource types
- Explain the Kubernetes API behavior, control loop or operational purpose of resource types.
- Configure or apply resource types in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: Pod lifecycle, containers, shared network, shared volumes.
Pod lifecycle
PODS: Pod lifecycle. Understand:; Pod lifecycle; containers; shared network; shared volumes
- Explain the Kubernetes API behavior, control loop or operational purpose of Pod lifecycle.
- Configure or apply Pod lifecycle in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
containers
PODS: containers. Understand:; Pod lifecycle; containers; shared network; shared volumes
- Explain the Kubernetes API behavior, control loop or operational purpose of containers.
- Configure or apply containers in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
shared network
PODS: shared network. Understand:; Pod lifecycle; containers; shared network; shared volumes
- Explain the Kubernetes API behavior, control loop or operational purpose of shared network.
- Configure or apply shared network in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
shared volumes
PODS: shared volumes. Understand:; Pod lifecycle; containers; shared network; shared volumes
- Explain the Kubernetes API behavior, control loop or operational purpose of shared volumes.
- Configure or apply shared volumes in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: sidecar, adapter, ambassador concepts.
sidecar
MULTI-CONTAINER PODS: sidecar. Patterns:; sidecar; adapter; ambassador concepts; Avoid unnecessary multi-container Pods.
- Explain the Kubernetes API behavior, control loop or operational purpose of sidecar.
- Configure or apply sidecar in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
adapter
MULTI-CONTAINER PODS: adapter. Patterns:; sidecar; adapter; ambassador concepts; Avoid unnecessary multi-container Pods.
- Explain the Kubernetes API behavior, control loop or operational purpose of adapter.
- Configure or apply adapter in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
ambassador concepts
MULTI-CONTAINER PODS: ambassador concepts. Patterns:; sidecar; adapter; ambassador concepts; Avoid unnecessary multi-container Pods.
- Explain the Kubernetes API behavior, control loop or operational purpose of ambassador concepts.
- Configure or apply ambassador concepts in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: INIT CONTAINERS.
INIT CONTAINERS
INIT CONTAINERS: INIT CONTAINERS. INIT CONTAINERS concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of INIT CONTAINERS.
- Configure or apply INIT CONTAINERS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: Pending, Running, Succeeded, Failed.
Pending
POD LIFECYCLE: Pending. States:; Pending; Running; Succeeded; Failed; Unknown
- Explain the Kubernetes API behavior, control loop or operational purpose of Pending.
- Configure or apply Pending in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Running
POD LIFECYCLE: Running. States:; Pending; Running; Succeeded; Failed; Unknown
- Explain the Kubernetes API behavior, control loop or operational purpose of Running.
- Configure or apply Running in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Succeeded
POD LIFECYCLE: Succeeded. States:; Pending; Running; Succeeded; Failed; Unknown
- Explain the Kubernetes API behavior, control loop or operational purpose of Succeeded.
- Configure or apply Succeeded in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Failed
POD LIFECYCLE: Failed. States:; Pending; Running; Succeeded; Failed; Unknown
- Explain the Kubernetes API behavior, control loop or operational purpose of Failed.
- Configure or apply Failed in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: RESTART POLICIES.
RESTART POLICIES
RESTART POLICIES: RESTART POLICIES. RESTART POLICIES concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of RESTART POLICIES.
- Configure or apply RESTART POLICIES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: SIGTERM, grace periods, lifecycle hooks concepts.
SIGTERM
POD TERMINATION: SIGTERM. Teach:; SIGTERM; grace periods; lifecycle hooks concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of SIGTERM.
- Configure or apply SIGTERM in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
grace periods
POD TERMINATION: grace periods. Teach:; SIGTERM; grace periods; lifecycle hooks concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of grace periods.
- Configure or apply grace periods in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
lifecycle hooks concepts
POD TERMINATION: lifecycle hooks concepts. Teach:; SIGTERM; grace periods; lifecycle hooks concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of lifecycle hooks concepts.
- Configure or apply lifecycle hooks concepts in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: replicas, rollout, revision, rollback.
replicas
DEPLOYMENTS: replicas. Manage stateless applications.; Teach:; replicas; rollout; revision; rollback
- Explain the Kubernetes API behavior, control loop or operational purpose of replicas.
- Configure or apply replicas in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
rollout
DEPLOYMENTS: rollout. Manage stateless applications.; Teach:; replicas; rollout; revision; rollback
- Explain the Kubernetes API behavior, control loop or operational purpose of rollout.
- Configure or apply rollout in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
revision
DEPLOYMENTS: revision. Manage stateless applications.; Teach:; replicas; rollout; revision; rollback
- Explain the Kubernetes API behavior, control loop or operational purpose of revision.
- Configure or apply revision in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
rollback
DEPLOYMENTS: rollback. Manage stateless applications.; Teach:; replicas; rollout; revision; rollback
- Explain the Kubernetes API behavior, control loop or operational purpose of rollback.
- Configure or apply rollback in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: REPLICASETS.
REPLICASETS
REPLICASETS: REPLICASETS. REPLICASETS concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of REPLICASETS.
- Configure or apply REPLICASETS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
2 Kubernetes topics: maxUnavailable, maxSurge.
maxUnavailable
ROLLING UPDATE: maxUnavailable. Configure:; maxUnavailable; maxSurge
- Explain the Kubernetes API behavior, control loop or operational purpose of maxUnavailable.
- Configure or apply maxUnavailable in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
maxSurge
ROLLING UPDATE: maxSurge. Configure:; maxUnavailable; maxSurge
- Explain the Kubernetes API behavior, control loop or operational purpose of maxSurge.
- Configure or apply maxSurge in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: ROLLBACK.
ROLLBACK
ROLLBACK: ROLLBACK. Use:; kubectl rollout undo; and declarative Git-based rollback concepts.
- Explain the Kubernetes API behavior, control loop or operational purpose of ROLLBACK.
- Configure or apply ROLLBACK in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: stable identities, stable storage, ordered deployment concepts.
stable identities
STATEFULSETS: stable identities. Teach:; stable identities; stable storage; ordered deployment concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of stable identities.
- Configure or apply stable identities in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
stable storage
STATEFULSETS: stable storage. Teach:; stable identities; stable storage; ordered deployment concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of stable storage.
- Configure or apply stable storage in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
ordered deployment concepts
STATEFULSETS: ordered deployment concepts. Teach:; stable identities; stable storage; ordered deployment concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of ordered deployment concepts.
- Configure or apply ordered deployment concepts in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: logging agent, monitoring agent, node-level daemon.
logging agent
DAEMONSETS: logging agent. Use cases:; logging agent; monitoring agent; node-level daemon
- Explain the Kubernetes API behavior, control loop or operational purpose of logging agent.
- Configure or apply logging agent in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
monitoring agent
DAEMONSETS: monitoring agent. Use cases:; logging agent; monitoring agent; node-level daemon
- Explain the Kubernetes API behavior, control loop or operational purpose of monitoring agent.
- Configure or apply monitoring agent in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
node-level daemon
DAEMONSETS: node-level daemon. Use cases:; logging agent; monitoring agent; node-level daemon
- Explain the Kubernetes API behavior, control loop or operational purpose of node-level daemon.
- Configure or apply node-level daemon in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: JOBS.
JOBS
JOBS: JOBS. JOBS concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of JOBS.
- Configure or apply JOBS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: CRONJOBS, WORKLOAD PROJECT, Deploy Stateless + Stateful Application Suite.
CRONJOBS
CRONJOBS: CRONJOBS. Teach:; schedules; concurrency; retries; history; WORKLOAD PROJECT; Deploy Stateless + Stateful Application Suite; Includes:; API Deployment; worker Deployment; stateful database lab; CronJob
- Explain the Kubernetes API behavior, control loop or operational purpose of CRONJOBS.
- Configure or apply CRONJOBS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
WORKLOAD PROJECT
CRONJOBS: WORKLOAD PROJECT. Teach:; schedules; concurrency; retries; history; WORKLOAD PROJECT; Deploy Stateless + Stateful Application Suite; Includes:; API Deployment; worker Deployment; stateful database lab; CronJob
- Explain the Kubernetes API behavior, control loop or operational purpose of WORKLOAD PROJECT.
- Configure or apply WORKLOAD PROJECT in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Deploy Stateless + Stateful Application Suite
CRONJOBS: Deploy Stateless + Stateful Application Suite. Teach:; schedules; concurrency; retries; history; WORKLOAD PROJECT; Deploy Stateless + Stateful Application Suite; Includes:; API Deployment; worker Deployment; stateful database lab; CronJob
- Explain the Kubernetes API behavior, control loop or operational purpose of Deploy Stateless + Stateful Application Suite.
- Configure or apply Deploy Stateless + Stateful Application Suite in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: SERVICES, ClusterIP, NodePort, LoadBalancer.
SERVICES
SERVICES: SERVICES. Teach:; ClusterIP; NodePort; LoadBalancer; ExternalName awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of SERVICES.
- Configure or apply SERVICES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
ClusterIP
SERVICES: ClusterIP. Teach:; ClusterIP; NodePort; LoadBalancer; ExternalName awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of ClusterIP.
- Configure or apply ClusterIP in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
NodePort
SERVICES: NodePort. Teach:; ClusterIP; NodePort; LoadBalancer; ExternalName awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of NodePort.
- Configure or apply NodePort in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
LoadBalancer
SERVICES: LoadBalancer. Teach:; ClusterIP; NodePort; LoadBalancer; ExternalName awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of LoadBalancer.
- Configure or apply LoadBalancer in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: SERVICE DISCOVERY.
SERVICE DISCOVERY
SERVICE DISCOVERY: SERVICE DISCOVERY. DNS:; service.namespace.svc.cluster.local; Conceptually.
- Explain the Kubernetes API behavior, control loop or operational purpose of SERVICE DISCOVERY.
- Configure or apply SERVICE DISCOVERY in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: ENDPOINTS / ENDPOINTSLICES.
ENDPOINTS / ENDPOINTSLICES
ENDPOINTS / ENDPOINTSLICES: ENDPOINTS / ENDPOINTSLICES. Understand how Services find Pods.
- Explain the Kubernetes API behavior, control loop or operational purpose of ENDPOINTS / ENDPOINTSLICES.
- Configure or apply ENDPOINTS / ENDPOINTSLICES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: selector, Pod readiness, target port, Endpoints.
selector
SERVICE DEBUGGING: selector. If Service exists but application unreachable, check:; selector; Pod readiness; target port; Endpoints; network
- Explain the Kubernetes API behavior, control loop or operational purpose of selector.
- Configure or apply selector in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Pod readiness
SERVICE DEBUGGING: Pod readiness. If Service exists but application unreachable, check:; selector; Pod readiness; target port; Endpoints; network
- Explain the Kubernetes API behavior, control loop or operational purpose of Pod readiness.
- Configure or apply Pod readiness in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
target port
SERVICE DEBUGGING: target port. If Service exists but application unreachable, check:; selector; Pod readiness; target port; Endpoints; network
- Explain the Kubernetes API behavior, control loop or operational purpose of target port.
- Configure or apply target port in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Endpoints
SERVICE DEBUGGING: Endpoints. If Service exists but application unreachable, check:; selector; Pod readiness; target port; Endpoints; network
- Explain the Kubernetes API behavior, control loop or operational purpose of Endpoints.
- Configure or apply Endpoints in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: KUBERNETES DNS.
KUBERNETES DNS
KUBERNETES DNS: KUBERNETES DNS. CoreDNS concepts.
- Explain the Kubernetes API behavior, control loop or operational purpose of KUBERNETES DNS.
- Configure or apply KUBERNETES DNS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: INGRESS.
INGRESS
INGRESS: INGRESS. Teach legacy/common Ingress concepts.
- Explain the Kubernetes API behavior, control loop or operational purpose of INGRESS.
- Configure or apply INGRESS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: GatewayClass, Gateway, HTTPRoute, TCPRoute.
GatewayClass
GATEWAY API: GatewayClass. Gateway API should now be part of the primary networking curriculum.; Cover:; GatewayClass; Gateway; HTTPRoute; TCPRoute; UDPRoute concepts; Gateway API v1.6 moved TCPRoute and UDPRoute to Standard channel in August 2026, reflecting its continuing maturation.
- Explain the Kubernetes API behavior, control loop or operational purpose of GatewayClass.
- Configure or apply GatewayClass in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Gateway
GATEWAY API: Gateway. Gateway API should now be part of the primary networking curriculum.; Cover:; GatewayClass; Gateway; HTTPRoute; TCPRoute; UDPRoute concepts; Gateway API v1.6 moved TCPRoute and UDPRoute to Standard channel in August 2026, reflecting its continuing maturation.
- Explain the Kubernetes API behavior, control loop or operational purpose of Gateway.
