Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Self-Managed Kubernetes
- Kubernetes architecture and its core components
- Trade-offs between managed and self-managed Kubernetes
- Considerations regarding vendor lock-in and the benefits of sovereignty
- Deployment options: kubeadm, kOps, and manual installation
Infrastructure Planning
- Hardware sizing for control plane and worker nodes
- High availability requirements and topology design
- OS selection and preparation (Ubuntu, RHEL, Rocky Linux)
- Network prerequisites and firewall configuration
Installing Container Runtimes
- Comparing container runtime options: containerd vs CRI-O
- Installation and configuration of containerd
- Installation and configuration of CRI-O
- Runtime security considerations
Bootstrapping the Cluster with kubeadm
- Installing kubeadm, kubelet, and kubectl
- Initializing the first control plane node
- Configuring kubeconfig for cluster access
- Joining additional control plane nodes for high availability
- Adding worker nodes to the cluster
Configuring High Availability
- Stacked vs external etcd topologies
- Setting up HAProxy or Keepalived for API server load balancing
- Certificate management and renewal processes
- Backup and recovery strategies for etcd
Container Networking
- Choosing CNI plugins: Calico, Cilium, Flannel, Weave
- Installing and configuring Calico
- Implementing network policies for security
- Node-to-node communication and pod networking
- Exposing services without relying on cloud load balancers
Service Load Balancing
- Using MetalLB for bare-metal load balancing
- Configuring Layer 2 and BGP modes
- Alternatives using Keepalived and HAProxy
- Deploying Ingress controllers (nginx, Traefik)
Storage Solutions
- Understanding Storage classes and CSI drivers
- Managing local persistent volumes
- Setting up NFS provisioners
- Distributed storage options: Ceph RBD, OpenEBS
- Snapshot and cloning capabilities
Cluster Security
- Managing Certificate Authorities and PKI
- Configuring RBAC and service accounts
- Applying pod security standards and admission controllers
- Securing the API server and etcd
- Image signing and verification
Self-Hosted Container Registry
- Deploying Harbor registry
- Setting up Docker Registry
- Image replication and vulnerability scanning
- Registry authentication and integration
Monitoring and Observability
- Deploying the Prometheus and Grafana stack
- Using VictoriaMetrics as a lightweight alternative
- Collecting node and pod metrics
- Creating custom alerting rules and dashboards
- Log aggregation with Loki or Fluentd
Cluster Maintenance
- Upgrading Kubernetes versions using kubeadm
- Performing rolling updates for control plane components
- Certificate rotation procedures
- Node maintenance and cordoning
Backup and Disaster Recovery
- etcd backup and restore procedures
- Using Velero for cluster resource and PV backup
- Cross-site replication strategies
- Testing recovery procedures
Multi-Cluster Management
- Managing clusters with Rancher or Portainer
- Concepts of cluster federation
- Strategies for workload distribution
Requirements
- A solid understanding of containers and containerization principles.
- Practical experience in Linux system administration.
- Foundational networking knowledge.
- Familiarity with command-line tools and SSH.
Target Audience
- DevOps/SRE Engineers
- System Administrators
- Technical Architects
- Infrastructure Engineers seeking vendor independence
Testimonials (1)
The knowledge and the patience from the trainer to answer to our questions.
