Back To Course Home

Learn Kubernetes: A Deep Dive

0% completed

Kubernetes Primer

Kubernetes Background Where did Kubernetes come from?The Operating System of the Cloud Quiz: Kubernetes Primer Summary

Kubernetes Principles of Operation

Kubernetes From 40K Feet Control plane and Nodes: Control Plane Control plane and Nodes: Worker Nodes Packaging Apps for Kubernetes The Declarative Model and the Desired State Pods Deployments Quiz: Kubernetes Principles Summary

Getting Kubernetes

Local Kubernetes Cluster Hosted Kubernetes Cluster Working with kubectl Summary

Working With Pods: Theory

Pod Theory Pods and Scheduling Pod Lifecycle How Do We Deploy Pods Multi-Container Pods: Init containers Quiz: Theory of Working With Pods Summary

Working with Pods: Hands-On

Pod Manifest Files Manifest Files: Empathy as Code Introspecting Pods kubectl exec: Running Commands in Pods Check Pod immutability Multi-container Pod example – init container Multi-container Pod example – sidecar container Quiz: Working Hands-on With Pods Summary

Virtual Clusters with Namespaces

Namespaces Namespace use cases Default Namespaces Creating and managing Namespaces Deploying to Namespaces Quiz: Virtual Clusters with Namespaces Summary

Kubernetes Deployments

Deployment Theory ReplicaSets and Scaling Rolling Updates With Deployments How to Create a Deployment Accessing Deployments Accessing the Apps Performing a Rolling Update How to Perform a Rollback Quiz: Kubernetes Deployments Summary

Kubernetes Services: Theory

Introduction to Services Labels and Loose Coupling Services and Endpoints Objects Accessing Apps From Inside the Cluster Accessing Apps From Outside the Cluster Quiz: Theory of Kubernetes Services Summary

Kubernetes Services: Hands-On

The Imperative Way The Declarative Way Introspecting Services and Endpoint Objects Quiz: Hands-On With Kubernetes Services Summary

Ingress

Setting the Scene for Ingress Ingress Architecture Working with NGINX Controller Configure Host-Based and Path-Based Routing Inspecting Ingress Objects Quiz: Ingress Summary

WebAssembly on Kubernetes

WebAssembly Primer Wasm on Kubernetes Build and Prepare the Wasm App Build and Configure Kubernetes for Wasm Deploy and Test the App Quiz: WebAssembly on Kubernetes Summary

Service Discovery Deep Dive

Understanding Service Discovery The Service Registry Service Registration Service Discovery Service Discovery and Namespaces Troubleshooting Service Discovery Quiz: Service Discovery Summary

Kubernetes Storage

The Big Picture Storage Providers and Container Storage Interface The Kubernetes Persistent Volume Subsystem Storage Classes and Dynamic Provisioning Provision Volume using an Existing StorageClass Provision Volume by Creating a New StorageClass Quiz: Kubernetes Storage Summary

ConfigMaps

Introduction to ConfigMaps ConfigMap Theory Hands-On: Creating ConfigMaps Imperatively Hands-On: Creating ConfigMaps Declaratively Injecting ConfigMap and Secret Data Into Pods and Containers Hands-on with Secrets Quiz: ConfigMaps Summary

StatefulSets

Introduction to StatefulSets Ordered Creation and Deletion Volumes and Handling Failures Network and Headless Services Hands-On With StatefulSets Creating a Governing Headless Service Deploy the StatefulSet Testing Peer Discovery Scaling StatefulSets Test a Pod Failure Quiz: StatefulSets Summary

API Security and RBAC

API Security Big Picture Authentication Authorization (RBAC)Cluster-level users and permissions Admission Control Quiz: API Security and RBAC Summary

Kubernetes API

Introduction to Kubernetes API API Analogy The API Server A Word on CRUD The API Inspecting the API Alpha, Beta, and Stable Quiz: Kubernetes API Summary

Threat Modeling Kubernetes

Introduction to Threat Modeling

Information Disclosure

Denial of Service

Elevation of Privilege

Protecting Pods

Pod Security Admission

Quiz: Threat Modeling Kubernetes

Real-World Kubernetes Security

Moving Images From Non-Production to Production

Workload Isolation

Identity and Access Management (IAM)

Auditing and Security Monitoring

Quiz: Real-World Kubernetes Security

Conclusion

Glossary Wrap Up

Summary

A quick summary of the concepts learned in this chapter.

We'll cover the following

Recap

Recap

This chapter taught us how the STRIDE model can be used to threat-model Kubernetes. We walked through the six threat categories and examined some ways to prevent and mitigate them.

Get hands-on with 1400+ tech skills courses.