- Configure or apply Gateway in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
HTTPRoute
GATEWAY API: HTTPRoute. Gateway API should now be part of the primary networking curriculum.; Cover:; GatewayClass; Gateway; HTTPRoute; TCPRoute; UDPRoute concepts; Gateway API v1.6 moved TCPRoute and UDPRoute to Standard channel in August 2026, reflecting its continuing maturation.
- Explain the Kubernetes API behavior, control loop or operational purpose of HTTPRoute.
- Configure or apply HTTPRoute in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
TCPRoute
GATEWAY API: TCPRoute. Gateway API should now be part of the primary networking curriculum.; Cover:; GatewayClass; Gateway; HTTPRoute; TCPRoute; UDPRoute concepts; Gateway API v1.6 moved TCPRoute and UDPRoute to Standard channel in August 2026, reflecting its continuing maturation.
- Explain the Kubernetes API behavior, control loop or operational purpose of TCPRoute.
- Configure or apply TCPRoute in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: INGRESS VS GATEWAY API.
INGRESS VS GATEWAY API
INGRESS VS GATEWAY API: INGRESS VS GATEWAY API. Students should understand the evolution rather than assuming they are identical.
- Explain the Kubernetes API behavior, control loop or operational purpose of INGRESS VS GATEWAY API.
- Configure or apply INGRESS VS GATEWAY API in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: Pod-to-Pod, Pod-to-Service, external-to-Service.
Pod-to-Pod
NETWORK MODEL: Pod-to-Pod. Every Pod receives network identity.; Understand:; Pod-to-Pod; Pod-to-Service; external-to-Service
- Explain the Kubernetes API behavior, control loop or operational purpose of Pod-to-Pod.
- Configure or apply Pod-to-Pod in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Pod-to-Service
NETWORK MODEL: Pod-to-Service. Every Pod receives network identity.; Understand:; Pod-to-Pod; Pod-to-Service; external-to-Service
- Explain the Kubernetes API behavior, control loop or operational purpose of Pod-to-Service.
- Configure or apply Pod-to-Service in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
external-to-Service
NETWORK MODEL: external-to-Service. Every Pod receives network identity.; Understand:; Pod-to-Pod; Pod-to-Service; external-to-Service
- Explain the Kubernetes API behavior, control loop or operational purpose of external-to-Service.
- Configure or apply external-to-Service in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: Calico, Cilium, cloud CNI.
Calico
CNI: Calico. Teach concepts around Container Network Interface.; Examples awareness:; Calico; Cilium; cloud CNI; Do not hardwire course to one implementation.
- Explain the Kubernetes API behavior, control loop or operational purpose of Calico.
- Configure or apply Calico in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Cilium
CNI: Cilium. Teach concepts around Container Network Interface.; Examples awareness:; Calico; Cilium; cloud CNI; Do not hardwire course to one implementation.
- Explain the Kubernetes API behavior, control loop or operational purpose of Cilium.
- Configure or apply Cilium in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
cloud CNI
CNI: cloud CNI. Teach concepts around Container Network Interface.; Examples awareness:; Calico; Cilium; cloud CNI; Do not hardwire course to one implementation.
- Explain the Kubernetes API behavior, control loop or operational purpose of cloud CNI.
- Configure or apply cloud CNI in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: NETWORK POLICIES, Default Deny, NETWORK SECURITY LAB.
NETWORK POLICIES
NETWORK POLICIES: NETWORK POLICIES. Implement:; Default Deny; then explicitly allow required flows.; NETWORK SECURITY LAB; Services:; frontend; API; database; Requirement:; Frontend can reach API.; API can reach DB.; Frontend must not directly reach DB.
- Explain the Kubernetes API behavior, control loop or operational purpose of NETWORK POLICIES.
- Configure or apply NETWORK POLICIES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Default Deny
NETWORK POLICIES: Default Deny. Implement:; Default Deny; then explicitly allow required flows.; NETWORK SECURITY LAB; Services:; frontend; API; database; Requirement:; Frontend can reach API.; API can reach DB.; Frontend must not directly reach DB.
- Explain the Kubernetes API behavior, control loop or operational purpose of Default Deny.
- Configure or apply Default Deny in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
NETWORK SECURITY LAB
NETWORK POLICIES: NETWORK SECURITY LAB. Implement:; Default Deny; then explicitly allow required flows.; NETWORK SECURITY LAB; Services:; frontend; API; database; Requirement:; Frontend can reach API.; API can reach DB.; Frontend must not directly reach DB.
- Explain the Kubernetes API behavior, control loop or operational purpose of NETWORK SECURITY LAB.
- Configure or apply NETWORK SECURITY LAB in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: CoreDNS, namespace, Service, DNS configuration.
CoreDNS
DNS TROUBLESHOOTING: CoreDNS. Scenario:; Application cannot resolve Service name.; Check:; CoreDNS; namespace; Service; DNS configuration
- Explain the Kubernetes API behavior, control loop or operational purpose of CoreDNS.
- Configure or apply CoreDNS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
namespace
DNS TROUBLESHOOTING: namespace. Scenario:; Application cannot resolve Service name.; Check:; CoreDNS; namespace; Service; DNS configuration
- Explain the Kubernetes API behavior, control loop or operational purpose of namespace.
- Configure or apply namespace in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Service
DNS TROUBLESHOOTING: Service. Scenario:; Application cannot resolve Service name.; Check:; CoreDNS; namespace; Service; DNS configuration
- Explain the Kubernetes API behavior, control loop or operational purpose of Service.
- Configure or apply Service in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
DNS configuration
DNS TROUBLESHOOTING: DNS configuration. Scenario:; Application cannot resolve Service name.; Check:; CoreDNS; namespace; Service; DNS configuration
- Explain the Kubernetes API behavior, control loop or operational purpose of DNS configuration.
- Configure or apply DNS configuration in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: CONFIGMAPS.
CONFIGMAPS
CONFIGMAPS: CONFIGMAPS. Use for non-sensitive configuration.
- Explain the Kubernetes API behavior, control loop or operational purpose of CONFIGMAPS.
- Configure or apply CONFIGMAPS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: Secret objects, base64 is not encryption, secret access control.
Secret objects
SECRETS: Secret objects. Teach:; Secret objects; base64 is not encryption; secret access control
- Explain the Kubernetes API behavior, control loop or operational purpose of Secret objects.
- Configure or apply Secret objects in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
base64 is not encryption
SECRETS: base64 is not encryption. Teach:; Secret objects; base64 is not encryption; secret access control
- Explain the Kubernetes API behavior, control loop or operational purpose of base64 is not encryption.
- Configure or apply base64 is not encryption in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
secret access control
SECRETS: secret access control. Teach:; Secret objects; base64 is not encryption; secret access control
- Explain the Kubernetes API behavior, control loop or operational purpose of secret access control.
- Configure or apply secret access control in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: cloud secret stores, external secret controllers concepts, Vault awareness.
cloud secret stores
EXTERNAL SECRET MANAGEMENT: cloud secret stores. Introduce:; cloud secret stores; external secret controllers concepts; Vault awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of cloud secret stores.
- Configure or apply cloud secret stores in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
external secret controllers concepts
EXTERNAL SECRET MANAGEMENT: external secret controllers concepts. Introduce:; cloud secret stores; external secret controllers concepts; Vault awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of external secret controllers concepts.
- Configure or apply external secret controllers concepts in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Vault awareness
EXTERNAL SECRET MANAGEMENT: Vault awareness. Introduce:; cloud secret stores; external secret controllers concepts; Vault awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of Vault awareness.
- Configure or apply Vault awareness in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: ENV VARS VS FILE MOUNTS.
ENV VARS VS FILE MOUNTS
ENV VARS VS FILE MOUNTS: ENV VARS VS FILE MOUNTS. Choose appropriately.
- Explain the Kubernetes API behavior, control loop or operational purpose of ENV VARS VS FILE MOUNTS.
- Configure or apply ENV VARS VS FILE MOUNTS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: CONFIG RELOAD STRATEGIES.
CONFIG RELOAD STRATEGIES
CONFIG RELOAD STRATEGIES: CONFIG RELOAD STRATEGIES. Applications may require restart/reload.
- Explain the Kubernetes API behavior, control loop or operational purpose of CONFIG RELOAD STRATEGIES.
- Configure or apply CONFIG RELOAD STRATEGIES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
2 Kubernetes topics: ephemeral, persistent storage.
ephemeral
STORAGE FOUNDATION: ephemeral. Understand:; ephemeral; persistent storage
- Explain the Kubernetes API behavior, control loop or operational purpose of ephemeral.
- Configure or apply ephemeral in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
persistent storage
STORAGE FOUNDATION: persistent storage. Understand:; ephemeral; persistent storage
- Explain the Kubernetes API behavior, control loop or operational purpose of persistent storage.
- Configure or apply persistent storage in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: VOLUMES.
VOLUMES
VOLUMES: VOLUMES. Teach relevant volume types conceptually.
- Explain the Kubernetes API behavior, control loop or operational purpose of VOLUMES.
- Configure or apply VOLUMES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: PERSISTENT VOLUMES.
PERSISTENT VOLUMES
PERSISTENT VOLUMES: PERSISTENT VOLUMES. PV.
- Explain the Kubernetes API behavior, control loop or operational purpose of PERSISTENT VOLUMES.
- Configure or apply PERSISTENT VOLUMES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: PERSISTENT VOLUME CLAIMS.
PERSISTENT VOLUME CLAIMS
PERSISTENT VOLUME CLAIMS: PERSISTENT VOLUME CLAIMS. PVC.
- Explain the Kubernetes API behavior, control loop or operational purpose of PERSISTENT VOLUME CLAIMS.
- Configure or apply PERSISTENT VOLUME CLAIMS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: STORAGECLASS.
STORAGECLASS
STORAGECLASS: STORAGECLASS. Dynamic provisioning.
- Explain the Kubernetes API behavior, control loop or operational purpose of STORAGECLASS.
- Configure or apply STORAGECLASS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: CSI.
CSI
CSI: CSI. Container Storage Interface concepts.
- Explain the Kubernetes API behavior, control loop or operational purpose of CSI.
- Configure or apply CSI in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: RWO, ROX, RWX, RWOP concepts.
RWO
ACCESS MODES: RWO. Understand:; RWO; ROX; RWX; RWOP concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of RWO.
- Configure or apply RWO in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
ROX
ACCESS MODES: ROX. Understand:; RWO; ROX; RWX; RWOP concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of ROX.
- Configure or apply ROX in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
RWX
ACCESS MODES: RWX. Understand:; RWO; ROX; RWX; RWOP concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of RWX.
- Configure or apply RWX in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
RWOP concepts
ACCESS MODES: RWOP concepts. Understand:; RWO; ROX; RWX; RWOP concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of RWOP concepts.
- Configure or apply RWOP concepts in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: VOLUME SNAPSHOTS.
VOLUME SNAPSHOTS
VOLUME SNAPSHOTS: VOLUME SNAPSHOTS. VOLUME SNAPSHOTS concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of VOLUME SNAPSHOTS.
- Configure or apply VOLUME SNAPSHOTS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
2 Kubernetes topics: STORAGE HEALTH, STORAGE LAB.
STORAGE HEALTH
STORAGE HEALTH: STORAGE HEALTH. Kubernetes 1.37 continues work on machine-readable volume health information, making storage troubleshooting an important current operational topic.; STORAGE LAB; Provision persistent application storage and simulate storage failure.
- Explain the Kubernetes API behavior, control loop or operational purpose of STORAGE HEALTH.
- Configure or apply STORAGE HEALTH in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
STORAGE LAB
STORAGE HEALTH: STORAGE LAB. Kubernetes 1.37 continues work on machine-readable volume health information, making storage troubleshooting an important current operational topic.; STORAGE LAB; Provision persistent application storage and simulate storage failure.
- Explain the Kubernetes API behavior, control loop or operational purpose of STORAGE LAB.
- Configure or apply STORAGE LAB in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: RESOURCE REQUESTS.
RESOURCE REQUESTS
RESOURCE REQUESTS: RESOURCE REQUESTS. Scheduler uses requests.
- Explain the Kubernetes API behavior, control loop or operational purpose of RESOURCE REQUESTS.
- Configure or apply RESOURCE REQUESTS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: RESOURCE LIMITS.
RESOURCE LIMITS
RESOURCE LIMITS: RESOURCE LIMITS. Runtime constraints.
- Explain the Kubernetes API behavior, control loop or operational purpose of RESOURCE LIMITS.
- Configure or apply RESOURCE LIMITS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: CPU THROTTLING.
CPU THROTTLING
CPU THROTTLING: CPU THROTTLING. Understand what happens when limits are exceeded.
- Explain the Kubernetes API behavior, control loop or operational purpose of CPU THROTTLING.
- Configure or apply CPU THROTTLING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: OOMKILLED.
OOMKILLED
OOMKILLED: OOMKILLED. Memory limit exceeded.
- Explain the Kubernetes API behavior, control loop or operational purpose of OOMKILLED.
- Configure or apply OOMKILLED in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: Guaranteed, Burstable, BestEffort.
