Enterprise OpenShift Administration & Development

5 day training

Day 1: The Container Revolution and Platform Architecture

Chapter 1: Infrastructure Evolution

  • Course Roadmapping (Setting expectations, lab environment access, and terminal setup)
  • Deconstructing Containerization (The transition from monolithic VMs to microservices; namespaces and cgroups architecture)
  • The OpenShift Ecosystem (Understanding the relationship between RHEL, CoreOS, and the Kubernetes upstream)

Chapter 2: Image Construction and Management

  • Building Production-Ready Images (Writing optimized Dockerfiles/Containerfiles, minimizing image size, and multi-stage builds)
  • The Image Life Cycle (Tagging strategies for version control and managing layers for efficient caching)
  • Registry Integration (Authenticated pulls, using the integrated OpenShift Image Registry, and mirroring images)

Chapter 3: Data Persistence

  • Storage Abstraction (Understanding the PV/PVC relationship and Dynamic Volume Provisioning)
  • Storage Classes (Mapping storage requirements to backend providers like EBS, NFS, or ODF)
  • Stateful Applications (Managing database workloads and ensuring data consistency during pod restarts)

Chapter 4: Troubleshooting basics

  • Operational Troubleshooting (Debugging “CrashLoopBackOff” states, log analysis, and utilizing oc debug for node-level issues)

Day 2: Kubernetes Core and Orchestration Logic

Chapter 5: Foundational Workloads

  • Pod Orchestration (Managing the lifecycle of the smallest deployable units and understanding the Init-container pattern)
  • Scaling and Self-Healing (Configuring ReplicaSets and Deployments to maintain desired state and high availability)

Chapter 6: Resource Governance

  • Organizational Metadata (Using Labels and Selectors for efficient resource grouping and filtering)
  • Capacity Planning (Enforcing CPU/Memory requests and limits to prevent “noisy neighbor” syndrome)
  • Multi-tenant Isolation (Managing Projects/Namespaces and applying ResourceQuotas to limit consumption)

Day 3: Application Delivery and Lifecycle Management

Chapter 7: OpenShift-Native Build Systems

  • Automated Image Streams (Understanding ImageStream tags and triggers for automated deployments)
  • Source-to-Image (S2I) Workflows (Transforming raw source code into container images without manual Dockerfiles)
  • Build Configurations (Defining build triggers, webhooks, and strategy types like Jenkins or Tekton integration)

Chapter 8: Advanced Deployment Strategies

  • Mastering the Interface (Advanced usage of the oc CLI tool vs. the Administrator/Developer Web Consoles)
  • Zero-Downtime Releases (Executing Rolling Updates, Blue-Green deployments, and Canary testing)
  • Rollback Procedures (Versioning deployment configs to quickly revert to “known good” states)

Day 4: Networking

Chapter 9: Service Discovery and Traffic Routing

  • Internal Cluster Networking (Differentiating between ClusterIP for internal talk and NodePort for manual exposure)
  • The Ingress Layer (Routes) (Implementing OpenShift Routes, Edge/Passthrough TLS termination, and custom hostnames)
  • Network Security (Creating NetworkPolicies to isolate traffic between specific microservices)

Day 5: Security, Observability, and Operations

Chapter 10: Hardening the Platform

  • Identity and Access Management (Implementing RBAC, User/Group mapping, and Service Accounts)
  • Security Context Constraints (SCC) (Controlling pod privileges to prevent root-level exploits)

Chapter 11: Monitoring and Troubleshooting

  • Full-Stack Observability (Leveraging Prometheus for metrics and Grafana for visual dashboards)
  • Health and Self-Healing (Defining Liveness, Readiness, and Startup probes to automate application recovery)