Course: Advanced Kubernetes: Skills

Kubernetes is an open-source container-orchestration system used to deploy, scale, and manage computer applications automatically. To use Kubernetes effectively requires configuring the network to be secure and efficient. With this course, learn how to conduct advanced Kubernetes networking tasks. Learn to distinguish Kubernetes networking from its legacy ancestors and other platforms. Examine the basics of Kubernetes networking, including IP address management and routing. Learn how to perform monitoring and logging. Then, explore Kubernetes pods, Container Networking Interface, and the role of Kube-router in load balancing. As you advance, learn about network security considerations and how network policies can differ between cloud-based and on-premises deployments. Upon course completion, you'll have a solid theoretical knowledge of Kubernetes networking activities and be ready to move on to some more advanced practices.

Several advanced practices can be followed to leverage the full power and rich features of Kubernetes. Among these are those that help take advantage of features, options, and plugins for configuring Kubernetes networking to run efficiently and securely. Take this theoretical and practical course to learn about some of the chief Kubernetes networking components and the features of container network interface (CNI) plugins that implement the Kubernetes networking model. Practice along with demonstrations configuring Flannel and Multus CNI plugins to enable advanced multi-homed pods in Kubernetes. Learn how Kubernetes leverages iptables and routing tables for managing traffic and how load balancing is implemented on Kubernetes clusters. Furthermore, practice configuring network ingress and load balancing in Kubernetes. When you've completed this course, you'll have advanced your Kubernetes networking skills both in theory and in practice.

While Kubernetes introduces many capabilities, if developers aren't prudent, it can also introduce security risks. Use this course to learn the top security considerations with Kubernetes deployments and how to tackle them. Explore traditional application security as well as the 4C's of cloud-native security. Investigate the most crucial security concerns when migrating to the cloud. See the security vulnerabilities related to Kubernetes clusters, containers, scalability, and automation as well as those related to software code. Moving on, discover the security features in Amazon Elastic Kubernetes Service and Azure Kubernetes Service. Learn how Packer and Ansible can be used to security-harden your Kubernetes deployments and Calico to manage security policies. Also, explore several security design patterns. Upon completion, you'll be able to ensure your Kubernetes deployments pose a low-security risk to your organization.

In this challenge, you will implement an ingress controller for network security using the Azure Kubernetes Service (AKS). Note: Once you begin a challenge you will not be able to pause, save, or return to your progress. Please ensure you have set aside enough time to complete the challenge before you start.

If the security of your containerized systems and networks is important to you, then you need to implement appropriate security measures throughout the design and build of your Kubernetes solutions. Use this course to learn how to do this. Examine common Kubernetes security issues and exploits. Learn how Pods and clusters are secured. Additionally, explore security considerations and procedures related to Kubernetes deployments and the Kubernetes API. As you advance, learn how to audit a Kubernetes-based deployment, determine security risks, and design a security plan for new deployments. Practice configuring a security context and security policy for a Pod. Use role-based access control with Kubernetes. And restrict a container's access to resources by using AppArmor. Upon completion, you'll be able to greatly reduce your Kubernetes environment's vulnerability to unauthorized access and security attacks.

Kubernetes provides several methods for augmenting functionality through addons, plugins, and API extensions. If you work with Kubernetes, knowing how to extend it will elevate its power. Use this thorough course to learn why and how to extend Kubernetes. Examine operators and the operator pattern. Explore how Kubernetes controllers function relative to customization and extensions. And investigate the Kubernetes object model, controller objects, API extensions, user types, resources, and access extensions. Next, learn about the Kubernetes API and infrastructure extensions. And discover several plugins and addons used to extend the functionality of Kubernetes. As you advance, practice extending the Kubernetes API, implementing multiple schedulers, and configuring an HTTP proxy server. Install a network plugin to extend Kubernetes. And show how device plugins are used. When you're done, you'll know the best way to extend Kubernetes for your needs.

Kubernetes provides an extensibility framework that can be used to provide new functions and features to the system. This allows Kubernetes to grow and provide custom functionality to this platform. Use this course to learn about specific methods for extending Kubernetes and follow practical demonstrations of how this is done. Begin by exploring methods for extending Kubernetes on the client side and server side. Learn how to extend Kubernetes using customer resource definitions and the Service Catalog. Discover how container platforms such as RedHat's OpenShift are used to provide additional functionality for Kubernetes. Moving on, practice how to install the Service Catalog using Helm, write and install kubectl plugins, perform debugging on pods, create and use CustomResourceDefinitions (CRDs), and create an application in the OpenShift platform using the command-line interface (CLI) and the web console interface. When you're done, you'll know the best ways to implement and leverage methods available for extending Kubernetes.

Final Exam: Advanced Kubernetes Skills will test your knowledge and application of the topics presented throughout the Advanced Kubernetes Skills track of the Skillsoft Aspire Building Advanced Kubernetes Skills Journey.

Building Advanced Kubernetes Skills