Guaranteed
QUALITY OF SERVICE: Guaranteed. Teach:; Guaranteed; Burstable; BestEffort
- Explain the Kubernetes API behavior, control loop or operational purpose of Guaranteed.
- Configure or apply Guaranteed in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Burstable
QUALITY OF SERVICE: Burstable. Teach:; Guaranteed; Burstable; BestEffort
- Explain the Kubernetes API behavior, control loop or operational purpose of Burstable.
- Configure or apply Burstable in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
BestEffort
QUALITY OF SERVICE: BestEffort. Teach:; Guaranteed; Burstable; BestEffort
- Explain the Kubernetes API behavior, control loop or operational purpose of BestEffort.
- Configure or apply BestEffort in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: LIMITRANGE.
LIMITRANGE
LIMITRANGE: LIMITRANGE. LIMITRANGE concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of LIMITRANGE.
- Configure or apply LIMITRANGE in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: RESOURCEQUOTA.
RESOURCEQUOTA
RESOURCEQUOTA: RESOURCEQUOTA. Useful in shared clusters.
- Explain the Kubernetes API behavior, control loop or operational purpose of RESOURCEQUOTA.
- Configure or apply RESOURCEQUOTA in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: node selectors, node affinity, Pod affinity, anti-affinity.
node selectors
SCHEDULING: node selectors. Teach:; node selectors; node affinity; Pod affinity; anti-affinity
- Explain the Kubernetes API behavior, control loop or operational purpose of node selectors.
- Configure or apply node selectors in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
node affinity
SCHEDULING: node affinity. Teach:; node selectors; node affinity; Pod affinity; anti-affinity
- Explain the Kubernetes API behavior, control loop or operational purpose of node affinity.
- Configure or apply node affinity in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Pod affinity
SCHEDULING: Pod affinity. Teach:; node selectors; node affinity; Pod affinity; anti-affinity
- Explain the Kubernetes API behavior, control loop or operational purpose of Pod affinity.
- Configure or apply Pod affinity in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
anti-affinity
SCHEDULING: anti-affinity. Teach:; node selectors; node affinity; Pod affinity; anti-affinity
- Explain the Kubernetes API behavior, control loop or operational purpose of anti-affinity.
- Configure or apply anti-affinity in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: TAINTS & TOLERATIONS.
TAINTS & TOLERATIONS
TAINTS & TOLERATIONS: TAINTS & TOLERATIONS. Use for workload placement.
- Explain the Kubernetes API behavior, control loop or operational purpose of TAINTS & TOLERATIONS.
- Configure or apply TAINTS & TOLERATIONS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: TOPOLOGY SPREAD CONSTRAINTS.
TOPOLOGY SPREAD CONSTRAINTS
TOPOLOGY SPREAD CONSTRAINTS: TOPOLOGY SPREAD CONSTRAINTS. Distribute workloads across failure domains.
- Explain the Kubernetes API behavior, control loop or operational purpose of TOPOLOGY SPREAD CONSTRAINTS.
- Configure or apply TOPOLOGY SPREAD CONSTRAINTS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: PRIORITY CLASSES.
PRIORITY CLASSES
PRIORITY CLASSES: PRIORITY CLASSES. PRIORITY CLASSES concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of PRIORITY CLASSES.
- Configure or apply PRIORITY CLASSES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: POD DISRUPTION BUDGETS.
POD DISRUPTION BUDGETS
POD DISRUPTION BUDGETS: POD DISRUPTION BUDGETS. Protect availability during voluntary disruptions.
- Explain the Kubernetes API behavior, control loop or operational purpose of POD DISRUPTION BUDGETS.
- Configure or apply POD DISRUPTION BUDGETS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: AUTOSCALING FOUNDATION, Pod scaling, Node scaling, Resource-right-sizing.
AUTOSCALING FOUNDATION
AUTOSCALING FOUNDATION: AUTOSCALING FOUNDATION. Teach three dimensions:; Pod scaling; Node scaling; Resource-right-sizing
- Explain the Kubernetes API behavior, control loop or operational purpose of AUTOSCALING FOUNDATION.
- Configure or apply AUTOSCALING FOUNDATION in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Pod scaling
AUTOSCALING FOUNDATION: Pod scaling. Teach three dimensions:; Pod scaling; Node scaling; Resource-right-sizing
- Explain the Kubernetes API behavior, control loop or operational purpose of Pod scaling.
- Configure or apply Pod scaling in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Node scaling
AUTOSCALING FOUNDATION: Node scaling. Teach three dimensions:; Pod scaling; Node scaling; Resource-right-sizing
- Explain the Kubernetes API behavior, control loop or operational purpose of Node scaling.
- Configure or apply Node scaling in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Resource-right-sizing
AUTOSCALING FOUNDATION: Resource-right-sizing. Teach three dimensions:; Pod scaling; Node scaling; Resource-right-sizing
- Explain the Kubernetes API behavior, control loop or operational purpose of Resource-right-sizing.
- Configure or apply Resource-right-sizing in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: CPU, memory, custom metrics concepts.
CPU
HORIZONTAL POD AUTOSCALER: CPU. Use:; CPU; memory; custom metrics concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of CPU.
- Configure or apply CPU in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
memory
HORIZONTAL POD AUTOSCALER: memory. Use:; CPU; memory; custom metrics concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of memory.
- Configure or apply memory in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
custom metrics concepts
HORIZONTAL POD AUTOSCALER: custom metrics concepts. Use:; CPU; memory; custom metrics concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of custom metrics concepts.
- Configure or apply custom metrics concepts in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: METRICS API.
METRICS API
METRICS API: METRICS API. Kubernetes 1.37 promotes metrics.k8s.io/v1 to stable; students should understand its role behind kubectl top and resource-metric-based autoscaling.
- Explain the Kubernetes API behavior, control loop or operational purpose of METRICS API.
- Configure or apply METRICS API in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: VERTICAL POD AUTOSCALER AWARENESS.
VERTICAL POD AUTOSCALER AWARENESS
VERTICAL POD AUTOSCALER AWARENESS: VERTICAL POD AUTOSCALER AWARENESS. VERTICAL POD AUTOSCALER AWARENESS concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of VERTICAL POD AUTOSCALER AWARENESS.
- Configure or apply VERTICAL POD AUTOSCALER AWARENESS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: CLUSTER AUTOSCALING.
CLUSTER AUTOSCALING
CLUSTER AUTOSCALING: CLUSTER AUTOSCALING. Teach cluster scaling concepts.
- Explain the Kubernetes API behavior, control loop or operational purpose of CLUSTER AUTOSCALING.
- Configure or apply CLUSTER AUTOSCALING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
2 Kubernetes topics: KARPENTER AWARENESS, AUTOSCALING LAB.
KARPENTER AWARENESS
KARPENTER AWARENESS: KARPENTER AWARENESS. Particularly relevant in AWS/EKS environments.; Teach conceptually:; workload-driven node provisioning; instance selection; consolidation; AUTOSCALING LAB; Generate workload and observe:; 2 Pods → 10 Pods → Scale Down
- Explain the Kubernetes API behavior, control loop or operational purpose of KARPENTER AWARENESS.
- Configure or apply KARPENTER AWARENESS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
AUTOSCALING LAB
KARPENTER AWARENESS: AUTOSCALING LAB. Particularly relevant in AWS/EKS environments.; Teach conceptually:; workload-driven node provisioning; instance selection; consolidation; AUTOSCALING LAB; Generate workload and observe:; 2 Pods → 10 Pods → Scale Down
- Explain the Kubernetes API behavior, control loop or operational purpose of AUTOSCALING LAB.
- Configure or apply AUTOSCALING LAB in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
4 Kubernetes topics: HEALTH PROBES, Startup, Readiness, Liveness.
HEALTH PROBES
HEALTH PROBES: HEALTH PROBES. Teach:; Startup; Readiness; Liveness
- Explain the Kubernetes API behavior, control loop or operational purpose of HEALTH PROBES.
- Configure or apply HEALTH PROBES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Startup
HEALTH PROBES: Startup. Teach:; Startup; Readiness; Liveness
- Explain the Kubernetes API behavior, control loop or operational purpose of Startup.
- Configure or apply Startup in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Readiness
HEALTH PROBES: Readiness. Teach:; Startup; Readiness; Liveness
- Explain the Kubernetes API behavior, control loop or operational purpose of Readiness.
- Configure or apply Readiness in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Liveness
HEALTH PROBES: Liveness. Teach:; Startup; Readiness; Liveness
- Explain the Kubernetes API behavior, control loop or operational purpose of Liveness.
- Configure or apply Liveness in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: PROBE DESIGN.
PROBE DESIGN
PROBE DESIGN: PROBE DESIGN. Bad:; Liveness probes a fragile external dependency.; Result:; Entire cluster may restart healthy applications unnecessarily.; Teach appropriate health semantics.
- Explain the Kubernetes API behavior, control loop or operational purpose of PROBE DESIGN.
- Configure or apply PROBE DESIGN in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: startup, readiness, termination.
startup
APPLICATION LIFECYCLE: startup. Teach:; startup; readiness; termination; graceful shutdown
- Explain the Kubernetes API behavior, control loop or operational purpose of startup.
- Configure or apply startup in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
readiness
APPLICATION LIFECYCLE: readiness. Teach:; startup; readiness; termination; graceful shutdown
- Explain the Kubernetes API behavior, control loop or operational purpose of readiness.
- Configure or apply readiness in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
termination
APPLICATION LIFECYCLE: termination. Teach:; startup; readiness; termination; graceful shutdown
- Explain the Kubernetes API behavior, control loop or operational purpose of termination.
- Configure or apply termination in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: SECURITY FOUNDATION.
SECURITY FOUNDATION
SECURITY FOUNDATION: SECURITY FOUNDATION. Use layers:; Authentication; Authorization; Admission; Pod security; network security; secrets; supply chain; runtime
- Explain the Kubernetes API behavior, control loop or operational purpose of SECURITY FOUNDATION.
- Configure or apply SECURITY FOUNDATION in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: certificates, tokens, cloud identity integration.
certificates
KUBERNETES AUTHENTICATION: certificates. Understand:; certificates; tokens; cloud identity integration
- Explain the Kubernetes API behavior, control loop or operational purpose of certificates.
- Configure or apply certificates in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
tokens
KUBERNETES AUTHENTICATION: tokens. Understand:; certificates; tokens; cloud identity integration
- Explain the Kubernetes API behavior, control loop or operational purpose of tokens.
- Configure or apply tokens in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
cloud identity integration
KUBERNETES AUTHENTICATION: cloud identity integration. Understand:; certificates; tokens; cloud identity integration
- Explain the Kubernetes API behavior, control loop or operational purpose of cloud identity integration.
- Configure or apply cloud identity integration in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: Role, ClusterRole, RoleBinding.
Role
RBAC: Role. Teach:; Role; ClusterRole; RoleBinding; ClusterRoleBinding
- Explain the Kubernetes API behavior, control loop or operational purpose of Role.
- Configure or apply Role in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
ClusterRole
RBAC: ClusterRole. Teach:; Role; ClusterRole; RoleBinding; ClusterRoleBinding
- Explain the Kubernetes API behavior, control loop or operational purpose of ClusterRole.
- Configure or apply ClusterRole in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
RoleBinding
RBAC: RoleBinding. Teach:; Role; ClusterRole; RoleBinding; ClusterRoleBinding
- Explain the Kubernetes API behavior, control loop or operational purpose of RoleBinding.
- Configure or apply RoleBinding in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
2 Kubernetes topics: LEAST PRIVILEGE RBAC, RBAC LAB.
LEAST PRIVILEGE RBAC
LEAST PRIVILEGE RBAC: LEAST PRIVILEGE RBAC. Avoid broad cluster-admin access.; RBAC LAB; Developer needs:; list Pods; read logs; but must not:; delete namespace; access Secrets; Create proper role.
- Explain the Kubernetes API behavior, control loop or operational purpose of LEAST PRIVILEGE RBAC.
- Configure or apply LEAST PRIVILEGE RBAC in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
RBAC LAB
LEAST PRIVILEGE RBAC: RBAC LAB. Avoid broad cluster-admin access.; RBAC LAB; Developer needs:; list Pods; read logs; but must not:; delete namespace; access Secrets; Create proper role.
- Explain the Kubernetes API behavior, control loop or operational purpose of RBAC LAB.
- Configure or apply RBAC LAB in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: SERVICE ACCOUNTS.
SERVICE ACCOUNTS
SERVICE ACCOUNTS: SERVICE ACCOUNTS. SERVICE ACCOUNTS concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of SERVICE ACCOUNTS.
- Configure or apply SERVICE ACCOUNTS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: Privileged, Baseline, Restricted.
Privileged
POD SECURITY STANDARDS: Privileged. Teach:; Privileged; Baseline; Restricted
- Explain the Kubernetes API behavior, control loop or operational purpose of Privileged.
