Kubernetes Administrator CKA

Course Certification

This course helps you prepare to take the:
Kubernetes CKA Certification

Course Outline

Module 1: Basics of Kubernetes

• What Is Kubernetes?
• Components of Kubernetes
• Challenges, Other Solutions, and Borg Heritage
• Kubernetes Architecture, Terminology, and Innovation
• User Community, Tools, and Cloud Native Computing Foundation (CNCF)
• Resource Recommendations

Module 2: Installation and Configuration

• Installation Tools
• Installing kubectl, Minikube, and kubeadm
• Using Google Kubernetes Engine (GKE)
• Installation Considerations and Main Deployment Configurations
• Compiling from Source

Module 3: Kubernetes Architecture and Components

• Control Plane Node, Worker Nodes, Kubelet, and Operators
• Service Operator, Pods, Containers, and Init Containers
• API Call Flow, Networking Setup, and CNI Network Configuration File

Module 4: APIs and Access

• API Access, RESTful, and Checking Access
• Optimistic Concurrency, Using Annotations, and Simple Pod
• Managing API Resources with kubectl
• Access from Outside the Cluster and Working with Namespaces
• Swagger and OpenAPI, API Maturity

Module 5: API Objects and Managing State with Deployments

• API Objects Overview, v1 API Group, and Discovering API Groups
• Deploying Applications, DaemonSets, StatefulSets, Autoscaling, and Jobs
• RBAC and Deployment Configurations

Module 6: Volumes and Data

• Introducing Volumes, Volume Types, and Shared Volume Example
• Persistent Volumes and Claims, Dynamic Provisioning
• Using Rook for Storage Orchestration, Secrets, and ConfigMaps

Module 7: Services, Helm, and Ingress

• Service Update Pattern, Service Types, and Services Diagram
• DNS, Helm, Chart Contents, Templates, and Chart Repositories
• Ingress Controller, nginx, Google Load Balancer Controller (GLBC), and Ingress API Resources

Module 8: Scheduling, Logging, and Troubleshooting

• kube-scheduler, Filtering (Predicates), Scoring (Priorities), and Scheduling Policies
• Pod Specification, Affinity Rules, Taints, and Tolerations
• Basic Troubleshooting Steps, Ephemeral Containers, Cluster Start Sequence, and Monitoring

Module 9: Custom Resource Definitions and Security

• Configuration Example, New Object Configuration, Optional Hooks, and Understanding Aggregated APIs
• Cloud Security Considerations, Authentication, Authorization, RBAC, and Webhook Modes
• Admission Controller, Security Contexts, Pod Security Policies, and Network Security Policies

Module 10: High Availability and Lab Activities

• Cluster High Availability, Collocated and Non-Collocated Databases
• Hands-on lab exercises covering various topics throughout the course, such as installation, configuration, storage, networking, and troubleshooting

Lab outline

• How to connect to lab
• Install Kubernetes
• Work with the cluster
• Imperative and declarative
• API
• API Discovery
• Anatomy API Request
• Namespace
• Labels
• Running Pods
• Running Multi-container Pods
• Pod Lifecycle
• Implementing container probes
• System Pods and Controllers
• Create Deployment
• Create Deployment-Replicaset
• Update a Deployment
• Rolling back Deployment
• Scaling a Deployment
• Creating a Daemonset
• Executing Jobs and CronJobs
• Storage Static Provisioning
• Storage Dynamic Provisioning
• Environment Variables
• Secrets
• Private Container Registry
• ConfigMap
• Scheduling
• Scheduling with Affinity and Antiaffinity
• Node Cordoning
• Calico CNI Plugin
• Configure CoreDNS
• Services
• Service Discovery
• Ingress
• ETCD
• Upgrade Kubernetes
• Logging
• JSONpath
• Monitoring with Metric Server
• Troubleshooting Node failures
• Troubleshooting Control Plane failures
• Troubleshooting Workloads
• Authentications
• Manage Authorizations
• PKI on controller
• Create a certificate for a new user
• kubeconfig and context
• RBAC

Course Mode

Instructor-Led Remote Live Classroom Training;

Trainers

Trainers are CKA and CKAD Certified and in other IT technologies, with years of hands-on experience in the industry and in Training.

Lab Topology

For all types of delivery, the Trainee can access real Cisco equipment and systems in our laboratories or directly at the Cisco data centers remotely 24 hours a day. Each participant has access to implement the various configurations thus having a practical and immediate feedback of the theoretical concepts.
Here are some Labs topologies available: