Kubernetes Beyond the Basics training course

Pod Stability

• Liveness Probe
• Readiness Probe
• Startup Probe
• PodDisruptionBudget
• MaxSurge
• Graceful Shutdown and SIGTERM signals

Autoscaling Deployments and StatefulSets

• HPA vs VPA vs CA
• Install Metrics Server
• Observe Metrics Server Data
• Get Started with Auto-Scaling Pods
• Auto-Scale Pods - Resource Utilization
• Specify Replicas in Deployments or Statefulsets?

Resources

• Requests vs Limits
• Monitoring

Autoscaling the Cluster

• Set up Cluster Autoscaler
• Scale up and scale down the Cluster
• Scale up Too Much or De-scale to Zero Nodes?
• Cluster Autoscaler in GKE, EKS, and AKS
• Rightsizing Instance Types

Templating and Helm

• Depending on third party charts
• Depending on your own charts
• Creating common charts
• Canary Deployments with Helm
• CD Tooling with Spinnaker & ArgoCD

Advanced scheduling

• How the Scheduler works in Kubernetes
• Filters and predicates
• nodeSelector
• Node affinity
• Pod affinity/anti-affinity
• Taints and tolerations
• Scheduler plugins
• Custom scheduler

Visualizing Metrics And Alerts

• Which Tools Should We Use for Dashboards?
• Installing And Setting up Prometheus & Grafana
• Importing and Customizing Pre-Made Dashboards
• Creating Custom Dashboards
• Creating Semaphore Dashboards
• A Better Dashboard for Big Screens
• Prometheus and Graph Alerts, Grafana Notifications, Semaphores

Collecting And Querying Logs

• Exploring Logs Through kubectl
• Choosing a Centralized Logging Solution
• Logs Collection and Shipping
• Explore Centralized Logging
• The ELK Stack - Elasticsearch, LogStash, Kibana
• Cost implications

Networking in Kubernetes

• Network routing in Linux
• Understanding network requirements
• Exploring the Endpoints
• Balancing in-cluster traffic
• Routing traffic with kube-proxy
• CRI, CNI, CSI: interfaces for the kubelet
• Choosing between latency and load balancing
• Pros and cons of the 4 types of Services
• Discovering Services
• Routing traffic with an Ingress controller
• End-to-end traffic journey

Security

• Network Security with policies
• Secrets as Volumes not Env Vars
• Secrets without Secrets
• RBAC
• Access Cloud resources in EKS (kube2iam)
• Container and Image scanning
• PodSecurityPolicies
• CIS Benchmarking