- Configure or apply Privileged in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Baseline
POD SECURITY STANDARDS: Baseline. Teach:; Privileged; Baseline; Restricted
- Explain the Kubernetes API behavior, control loop or operational purpose of Baseline.
- Configure or apply Baseline in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Restricted
POD SECURITY STANDARDS: Restricted. Teach:; Privileged; Baseline; Restricted
- Explain the Kubernetes API behavior, control loop or operational purpose of Restricted.
- Configure or apply Restricted in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: runAsNonRoot, user/group, read-only root filesystem.
runAsNonRoot
SECURITY CONTEXT: runAsNonRoot. Teach:; runAsNonRoot; user/group; read-only root filesystem; capabilities
- Explain the Kubernetes API behavior, control loop or operational purpose of runAsNonRoot.
- Configure or apply runAsNonRoot in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
user/group
SECURITY CONTEXT: user/group. Teach:; runAsNonRoot; user/group; read-only root filesystem; capabilities
- Explain the Kubernetes API behavior, control loop or operational purpose of user/group.
- Configure or apply user/group in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
read-only root filesystem
SECURITY CONTEXT: read-only root filesystem. Teach:; runAsNonRoot; user/group; read-only root filesystem; capabilities
- Explain the Kubernetes API behavior, control loop or operational purpose of read-only root filesystem.
- Configure or apply read-only root filesystem in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: LINUX CAPABILITIES.
LINUX CAPABILITIES
LINUX CAPABILITIES: LINUX CAPABILITIES. Drop unnecessary capabilities.
- Explain the Kubernetes API behavior, control loop or operational purpose of LINUX CAPABILITIES.
- Configure or apply LINUX CAPABILITIES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: SECCOMP.
SECCOMP
SECCOMP: SECCOMP. Teach runtime syscall restrictions concepts.
- Explain the Kubernetes API behavior, control loop or operational purpose of SECCOMP.
- Configure or apply SECCOMP in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: ADMISSION CONTROL.
ADMISSION CONTROL
ADMISSION CONTROL: ADMISSION CONTROL. Understand admission chain.
- Explain the Kubernetes API behavior, control loop or operational purpose of ADMISSION CONTROL.
- Configure or apply ADMISSION CONTROL in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: ValidatingAdmissionPolicy, OPA/Gatekeeper concepts, Kyverno awareness.
ValidatingAdmissionPolicy
POLICY AS CODE: ValidatingAdmissionPolicy. Introduce:; ValidatingAdmissionPolicy; OPA/Gatekeeper concepts; Kyverno awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of ValidatingAdmissionPolicy.
- Configure or apply ValidatingAdmissionPolicy in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
OPA/Gatekeeper concepts
POLICY AS CODE: OPA/Gatekeeper concepts. Introduce:; ValidatingAdmissionPolicy; OPA/Gatekeeper concepts; Kyverno awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of OPA/Gatekeeper concepts.
- Configure or apply OPA/Gatekeeper concepts in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Kyverno awareness
POLICY AS CODE: Kyverno awareness. Introduce:; ValidatingAdmissionPolicy; OPA/Gatekeeper concepts; Kyverno awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of Kyverno awareness.
- Configure or apply Kyverno awareness in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: trusted registries, signed image awareness, vulnerability scanning.
trusted registries
IMAGE SECURITY: trusted registries. Teach:; trusted registries; signed image awareness; vulnerability scanning; image provenance concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of trusted registries.
- Configure or apply trusted registries in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
signed image awareness
IMAGE SECURITY: signed image awareness. Teach:; trusted registries; signed image awareness; vulnerability scanning; image provenance concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of signed image awareness.
- Configure or apply signed image awareness in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
vulnerability scanning
IMAGE SECURITY: vulnerability scanning. Teach:; trusted registries; signed image awareness; vulnerability scanning; image provenance concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of vulnerability scanning.
- Configure or apply vulnerability scanning in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: source, build, artifact.
source
SUPPLY CHAIN SECURITY: source. Understand:; source; build; artifact; registry; deployment
- Explain the Kubernetes API behavior, control loop or operational purpose of source.
- Configure or apply source in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
build
SUPPLY CHAIN SECURITY: build. Understand:; source; build; artifact; registry; deployment
- Explain the Kubernetes API behavior, control loop or operational purpose of build.
- Configure or apply build in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
artifact
SUPPLY CHAIN SECURITY: artifact. Understand:; source; build; artifact; registry; deployment
- Explain the Kubernetes API behavior, control loop or operational purpose of artifact.
- Configure or apply artifact in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: NetworkPolicy, private clusters, restricted endpoints.
NetworkPolicy
NETWORK SECURITY: NetworkPolicy. Use:; NetworkPolicy; private clusters; restricted endpoints
- Explain the Kubernetes API behavior, control loop or operational purpose of NetworkPolicy.
- Configure or apply NetworkPolicy in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
private clusters
NETWORK SECURITY: private clusters. Use:; NetworkPolicy; private clusters; restricted endpoints
- Explain the Kubernetes API behavior, control loop or operational purpose of private clusters.
- Configure or apply private clusters in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
restricted endpoints
NETWORK SECURITY: restricted endpoints. Use:; NetworkPolicy; private clusters; restricted endpoints
- Explain the Kubernetes API behavior, control loop or operational purpose of restricted endpoints.
- Configure or apply restricted endpoints in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: SECRETS SECURITY.
SECRETS SECURITY
SECRETS SECURITY: SECRETS SECURITY. Never store production secrets directly in public Git.
- Explain the Kubernetes API behavior, control loop or operational purpose of SECRETS SECURITY.
- Configure or apply SECRETS SECURITY in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: AUDITING, SECURITY PROJECT, Harden a Multi-Tenant Kubernetes Cluster.
AUDITING
AUDITING: AUDITING. Kubernetes audit logging concepts.; SECURITY PROJECT; Harden a Multi-Tenant Kubernetes Cluster; Require:; namespaces; quotas; RBAC; Pod Security; NetworkPolicy; external secrets pattern; audit controls
- Explain the Kubernetes API behavior, control loop or operational purpose of AUDITING.
- Configure or apply AUDITING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
SECURITY PROJECT
AUDITING: SECURITY PROJECT. Kubernetes audit logging concepts.; SECURITY PROJECT; Harden a Multi-Tenant Kubernetes Cluster; Require:; namespaces; quotas; RBAC; Pod Security; NetworkPolicy; external secrets pattern; audit controls
- Explain the Kubernetes API behavior, control loop or operational purpose of SECURITY PROJECT.
- Configure or apply SECURITY PROJECT in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Harden a Multi-Tenant Kubernetes Cluster
AUDITING: Harden a Multi-Tenant Kubernetes Cluster. Kubernetes audit logging concepts.; SECURITY PROJECT; Harden a Multi-Tenant Kubernetes Cluster; Require:; namespaces; quotas; RBAC; Pod Security; NetworkPolicy; external secrets pattern; audit controls
- Explain the Kubernetes API behavior, control loop or operational purpose of Harden a Multi-Tenant Kubernetes Cluster.
- Configure or apply Harden a Multi-Tenant Kubernetes Cluster in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: Chart, values, templates.
Chart
HELM: Chart. Teach:; Chart; values; templates; release
- Explain the Kubernetes API behavior, control loop or operational purpose of Chart.
- Configure or apply Chart in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
values
HELM: values. Teach:; Chart; values; templates; release
- Explain the Kubernetes API behavior, control loop or operational purpose of values.
- Configure or apply values in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
templates
HELM: templates. Teach:; Chart; values; templates; release
- Explain the Kubernetes API behavior, control loop or operational purpose of templates.
- Configure or apply templates in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: variables, conditions, loops.
variables
HELM TEMPLATING: variables. Use:; variables; conditions; loops; helpers
- Explain the Kubernetes API behavior, control loop or operational purpose of variables.
- Configure or apply variables in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
conditions
HELM TEMPLATING: conditions. Use:; variables; conditions; loops; helpers
- Explain the Kubernetes API behavior, control loop or operational purpose of conditions.
- Configure or apply conditions in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
loops
HELM TEMPLATING: loops. Use:; variables; conditions; loops; helpers
- Explain the Kubernetes API behavior, control loop or operational purpose of loops.
- Configure or apply loops in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: dev, staging, production.
dev
HELM VALUES: dev. Support:; dev; staging; production
- Explain the Kubernetes API behavior, control loop or operational purpose of dev.
- Configure or apply dev in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
staging
HELM VALUES: staging. Support:; dev; staging; production
- Explain the Kubernetes API behavior, control loop or operational purpose of staging.
- Configure or apply staging in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
production
HELM VALUES: production. Support:; dev; staging; production
- Explain the Kubernetes API behavior, control loop or operational purpose of production.
- Configure or apply production in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: HELM DEPENDENCIES.
HELM DEPENDENCIES
HELM DEPENDENCIES: HELM DEPENDENCIES. HELM DEPENDENCIES concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of HELM DEPENDENCIES.
- Configure or apply HELM DEPENDENCIES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: HELM UPGRADES.
HELM UPGRADES
HELM UPGRADES: HELM UPGRADES. HELM UPGRADES concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of HELM UPGRADES.
- Configure or apply HELM UPGRADES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: HELM PROJECT.
HELM PROJECT
HELM ROLLBACK: HELM PROJECT. HELM PROJECT; Package a production application with:; Deployment; Service; Gateway/Ingress; ConfigMap; autoscaling; probes; NetworkPolicy
- Explain the Kubernetes API behavior, control loop or operational purpose of HELM PROJECT.
- Configure or apply HELM PROJECT in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: base, overlays, patches.
base
KUSTOMIZE: base. Teach:; base; overlays; patches
- Explain the Kubernetes API behavior, control loop or operational purpose of base.
- Configure or apply base in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
overlays
KUSTOMIZE: overlays. Teach:; base; overlays; patches
- Explain the Kubernetes API behavior, control loop or operational purpose of overlays.
- Configure or apply overlays in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
patches
KUSTOMIZE: patches. Teach:; base; overlays; patches
- Explain the Kubernetes API behavior, control loop or operational purpose of patches.
- Configure or apply patches in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: HELM VS KUSTOMIZE.
HELM VS KUSTOMIZE
HELM VS KUSTOMIZE: HELM VS KUSTOMIZE. Explain appropriate use cases.
- Explain the Kubernetes API behavior, control loop or operational purpose of HELM VS KUSTOMIZE.
- Configure or apply HELM VS KUSTOMIZE in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: metrics, logs, traces.
metrics
OBSERVABILITY FOUNDATION: metrics. Four areas:; metrics; logs; traces; events
- Explain the Kubernetes API behavior, control loop or operational purpose of metrics.
- Configure or apply metrics in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
logs
OBSERVABILITY FOUNDATION: logs. Four areas:; metrics; logs; traces; events
- Explain the Kubernetes API behavior, control loop or operational purpose of logs.
- Configure or apply logs in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
traces
OBSERVABILITY FOUNDATION: traces. Four areas:; metrics; logs; traces; events
- Explain the Kubernetes API behavior, control loop or operational purpose of traces.
- Configure or apply traces in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: CPU, memory, Pod health.
CPU
KUBERNETES METRICS: CPU. Track:; CPU; memory; Pod health; node health
- Explain the Kubernetes API behavior, control loop or operational purpose of CPU.
- Configure or apply CPU in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
memory
KUBERNETES METRICS: memory. Track:; CPU; memory; Pod health; node health
- Explain the Kubernetes API behavior, control loop or operational purpose of memory.
- Configure or apply memory in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Pod health
KUBERNETES METRICS: Pod health. Track:; CPU; memory; Pod health; node health
- Explain the Kubernetes API behavior, control loop or operational purpose of Pod health.
- Configure or apply Pod health in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: scraping, targets, labels.
scraping
PROMETHEUS: scraping. Teach:; scraping; targets; labels; ServiceMonitor concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of scraping.
- Configure or apply scraping in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
targets
PROMETHEUS: targets. Teach:; scraping; targets; labels; ServiceMonitor concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of targets.
- Configure or apply targets in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
labels
PROMETHEUS: labels. Teach:; scraping; targets; labels; ServiceMonitor concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of labels.
- Configure or apply labels in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: PROMQL.
PROMQL
PROMQL: PROMQL. Practical queries.
- Explain the Kubernetes API behavior, control loop or operational purpose of PROMQL.
- Configure or apply PROMQL in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: GRAFANA.
GRAFANA
GRAFANA: GRAFANA. Build dashboards.
- Explain the Kubernetes API behavior, control loop or operational purpose of GRAFANA.
- Configure or apply GRAFANA in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: ALERTING.
ALERTING
ALERTING: ALERTING. Use actionable alerts.; Avoid alerting on every transient condition.
- Explain the Kubernetes API behavior, control loop or operational purpose of ALERTING.
- Configure or apply ALERTING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: KUBERNETES LOGGING.
KUBERNETES LOGGING
KUBERNETES LOGGING: KUBERNETES LOGGING. Understand stdout/stderr aggregation.
- Explain the Kubernetes API behavior, control loop or operational purpose of KUBERNETES LOGGING.
- Configure or apply KUBERNETES LOGGING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: LOKI / OPENSEARCH AWARENESS.
LOKI / OPENSEARCH AWARENESS
LOKI / OPENSEARCH AWARENESS: LOKI / OPENSEARCH AWARENESS. Teach log-platform patterns.
- Explain the Kubernetes API behavior, control loop or operational purpose of LOKI / OPENSEARCH AWARENESS.
- Configure or apply LOKI / OPENSEARCH AWARENESS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: metrics, traces, context propagation.
metrics
OPENTELEMETRY: metrics. Teach:; metrics; traces; context propagation
- Explain the Kubernetes API behavior, control loop or operational purpose of metrics.
- Configure or apply metrics in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
traces
OPENTELEMETRY: traces. Teach:; metrics; traces; context propagation
- Explain the Kubernetes API behavior, control loop or operational purpose of traces.
- Configure or apply traces in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
context propagation
OPENTELEMETRY: context propagation. Teach:; metrics; traces; context propagation
- Explain the Kubernetes API behavior, control loop or operational purpose of context propagation.
- Configure or apply context propagation in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: DISTRIBUTED TRACING, OBSERVABILITY PROJECT, Kubernetes Monitoring & Reliability Platform.
DISTRIBUTED TRACING
DISTRIBUTED TRACING: DISTRIBUTED TRACING. Trace request across multiple Pods/services.; OBSERVABILITY PROJECT; Kubernetes Monitoring & Reliability Platform; Include:; Prometheus; Grafana; alerts; log aggregation; trace awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of DISTRIBUTED TRACING.
- Configure or apply DISTRIBUTED TRACING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
OBSERVABILITY PROJECT
DISTRIBUTED TRACING: OBSERVABILITY PROJECT. Trace request across multiple Pods/services.; OBSERVABILITY PROJECT; Kubernetes Monitoring & Reliability Platform; Include:; Prometheus; Grafana; alerts; log aggregation; trace awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of OBSERVABILITY PROJECT.
- Configure or apply OBSERVABILITY PROJECT in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Kubernetes Monitoring & Reliability Platform
DISTRIBUTED TRACING: Kubernetes Monitoring & Reliability Platform. Trace request across multiple Pods/services.; OBSERVABILITY PROJECT; Kubernetes Monitoring & Reliability Platform; Include:; Prometheus; Grafana; alerts; log aggregation; trace awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of Kubernetes Monitoring & Reliability Platform.
- Configure or apply Kubernetes Monitoring & Reliability Platform in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: KUBERNETES TROUBLESHOOTING METHODOLOGY, Symptom, Scope.
KUBERNETES TROUBLESHOOTING METHODOLOGY
KUBERNETES TROUBLESHOOTING METHODOLOGY: KUBERNETES TROUBLESHOOTING METHODOLOGY. Recommended flow:; Symptom; ↓; Scope; ↓; Events; ↓; Object State; ↓; Logs; ↓; Network; ↓; Resources; ↓; Configuration; ↓; Root Cause
- Explain the Kubernetes API behavior, control loop or operational purpose of KUBERNETES TROUBLESHOOTING METHODOLOGY.
- Configure or apply KUBERNETES TROUBLESHOOTING METHODOLOGY in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Symptom
KUBERNETES TROUBLESHOOTING METHODOLOGY: Symptom. Recommended flow:; Symptom; ↓; Scope; ↓; Events; ↓; Object State; ↓; Logs; ↓; Network; ↓; Resources; ↓; Configuration; ↓; Root Cause
- Explain the Kubernetes API behavior, control loop or operational purpose of Symptom.
- Configure or apply Symptom in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Scope
KUBERNETES TROUBLESHOOTING METHODOLOGY: Scope. Recommended flow:; Symptom; ↓; Scope; ↓; Events; ↓; Object State; ↓; Logs; ↓; Network; ↓; Resources; ↓; Configuration; ↓; Root Cause
- Explain the Kubernetes API behavior, control loop or operational purpose of Scope.
- Configure or apply Scope in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: application, command, configuration.
application
CRASHLOOPBACKOFF: application. Investigate:; application; command; configuration; dependency; probe
- Explain the Kubernetes API behavior, control loop or operational purpose of application.
- Configure or apply application in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
command
CRASHLOOPBACKOFF: command. Investigate:; application; command; configuration; dependency; probe
- Explain the Kubernetes API behavior, control loop or operational purpose of command.
- Configure or apply command in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
configuration
CRASHLOOPBACKOFF: configuration. Investigate:; application; command; configuration; dependency; probe
- Explain the Kubernetes API behavior, control loop or operational purpose of configuration.
- Configure or apply configuration in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: image name, tag, registry.
image name
IMAGEPULLBACKOFF: image name. Check:; image name; tag; registry; secret
- Explain the Kubernetes API behavior, control loop or operational purpose of image name.
- Configure or apply image name in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
tag
IMAGEPULLBACKOFF: tag. Check:; image name; tag; registry; secret
- Explain the Kubernetes API behavior, control loop or operational purpose of tag.
- Configure or apply tag in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
registry
IMAGEPULLBACKOFF: registry. Check:; image name; tag; registry; secret
- Explain the Kubernetes API behavior, control loop or operational purpose of registry.
- Configure or apply registry in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: resources, scheduling constraints, PVC.
resources
PENDING POD: resources. Check:; resources; scheduling constraints; PVC; nodes
- Explain the Kubernetes API behavior, control loop or operational purpose of resources.
- Configure or apply resources in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
scheduling constraints
PENDING POD: scheduling constraints. Check:; resources; scheduling constraints; PVC; nodes
- Explain the Kubernetes API behavior, control loop or operational purpose of scheduling constraints.
- Configure or apply scheduling constraints in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
PVC
PENDING POD: PVC. Check:; resources; scheduling constraints; PVC; nodes
- Explain the Kubernetes API behavior, control loop or operational purpose of PVC.
- Configure or apply PVC in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: application memory, limit, leak.
application memory
OOMKILLED: application memory. Check:; application memory; limit; leak; load
- Explain the Kubernetes API behavior, control loop or operational purpose of application memory.
- Configure or apply application memory in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
limit
OOMKILLED: limit. Check:; application memory; limit; leak; load
- Explain the Kubernetes API behavior, control loop or operational purpose of limit.
- Configure or apply limit in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
leak
OOMKILLED: leak. Check:; application memory; limit; leak; load
- Explain the Kubernetes API behavior, control loop or operational purpose of leak.
- Configure or apply leak in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: CPU THROTTLING.
CPU THROTTLING
CPU THROTTLING: CPU THROTTLING. CPU THROTTLING concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of CPU THROTTLING.
- Configure or apply CPU THROTTLING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: FAILED PROBES.
FAILED PROBES
FAILED PROBES: FAILED PROBES. FAILED PROBES concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of FAILED PROBES.
- Configure or apply FAILED PROBES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: selectors, ports, endpoints.
selectors
SERVICE FAILURE: selectors. Check:; selectors; ports; endpoints; network policy
- Explain the Kubernetes API behavior, control loop or operational purpose of selectors.
- Configure or apply selectors in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
ports
SERVICE FAILURE: ports. Check:; selectors; ports; endpoints; network policy
- Explain the Kubernetes API behavior, control loop or operational purpose of ports.
- Configure or apply ports in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
endpoints
SERVICE FAILURE: endpoints. Check:; selectors; ports; endpoints; network policy
- Explain the Kubernetes API behavior, control loop or operational purpose of endpoints.
- Configure or apply endpoints in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: DNS FAILURE.
DNS FAILURE
DNS FAILURE: DNS FAILURE. DNS FAILURE concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of DNS FAILURE.
- Configure or apply DNS FAILURE in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: INGRESS / GATEWAY FAILURE.
INGRESS / GATEWAY FAILURE
INGRESS / GATEWAY FAILURE: INGRESS / GATEWAY FAILURE. INGRESS / GATEWAY FAILURE concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of INGRESS / GATEWAY FAILURE.
- Configure or apply INGRESS / GATEWAY FAILURE in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: STORAGE FAILURE.
STORAGE FAILURE
STORAGE FAILURE: STORAGE FAILURE. STORAGE FAILURE concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of STORAGE FAILURE.
- Configure or apply STORAGE FAILURE in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: kubelet, disk, network.
kubelet
NODE NOTREADY: kubelet. Investigate:; kubelet; disk; network; runtime; resource pressure
- Explain the Kubernetes API behavior, control loop or operational purpose of kubelet.
- Configure or apply kubelet in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
disk
NODE NOTREADY: disk. Investigate:; kubelet; disk; network; runtime; resource pressure
- Explain the Kubernetes API behavior, control loop or operational purpose of disk.
- Configure or apply disk in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
network
NODE NOTREADY: network. Investigate:; kubelet; disk; network; runtime; resource pressure
- Explain the Kubernetes API behavior, control loop or operational purpose of network.
- Configure or apply network in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: API server, etcd, controller.
API server
CONTROL PLANE TROUBLESHOOTING: API server. For self-managed/kubeadm labs:; API server; etcd; controller; scheduler
- Explain the Kubernetes API behavior, control loop or operational purpose of API server.
- Configure or apply API server in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
etcd
CONTROL PLANE TROUBLESHOOTING: etcd. For self-managed/kubeadm labs:; API server; etcd; controller; scheduler
- Explain the Kubernetes API behavior, control loop or operational purpose of etcd.
- Configure or apply etcd in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
controller
CONTROL PLANE TROUBLESHOOTING: controller. For self-managed/kubeadm labs:; API server; etcd; controller; scheduler
- Explain the Kubernetes API behavior, control loop or operational purpose of controller.
- Configure or apply controller in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: KUBERNETES EVENTS.
KUBERNETES EVENTS
KUBERNETES EVENTS: KUBERNETES EVENTS. Use events heavily in first-pass diagnosis.
- Explain the Kubernetes API behavior, control loop or operational purpose of KUBERNETES EVENTS.
- Configure or apply KUBERNETES EVENTS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
2 Kubernetes topics: EPHEMERAL DEBUG CONTAINERS, TROUBLESHOOTING PROJECT.
EPHEMERAL DEBUG CONTAINERS
EPHEMERAL DEBUG CONTAINERS: EPHEMERAL DEBUG CONTAINERS. Teach current debugging patterns.; TROUBLESHOOTING PROJECT; Students receive 20 broken Kubernetes environments and must restore service.
- Explain the Kubernetes API behavior, control loop or operational purpose of EPHEMERAL DEBUG CONTAINERS.
- Configure or apply EPHEMERAL DEBUG CONTAINERS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
TROUBLESHOOTING PROJECT
EPHEMERAL DEBUG CONTAINERS: TROUBLESHOOTING PROJECT. Teach current debugging patterns.; TROUBLESHOOTING PROJECT; Students receive 20 broken Kubernetes environments and must restore service.
- Explain the Kubernetes API behavior, control loop or operational purpose of TROUBLESHOOTING PROJECT.
- Configure or apply TROUBLESHOOTING PROJECT in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: kubeadm, managed Kubernetes, local clusters.
kubeadm
CLUSTER INSTALLATION: kubeadm. Teach architecture around:; kubeadm; managed Kubernetes; local clusters
- Explain the Kubernetes API behavior, control loop or operational purpose of kubeadm.
- Configure or apply kubeadm in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
managed Kubernetes
CLUSTER INSTALLATION: managed Kubernetes. Teach architecture around:; kubeadm; managed Kubernetes; local clusters
- Explain the Kubernetes API behavior, control loop or operational purpose of managed Kubernetes.
- Configure or apply managed Kubernetes in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
local clusters
CLUSTER INSTALLATION: local clusters. Teach architecture around:; kubeadm; managed Kubernetes; local clusters
- Explain the Kubernetes API behavior, control loop or operational purpose of local clusters.
- Configure or apply local clusters in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: KUBEADM.
KUBEADM
KUBEADM: KUBEADM. Hands-on cluster setup for learning.
- Explain the Kubernetes API behavior, control loop or operational purpose of KUBEADM.
- Configure or apply KUBEADM in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: HIGH-AVAILABILITY CONTROL PLANE.
HIGH-AVAILABILITY CONTROL PLANE
HIGH-AVAILABILITY CONTROL PLANE: HIGH-AVAILABILITY CONTROL PLANE. Understand multi-control-plane design.
- Explain the Kubernetes API behavior, control loop or operational purpose of HIGH-AVAILABILITY CONTROL PLANE.
- Configure or apply HIGH-AVAILABILITY CONTROL PLANE in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: ETCD BACKUP.
ETCD BACKUP
ETCD BACKUP: ETCD BACKUP. Critical administrative skill.
- Explain the Kubernetes API behavior, control loop or operational purpose of ETCD BACKUP.
- Configure or apply ETCD BACKUP in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: ETCD RESTORE.
ETCD RESTORE
ETCD RESTORE: ETCD RESTORE. Perform in controlled lab.
- Explain the Kubernetes API behavior, control loop or operational purpose of ETCD RESTORE.
- Configure or apply ETCD RESTORE in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: CERTIFICATES.
CERTIFICATES
CERTIFICATES: CERTIFICATES. Understand expiration and rotation concepts.
- Explain the Kubernetes API behavior, control loop or operational purpose of CERTIFICATES.
- Configure or apply CERTIFICATES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: kube-apiserver, kubelet, kubectl.
kube-apiserver
VERSION SKEW: kube-apiserver. Teach compatibility between:; kube-apiserver; kubelet; kubectl
- Explain the Kubernetes API behavior, control loop or operational purpose of kube-apiserver.
- Configure or apply kube-apiserver in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
kubelet
VERSION SKEW: kubelet. Teach compatibility between:; kube-apiserver; kubelet; kubectl
- Explain the Kubernetes API behavior, control loop or operational purpose of kubelet.
- Configure or apply kubelet in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
kubectl
VERSION SKEW: kubectl. Teach compatibility between:; kube-apiserver; kubelet; kubectl
- Explain the Kubernetes API behavior, control loop or operational purpose of kubectl.
- Configure or apply kubectl in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: CLUSTER UPGRADE.
CLUSTER UPGRADE
CLUSTER UPGRADE: CLUSTER UPGRADE. Workflow:; review release notes; API deprecations; backup; control plane; nodes; validate
- Explain the Kubernetes API behavior, control loop or operational purpose of CLUSTER UPGRADE.
- Configure or apply CLUSTER UPGRADE in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: API DEPRECATIONS.
API DEPRECATIONS
API DEPRECATIONS: API DEPRECATIONS. Never upgrade blindly.; Use tooling/inspection to identify deprecated APIs.
- Explain the Kubernetes API behavior, control loop or operational purpose of API DEPRECATIONS.
- Configure or apply API DEPRECATIONS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
2 Kubernetes topics: CGROUPS V2, UPGRADE LAB.
CGROUPS V2
CGROUPS V2: CGROUPS V2. Kubernetes 1.37 continues the transition away from cgroup v1; the current release explicitly recommends migration to cgroups v2.; Teach:; why cgroups matter; resource-management implications; upgrade readiness; UPGRADE LAB; Upgrade controlled cluster from prior supported minor to current target.; Check:; API compatibility; workloads; networking; storage; metrics
- Explain the Kubernetes API behavior, control loop or operational purpose of CGROUPS V2.
- Configure or apply CGROUPS V2 in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
UPGRADE LAB
CGROUPS V2: UPGRADE LAB. Kubernetes 1.37 continues the transition away from cgroup v1; the current release explicitly recommends migration to cgroups v2.; Teach:; why cgroups matter; resource-management implications; upgrade readiness; UPGRADE LAB; Upgrade controlled cluster from prior supported minor to current target.; Check:; API compatibility; workloads; networking; storage; metrics
- Explain the Kubernetes API behavior, control loop or operational purpose of UPGRADE LAB.
- Configure or apply UPGRADE LAB in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
2 Kubernetes topics: MANAGED KUBERNETES, Amazon EKS.
MANAGED KUBERNETES
MANAGED KUBERNETES: MANAGED KUBERNETES. Compare:; EKS; GKE awareness; AKS awareness; Primary hands-on:; Amazon EKS
- Explain the Kubernetes API behavior, control loop or operational purpose of MANAGED KUBERNETES.
- Configure or apply MANAGED KUBERNETES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Amazon EKS
MANAGED KUBERNETES: Amazon EKS. Compare:; EKS; GKE awareness; AKS awareness; Primary hands-on:; Amazon EKS
- Explain the Kubernetes API behavior, control loop or operational purpose of Amazon EKS.
- Configure or apply Amazon EKS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: managed control plane, worker nodes, networking.
managed control plane
EKS ARCHITECTURE: managed control plane. Understand:; managed control plane; worker nodes; networking; IAM
- Explain the Kubernetes API behavior, control loop or operational purpose of managed control plane.
- Configure or apply managed control plane in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
worker nodes
EKS ARCHITECTURE: worker nodes. Understand:; managed control plane; worker nodes; networking; IAM
- Explain the Kubernetes API behavior, control loop or operational purpose of worker nodes.
- Configure or apply worker nodes in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
networking
EKS ARCHITECTURE: networking. Understand:; managed control plane; worker nodes; networking; IAM
- Explain the Kubernetes API behavior, control loop or operational purpose of networking.
- Configure or apply networking in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: EKS VPC NETWORKING.
EKS VPC NETWORKING
EKS VPC NETWORKING: EKS VPC NETWORKING. Teach VPC CNI concepts.
- Explain the Kubernetes API behavior, control loop or operational purpose of EKS VPC NETWORKING.
- Configure or apply EKS VPC NETWORKING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: EKS ACCESS MANAGEMENT.
EKS ACCESS MANAGEMENT
EKS ACCESS MANAGEMENT: EKS ACCESS MANAGEMENT. Use modern AWS identity patterns.
- Explain the Kubernetes API behavior, control loop or operational purpose of EKS ACCESS MANAGEMENT.
- Configure or apply EKS ACCESS MANAGEMENT in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: EKS NODE GROUPS.
EKS NODE GROUPS
EKS NODE GROUPS: EKS NODE GROUPS. EKS NODE GROUPS concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of EKS NODE GROUPS.
- Configure or apply EKS NODE GROUPS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: EKS FARGATE AWARENESS.
EKS FARGATE AWARENESS
EKS FARGATE AWARENESS: EKS FARGATE AWARENESS. EKS FARGATE AWARENESS concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of EKS FARGATE AWARENESS.
- Configure or apply EKS FARGATE AWARENESS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: EKS LOAD BALANCING.
EKS LOAD BALANCING
EKS LOAD BALANCING: EKS LOAD BALANCING. Teach AWS Load Balancer Controller concepts.
- Explain the Kubernetes API behavior, control loop or operational purpose of EKS LOAD BALANCING.
- Configure or apply EKS LOAD BALANCING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
2 Kubernetes topics: EBS CSI, EFS CSI concepts.
EBS CSI
EKS STORAGE: EBS CSI. Teach:; EBS CSI; EFS CSI concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of EBS CSI.
- Configure or apply EBS CSI in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
EFS CSI concepts
EKS STORAGE: EFS CSI concepts. Teach:; EBS CSI; EFS CSI concepts
- Explain the Kubernetes API behavior, control loop or operational purpose of EFS CSI concepts.
- Configure or apply EFS CSI concepts in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: HPA, cluster scaling, Karpenter awareness.
HPA
EKS AUTOSCALING: HPA. Use:; HPA; cluster scaling; Karpenter awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of HPA.
- Configure or apply HPA in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
cluster scaling
EKS AUTOSCALING: cluster scaling. Use:; HPA; cluster scaling; Karpenter awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of cluster scaling.
- Configure or apply cluster scaling in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Karpenter awareness
EKS AUTOSCALING: Karpenter awareness. Use:; HPA; cluster scaling; Karpenter awareness
- Explain the Kubernetes API behavior, control loop or operational purpose of Karpenter awareness.
- Configure or apply Karpenter awareness in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: IAM integration, workload identity patterns, private endpoint concepts.
IAM integration
EKS SECURITY: IAM integration. Teach:; IAM integration; workload identity patterns; private endpoint concepts; security groups; Secrets Manager integration
- Explain the Kubernetes API behavior, control loop or operational purpose of IAM integration.
- Configure or apply IAM integration in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
workload identity patterns
EKS SECURITY: workload identity patterns. Teach:; IAM integration; workload identity patterns; private endpoint concepts; security groups; Secrets Manager integration
- Explain the Kubernetes API behavior, control loop or operational purpose of workload identity patterns.
- Configure or apply workload identity patterns in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
private endpoint concepts
EKS SECURITY: private endpoint concepts. Teach:; IAM integration; workload identity patterns; private endpoint concepts; security groups; Secrets Manager integration
- Explain the Kubernetes API behavior, control loop or operational purpose of private endpoint concepts.
- Configure or apply private endpoint concepts in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: EKS OBSERVABILITY, EKS PROJECT, Production Application Platform on Amazon EKS.
EKS OBSERVABILITY
EKS OBSERVABILITY: EKS OBSERVABILITY. Use:; CloudWatch concepts; Prometheus/Grafana; OpenTelemetry; EKS PROJECT; Production Application Platform on Amazon EKS
- Explain the Kubernetes API behavior, control loop or operational purpose of EKS OBSERVABILITY.
- Configure or apply EKS OBSERVABILITY in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
EKS PROJECT
EKS OBSERVABILITY: EKS PROJECT. Use:; CloudWatch concepts; Prometheus/Grafana; OpenTelemetry; EKS PROJECT; Production Application Platform on Amazon EKS
- Explain the Kubernetes API behavior, control loop or operational purpose of EKS PROJECT.
- Configure or apply EKS PROJECT in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Production Application Platform on Amazon EKS
EKS OBSERVABILITY: Production Application Platform on Amazon EKS. Use:; CloudWatch concepts; Prometheus/Grafana; OpenTelemetry; EKS PROJECT; Production Application Platform on Amazon EKS
- Explain the Kubernetes API behavior, control loop or operational purpose of Production Application Platform on Amazon EKS.
- Configure or apply Production Application Platform on Amazon EKS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: TERRAFORM FOR KUBERNETES ENGINEERS.
TERRAFORM FOR KUBERNETES ENGINEERS
TERRAFORM FOR KUBERNETES ENGINEERS: TERRAFORM FOR KUBERNETES ENGINEERS. Teach enough infrastructure automation to provision Kubernetes platforms.
- Explain the Kubernetes API behavior, control loop or operational purpose of TERRAFORM FOR KUBERNETES ENGINEERS.
- Configure or apply TERRAFORM FOR KUBERNETES ENGINEERS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: VPC, EKS, IAM.
VPC
TERRAFORM EKS: VPC. Provision:; VPC; EKS; IAM; node groups
- Explain the Kubernetes API behavior, control loop or operational purpose of VPC.
- Configure or apply VPC in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
EKS
TERRAFORM EKS: EKS. Provision:; VPC; EKS; IAM; node groups
- Explain the Kubernetes API behavior, control loop or operational purpose of EKS.
- Configure or apply EKS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
IAM
TERRAFORM EKS: IAM. Provision:; VPC; EKS; IAM; node groups
- Explain the Kubernetes API behavior, control loop or operational purpose of IAM.
- Configure or apply IAM in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: TERRAFORM STATE.
TERRAFORM STATE
TERRAFORM STATE: TERRAFORM STATE. TERRAFORM STATE concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of TERRAFORM STATE.
- Configure or apply TERRAFORM STATE in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: TERRAFORM MODULES.
TERRAFORM MODULES
TERRAFORM MODULES: TERRAFORM MODULES. TERRAFORM MODULES concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of TERRAFORM MODULES.
- Configure or apply TERRAFORM MODULES in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: TERRAFORM + HELM, INFRASTRUCTURE PROJECT, Provision EKS Platform with Terraform.
TERRAFORM + HELM
TERRAFORM + HELM: TERRAFORM + HELM. Deploy cluster add-ons/applications.; INFRASTRUCTURE PROJECT; Provision EKS Platform with Terraform
- Explain the Kubernetes API behavior, control loop or operational purpose of TERRAFORM + HELM.
- Configure or apply TERRAFORM + HELM in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
INFRASTRUCTURE PROJECT
TERRAFORM + HELM: INFRASTRUCTURE PROJECT. Deploy cluster add-ons/applications.; INFRASTRUCTURE PROJECT; Provision EKS Platform with Terraform
- Explain the Kubernetes API behavior, control loop or operational purpose of INFRASTRUCTURE PROJECT.
- Configure or apply INFRASTRUCTURE PROJECT in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Provision EKS Platform with Terraform
TERRAFORM + HELM: Provision EKS Platform with Terraform. Deploy cluster add-ons/applications.; INFRASTRUCTURE PROJECT; Provision EKS Platform with Terraform
- Explain the Kubernetes API behavior, control loop or operational purpose of Provision EKS Platform with Terraform.
- Configure or apply Provision EKS Platform with Terraform in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: GITOPS.
GITOPS
GITOPS: GITOPS. Desired deployment state belongs in Git.
- Explain the Kubernetes API behavior, control loop or operational purpose of GITOPS.
- Configure or apply GITOPS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: Application, sync, health.
Application
ARGO CD: Application. Teach:; Application; sync; health; desired/live state
- Explain the Kubernetes API behavior, control loop or operational purpose of Application.
- Configure or apply Application in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
sync
ARGO CD: sync. Teach:; Application; sync; health; desired/live state
- Explain the Kubernetes API behavior, control loop or operational purpose of sync.
- Configure or apply sync in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
health
ARGO CD: health. Teach:; Application; sync; health; desired/live state
- Explain the Kubernetes API behavior, control loop or operational purpose of health.
- Configure or apply health in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: AUTO-SYNC.
AUTO-SYNC
AUTO-SYNC: AUTO-SYNC. AUTO-SYNC concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of AUTO-SYNC.
- Configure or apply AUTO-SYNC in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: SELF-HEALING.
SELF-HEALING
SELF-HEALING: SELF-HEALING. SELF-HEALING concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of SELF-HEALING.
- Configure or apply SELF-HEALING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: PRUNING.
PRUNING
PRUNING: PRUNING. PRUNING concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of PRUNING.
- Configure or apply PRUNING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: PROJECTS.
PROJECTS
PROJECTS: PROJECTS. Use Argo CD Projects for scope/control.
- Explain the Kubernetes API behavior, control loop or operational purpose of PROJECTS.
- Configure or apply PROJECTS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: APPLICATIONSETS.
APPLICATIONSETS
APPLICATIONSETS: APPLICATIONSETS. Manage many applications/clusters.
- Explain the Kubernetes API behavior, control loop or operational purpose of APPLICATIONSETS.
- Configure or apply APPLICATIONSETS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: dev, staging, production.
dev
MULTI-CLUSTER GITOPS: dev. Deploy to:; dev; staging; production; multiple clusters
- Explain the Kubernetes API behavior, control loop or operational purpose of dev.
- Configure or apply dev in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
staging
MULTI-CLUSTER GITOPS: staging. Deploy to:; dev; staging; production; multiple clusters
- Explain the Kubernetes API behavior, control loop or operational purpose of staging.
- Configure or apply staging in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
production
MULTI-CLUSTER GITOPS: production. Deploy to:; dev; staging; production; multiple clusters
- Explain the Kubernetes API behavior, control loop or operational purpose of production.
- Configure or apply production in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: ARGO CD SECURITY, GITOPS PROJECT, Git → Argo CD → Multi-Environment Kubernetes Platform.
ARGO CD SECURITY
ARGO CD SECURITY: ARGO CD SECURITY. Teach:; RBAC; repositories; cluster credentials; Projects; secret management; GITOPS PROJECT; Git → Argo CD → Multi-Environment Kubernetes Platform
- Explain the Kubernetes API behavior, control loop or operational purpose of ARGO CD SECURITY.
- Configure or apply ARGO CD SECURITY in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
GITOPS PROJECT
ARGO CD SECURITY: GITOPS PROJECT. Teach:; RBAC; repositories; cluster credentials; Projects; secret management; GITOPS PROJECT; Git → Argo CD → Multi-Environment Kubernetes Platform
- Explain the Kubernetes API behavior, control loop or operational purpose of GITOPS PROJECT.
- Configure or apply GITOPS PROJECT in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Git → Argo CD → Multi-Environment Kubernetes Platform
ARGO CD SECURITY: Git → Argo CD → Multi-Environment Kubernetes Platform. Teach:; RBAC; repositories; cluster credentials; Projects; secret management; GITOPS PROJECT; Git → Argo CD → Multi-Environment Kubernetes Platform
- Explain the Kubernetes API behavior, control loop or operational purpose of Git → Argo CD → Multi-Environment Kubernetes Platform.
- Configure or apply Git → Argo CD → Multi-Environment Kubernetes Platform in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: Rolling, Blue/Green, Canary.
Rolling
PROGRESSIVE DELIVERY: Rolling. Teach:; Rolling; Blue/Green; Canary
- Explain the Kubernetes API behavior, control loop or operational purpose of Rolling.
- Configure or apply Rolling in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Blue/Green
PROGRESSIVE DELIVERY: Blue/Green. Teach:; Rolling; Blue/Green; Canary
- Explain the Kubernetes API behavior, control loop or operational purpose of Blue/Green.
- Configure or apply Blue/Green in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Canary
PROGRESSIVE DELIVERY: Canary. Teach:; Rolling; Blue/Green; Canary
- Explain the Kubernetes API behavior, control loop or operational purpose of Canary.
- Configure or apply Canary in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: ARGO ROLLOUTS AWARENESS.
ARGO ROLLOUTS AWARENESS
ARGO ROLLOUTS AWARENESS: ARGO ROLLOUTS AWARENESS. Use for progressive delivery concepts.
- Explain the Kubernetes API behavior, control loop or operational purpose of ARGO ROLLOUTS AWARENESS.
- Configure or apply ARGO ROLLOUTS AWARENESS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: TRAFFIC SPLITTING.
TRAFFIC SPLITTING
TRAFFIC SPLITTING: TRAFFIC SPLITTING. Gateway/service-mesh awareness.
- Explain the Kubernetes API behavior, control loop or operational purpose of TRAFFIC SPLITTING.
- Configure or apply TRAFFIC SPLITTING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: service-to-service identity, traffic control, telemetry.
service-to-service identity
SERVICE MESH: service-to-service identity. Teach concepts:; service-to-service identity; traffic control; telemetry; mTLS; Examples awareness:; Istio; Linkerd; Do not make mesh mandatory for every cluster.
- Explain the Kubernetes API behavior, control loop or operational purpose of service-to-service identity.
- Configure or apply service-to-service identity in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
traffic control
SERVICE MESH: traffic control. Teach concepts:; service-to-service identity; traffic control; telemetry; mTLS; Examples awareness:; Istio; Linkerd; Do not make mesh mandatory for every cluster.
- Explain the Kubernetes API behavior, control loop or operational purpose of traffic control.
- Configure or apply traffic control in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
telemetry
SERVICE MESH: telemetry. Teach concepts:; service-to-service identity; traffic control; telemetry; mTLS; Examples awareness:; Istio; Linkerd; Do not make mesh mandatory for every cluster.
- Explain the Kubernetes API behavior, control loop or operational purpose of telemetry.
- Configure or apply telemetry in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: WHEN NOT TO USE SERVICE MESH.
WHEN NOT TO USE SERVICE MESH
WHEN NOT TO USE SERVICE MESH: WHEN NOT TO USE SERVICE MESH. Operational complexity matters.
- Explain the Kubernetes API behavior, control loop or operational purpose of WHEN NOT TO USE SERVICE MESH.
- Configure or apply WHEN NOT TO USE SERVICE MESH in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: namespaces, RBAC, quotas.
namespaces
MULTI-TENANCY: namespaces. Teach:; namespaces; RBAC; quotas; network isolation; policies
- Explain the Kubernetes API behavior, control loop or operational purpose of namespaces.
- Configure or apply namespaces in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
RBAC
MULTI-TENANCY: RBAC. Teach:; namespaces; RBAC; quotas; network isolation; policies
- Explain the Kubernetes API behavior, control loop or operational purpose of RBAC.
- Configure or apply RBAC in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
quotas
MULTI-TENANCY: quotas. Teach:; namespaces; RBAC; quotas; network isolation; policies
- Explain the Kubernetes API behavior, control loop or operational purpose of quotas.
- Configure or apply quotas in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: HARD MULTI-TENANCY AWARENESS.
HARD MULTI-TENANCY AWARENESS
HARD MULTI-TENANCY AWARENESS: HARD MULTI-TENANCY AWARENESS. Understand limitations of namespace-only isolation.
- Explain the Kubernetes API behavior, control loop or operational purpose of HARD MULTI-TENANCY AWARENESS.
- Configure or apply HARD MULTI-TENANCY AWARENESS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: failure isolation, geography, environment separation.
failure isolation
MULTI-CLUSTER ARCHITECTURE: failure isolation. Reasons:; failure isolation; geography; environment separation; compliance; scale
- Explain the Kubernetes API behavior, control loop or operational purpose of failure isolation.
- Configure or apply failure isolation in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
geography
MULTI-CLUSTER ARCHITECTURE: geography. Reasons:; failure isolation; geography; environment separation; compliance; scale
- Explain the Kubernetes API behavior, control loop or operational purpose of geography.
- Configure or apply geography in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
environment separation
MULTI-CLUSTER ARCHITECTURE: environment separation. Reasons:; failure isolation; geography; environment separation; compliance; scale
- Explain the Kubernetes API behavior, control loop or operational purpose of environment separation.
- Configure or apply environment separation in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: FLEET MANAGEMENT AWARENESS.
FLEET MANAGEMENT AWARENESS
FLEET MANAGEMENT AWARENESS: FLEET MANAGEMENT AWARENESS. FLEET MANAGEMENT AWARENESS concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of FLEET MANAGEMENT AWARENESS.
- Configure or apply FLEET MANAGEMENT AWARENESS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: CLUSTER LIFECYCLE.
CLUSTER LIFECYCLE
CLUSTER LIFECYCLE: CLUSTER LIFECYCLE. Provision → operate → upgrade → retire.
- Explain the Kubernetes API behavior, control loop or operational purpose of CLUSTER LIFECYCLE.
- Configure or apply CLUSTER LIFECYCLE in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: PLATFORM ENGINEERING.
PLATFORM ENGINEERING
PLATFORM ENGINEERING: PLATFORM ENGINEERING. Kubernetes becomes a platform substrate.; Goal:; Developers should not need to understand every infrastructure detail.
- Explain the Kubernetes API behavior, control loop or operational purpose of PLATFORM ENGINEERING.
- Configure or apply PLATFORM ENGINEERING in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: service template, Helm chart, CI pipeline.
service template
GOLDEN PATHS: service template. Provide standardized:; service template; Helm chart; CI pipeline; observability; security
- Explain the Kubernetes API behavior, control loop or operational purpose of service template.
- Configure or apply service template in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Helm chart
GOLDEN PATHS: Helm chart. Provide standardized:; service template; Helm chart; CI pipeline; observability; security
- Explain the Kubernetes API behavior, control loop or operational purpose of Helm chart.
- Configure or apply Helm chart in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
CI pipeline
GOLDEN PATHS: CI pipeline. Provide standardized:; service template; Helm chart; CI pipeline; observability; security
- Explain the Kubernetes API behavior, control loop or operational purpose of CI pipeline.
- Configure or apply CI pipeline in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: create service, deploy service, provision database.
create service
INTERNAL DEVELOPER PLATFORM: create service. Capabilities:; create service; deploy service; provision database; view logs; monitor health
- Explain the Kubernetes API behavior, control loop or operational purpose of create service.
- Configure or apply create service in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
deploy service
INTERNAL DEVELOPER PLATFORM: deploy service. Capabilities:; create service; deploy service; provision database; view logs; monitor health
- Explain the Kubernetes API behavior, control loop or operational purpose of deploy service.
- Configure or apply deploy service in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
provision database
INTERNAL DEVELOPER PLATFORM: provision database. Capabilities:; create service; deploy service; provision database; view logs; monitor health
- Explain the Kubernetes API behavior, control loop or operational purpose of provision database.
- Configure or apply provision database in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: BACKSTAGE AWARENESS.
BACKSTAGE AWARENESS
BACKSTAGE AWARENESS: BACKSTAGE AWARENESS. BACKSTAGE AWARENESS concepts, configuration, security, troubleshooting and production platform considerations.
- Explain the Kubernetes API behavior, control loop or operational purpose of BACKSTAGE AWARENESS.
- Configure or apply BACKSTAGE AWARENESS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: CUSTOM RESOURCE DEFINITIONS.
CUSTOM RESOURCE DEFINITIONS
CUSTOM RESOURCE DEFINITIONS: CUSTOM RESOURCE DEFINITIONS. Understand CRDs.
- Explain the Kubernetes API behavior, control loop or operational purpose of CUSTOM RESOURCE DEFINITIONS.
- Configure or apply CUSTOM RESOURCE DEFINITIONS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: OPERATORS.
OPERATORS
OPERATORS: OPERATORS. Kubernetes-native controllers extending platform behavior.
- Explain the Kubernetes API behavior, control loop or operational purpose of OPERATORS.
- Configure or apply OPERATORS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: OPERATOR PATTERN.
OPERATOR PATTERN
OPERATOR PATTERN: OPERATOR PATTERN. Teach:; Custom Resource; ↓; Controller; ↓; Reconciliation
- Explain the Kubernetes API behavior, control loop or operational purpose of OPERATOR PATTERN.
- Configure or apply OPERATOR PATTERN in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: BUILDING A SIMPLE CONTROLLER AWARENESS.
BUILDING A SIMPLE CONTROLLER AWARENESS
BUILDING A SIMPLE CONTROLLER AWARENESS: BUILDING A SIMPLE CONTROLLER AWARENESS. Not full Go-development specialization, but enough to understand extension model.
- Explain the Kubernetes API behavior, control loop or operational purpose of BUILDING A SIMPLE CONTROLLER AWARENESS.
- Configure or apply BUILDING A SIMPLE CONTROLLER AWARENESS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: SLI, SLO, SLA.
SLI
SRE FOR KUBERNETES: SLI. Teach:; SLI; SLO; SLA; error budgets
- Explain the Kubernetes API behavior, control loop or operational purpose of SLI.
- Configure or apply SLI in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
SLO
SRE FOR KUBERNETES: SLO. Teach:; SLI; SLO; SLA; error budgets
- Explain the Kubernetes API behavior, control loop or operational purpose of SLO.
- Configure or apply SLO in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
SLA
SRE FOR KUBERNETES: SLA. Teach:; SLI; SLO; SLA; error budgets
- Explain the Kubernetes API behavior, control loop or operational purpose of SLA.
- Configure or apply SLA in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: PLATFORM SLO, Deployment Success Rate, Kubernetes API availability.
PLATFORM SLO
PLATFORM SLO: PLATFORM SLO. Example:; Deployment Success Rate; 99.5%; Kubernetes API availability; defined target
- Explain the Kubernetes API behavior, control loop or operational purpose of PLATFORM SLO.
- Configure or apply PLATFORM SLO in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Deployment Success Rate
PLATFORM SLO: Deployment Success Rate. Example:; Deployment Success Rate; 99.5%; Kubernetes API availability; defined target
- Explain the Kubernetes API behavior, control loop or operational purpose of Deployment Success Rate.
- Configure or apply Deployment Success Rate in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Kubernetes API availability
PLATFORM SLO: Kubernetes API availability. Example:; Deployment Success Rate; 99.5%; Kubernetes API availability; defined target
- Explain the Kubernetes API behavior, control loop or operational purpose of Kubernetes API availability.
- Configure or apply Kubernetes API availability in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: CPU, memory, Pods.
CPU
CLUSTER CAPACITY PLANNING: CPU. Track:; CPU; memory; Pods; node utilization
- Explain the Kubernetes API behavior, control loop or operational purpose of CPU.
- Configure or apply CPU in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
memory
CLUSTER CAPACITY PLANNING: memory. Track:; CPU; memory; Pods; node utilization
- Explain the Kubernetes API behavior, control loop or operational purpose of memory.
- Configure or apply memory in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Pods
CLUSTER CAPACITY PLANNING: Pods. Track:; CPU; memory; Pods; node utilization
- Explain the Kubernetes API behavior, control loop or operational purpose of Pods.
- Configure or apply Pods in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: requests vs actual usage, idle nodes, autoscaling.
requests vs actual usage
COST OPTIMIZATION: requests vs actual usage. Teach:; requests vs actual usage; idle nodes; autoscaling; overprovisioning; storage; load balancers
- Explain the Kubernetes API behavior, control loop or operational purpose of requests vs actual usage.
- Configure or apply requests vs actual usage in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
idle nodes
COST OPTIMIZATION: idle nodes. Teach:; requests vs actual usage; idle nodes; autoscaling; overprovisioning; storage; load balancers
- Explain the Kubernetes API behavior, control loop or operational purpose of idle nodes.
- Configure or apply idle nodes in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
autoscaling
COST OPTIMIZATION: autoscaling. Teach:; requests vs actual usage; idle nodes; autoscaling; overprovisioning; storage; load balancers
- Explain the Kubernetes API behavior, control loop or operational purpose of autoscaling.
- Configure or apply autoscaling in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: namespace, team, workload.
namespace
KUBERNETES FINOPS: namespace. Cost allocation by:; namespace; team; workload
- Explain the Kubernetes API behavior, control loop or operational purpose of namespace.
- Configure or apply namespace in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
team
KUBERNETES FINOPS: team. Cost allocation by:; namespace; team; workload
- Explain the Kubernetes API behavior, control loop or operational purpose of team.
- Configure or apply team in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
workload
KUBERNETES FINOPS: workload. Cost allocation by:; namespace; team; workload
- Explain the Kubernetes API behavior, control loop or operational purpose of workload.
- Configure or apply workload in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: INCIDENT MANAGEMENT.
INCIDENT MANAGEMENT
INCIDENT MANAGEMENT: INCIDENT MANAGEMENT. Teach:; Detect → Triage → Mitigate → Recover → RCA
- Explain the Kubernetes API behavior, control loop or operational purpose of INCIDENT MANAGEMENT.
- Configure or apply INCIDENT MANAGEMENT in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: timeline, root cause, contributing factors.
timeline
KUBERNETES RCA: timeline. Example incident:; Deployment update caused readiness failures.; RCA includes:; timeline; root cause; contributing factors; mitigation; permanent fix
- Explain the Kubernetes API behavior, control loop or operational purpose of timeline.
- Configure or apply timeline in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
root cause
KUBERNETES RCA: root cause. Example incident:; Deployment update caused readiness failures.; RCA includes:; timeline; root cause; contributing factors; mitigation; permanent fix
- Explain the Kubernetes API behavior, control loop or operational purpose of root cause.
- Configure or apply root cause in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
contributing factors
KUBERNETES RCA: contributing factors. Example incident:; Deployment update caused readiness failures.; RCA includes:; timeline; root cause; contributing factors; mitigation; permanent fix
- Explain the Kubernetes API behavior, control loop or operational purpose of contributing factors.
- Configure or apply contributing factors in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: Pod CrashLoop, node NotReady, failed rollout.
Pod CrashLoop
RUNBOOKS: Pod CrashLoop. Create:; Pod CrashLoop; node NotReady; failed rollout; DNS failure; storage failure
- Explain the Kubernetes API behavior, control loop or operational purpose of Pod CrashLoop.
- Configure or apply Pod CrashLoop in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
node NotReady
RUNBOOKS: node NotReady. Create:; Pod CrashLoop; node NotReady; failed rollout; DNS failure; storage failure
- Explain the Kubernetes API behavior, control loop or operational purpose of node NotReady.
- Configure or apply node NotReady in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
failed rollout
RUNBOOKS: failed rollout. Create:; Pod CrashLoop; node NotReady; failed rollout; DNS failure; storage failure
- Explain the Kubernetes API behavior, control loop or operational purpose of failed rollout.
- Configure or apply failed rollout in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: cluster state, application configuration, persistent data.
cluster state
BACKUP & DR: cluster state. Teach:; cluster state; application configuration; persistent data
- Explain the Kubernetes API behavior, control loop or operational purpose of cluster state.
- Configure or apply cluster state in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
application configuration
BACKUP & DR: application configuration. Teach:; cluster state; application configuration; persistent data
- Explain the Kubernetes API behavior, control loop or operational purpose of application configuration.
- Configure or apply application configuration in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
persistent data
BACKUP & DR: persistent data. Teach:; cluster state; application configuration; persistent data
- Explain the Kubernetes API behavior, control loop or operational purpose of persistent data.
- Configure or apply persistent data in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: VELERO AWARENESS.
VELERO AWARENESS
VELERO AWARENESS: VELERO AWARENESS. For backup/restore concepts.
- Explain the Kubernetes API behavior, control loop or operational purpose of VELERO AWARENESS.
- Configure or apply VELERO AWARENESS in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: cluster loss, node loss, Region loss.
cluster loss
DISASTER RECOVERY: cluster loss. Design for:; cluster loss; node loss; Region loss; data recovery
- Explain the Kubernetes API behavior, control loop or operational purpose of cluster loss.
- Configure or apply cluster loss in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
node loss
DISASTER RECOVERY: node loss. Design for:; cluster loss; node loss; Region loss; data recovery
- Explain the Kubernetes API behavior, control loop or operational purpose of node loss.
- Configure or apply node loss in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
Region loss
DISASTER RECOVERY: Region loss. Design for:; cluster loss; node loss; Region loss; data recovery
- Explain the Kubernetes API behavior, control loop or operational purpose of Region loss.
- Configure or apply Region loss in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: contain, revoke, inspect access.
contain
SECURITY INCIDENTS: contain. Scenario:; Compromised ServiceAccount token.; Actions:; contain; revoke; inspect access; rotate; improve permissions
- Explain the Kubernetes API behavior, control loop or operational purpose of contain.
- Configure or apply contain in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
revoke
SECURITY INCIDENTS: revoke. Scenario:; Compromised ServiceAccount token.; Actions:; contain; revoke; inspect access; rotate; improve permissions
- Explain the Kubernetes API behavior, control loop or operational purpose of revoke.
- Configure or apply revoke in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
inspect access
SECURITY INCIDENTS: inspect access. Scenario:; Compromised ServiceAccount token.; Actions:; contain; revoke; inspect access; rotate; improve permissions
- Explain the Kubernetes API behavior, control loop or operational purpose of inspect access.
- Configure or apply inspect access in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
3 Kubernetes topics: log summarization, YAML explanation, troubleshooting hypotheses.
log summarization
AI-ASSISTED KUBERNETES OPERATIONS: log summarization. Use AI for:; log summarization; YAML explanation; troubleshooting hypotheses; manifest review
- Explain the Kubernetes API behavior, control loop or operational purpose of log summarization.
- Configure or apply log summarization in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
YAML explanation
AI-ASSISTED KUBERNETES OPERATIONS: YAML explanation. Use AI for:; log summarization; YAML explanation; troubleshooting hypotheses; manifest review
- Explain the Kubernetes API behavior, control loop or operational purpose of YAML explanation.
- Configure or apply YAML explanation in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
troubleshooting hypotheses
AI-ASSISTED KUBERNETES OPERATIONS: troubleshooting hypotheses. Use AI for:; log summarization; YAML explanation; troubleshooting hypotheses; manifest review
- Explain the Kubernetes API behavior, control loop or operational purpose of troubleshooting hypotheses.
- Configure or apply troubleshooting hypotheses in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
1 Kubernetes topics: AI SAFETY.
AI SAFETY
AI SAFETY: AI SAFETY. Never execute destructive generated commands without:; Review → Dry Run → Approval
- Explain the Kubernetes API behavior, control loop or operational purpose of AI SAFETY.
- Configure or apply AI SAFETY in a secure, observable and production-ready Kubernetes platform.
- Diagnose failure modes and evaluate reliability, security, scalability, maintainability and cost trade-offs.
26 Hands-On Production Capstones & Microservices
Build, deploy, and showcase real-world enterprise architectures on GitHub to prove your production engineering readiness:
Enterprise E-Commerce Microservices & Event-Driven Streaming Platform
Architected with Spring Boot 3.3, Apache Kafka event streams, Redis distributed caching, React 19 UI, and PostgreSQL. Features distributed ACID transaction sagas, payment webhook handling, dynamic inventory locking, and Dockerized Kubernetes deployment.
High-Throughput Banking & Core Transaction Engine
Concurrent multithreaded financial transaction ledger with ACID compliance, optimistic row locking, idempotent payment endpoints, and audit logging.
Real-Time Logistics & Fleet Tracking Service
Bi-directional live vehicle telemetry dashboard processing 10,000+ geo-coordinate events/sec with live map rendering and ETA calculations.
Multi-Tenant SaaS Subscription & Webhook Gateway
Multi-tenant automated billing engine with webhook signature verification, dynamic token bucket rate-limiting, and tenant data isolation schemas.
Distributed URL Shortener & Analytics System (Bitly Scale)
Low-latency URL redirection engine with distributed ID generation (Snowflake), sub-5ms Redis caching, and real-time click analytics.
Automated Cloud DevOps CI/CD Pipeline on AWS
Production containerization pipeline with automated testing, sonar code quality gates, container image vulnerability scanning, and zero-downtime rolling deploys.
AI-Powered Code Reviewer & Assessment Engine
Automated coding interview evaluator that parses Java AST trees, detects algorithmic time complexity, and simulates 1-on-1 voice technical interview feedback.
MockAttempt Academy vs. Traditional Bootcamps & Self-Study
Transparent side-by-side comparison of daily schedule, duration, curriculum, and placement support:
| Feature & Deliverables | MockAttempt Fast-Track Track | Expensive Bootcamps | Self-Study / YouTube |
|---|---|---|---|
| Live Weekend Schedule | Sat & Sun (4 Hours / Day) | 1 - 1.5 Hours / Day | Self-Paced / Inconsistent |
| Duration to Placement Readiness | 4 Months (16 Weeks Weekend) | 6 - 9 Months | 12+ Months (Uncertain) |
| Candidate Placement Guarantee | Unlimited Drives until Placed (or Full Refund) | Limited to 3-6 Months only | None (Apply blindly) |
| Topic Mock Tests & AI Interviews | Integrated for Every Topic (580+ Rounds) | End of Course Only | None |
| Tuition Fee | ₹49,999 ₹98,999 | ₹1,20,000 - ₹2,50,000 | Free (No Mentorship/Jobs) |
Institutional Course Assurances & 100% Placement Policy
100% Job Placement Guarantee
Our placement team arranges unlimited corporate interview drives across 1,050+ hiring partners until you receive an official offer letter. If unplaced, 100% of your tuition fee is refunded.
1-on-1 Expert Faculty Mentorship
Every cohort is taught live by seasoned lead architects from Tier-1 product companies with daily live coding and supervised code reviews.
Frequently Asked Questions
Ready to Become a Top 1% Kubernetes Engineer in 3 Months?
Speak with our senior academic counsellors to evaluate your fast-track 4-hour daily cohort eligibility, explore scholarship options, and secure your batch seat.