Advanced Application Development on OpenShift 4

5 days

Day 1: Foundational Architecture and Environment Setup

Chapter 1: The Modern Container Landscape

  • Core Container Concepts (Understanding Linux namespaces, control groups, and the OCI standard)
  • The Kubernetes & OpenShift Hierarchy (Analyzing the relationship between the K8s control plane and OpenShift’s enterprise enhancements)
  • Platform Ecosystem Overview (Comparing Self-managed vs. Managed editions like ROSA and ARO, and detailing core cluster components)

Chapter 2: Interacting with the Cluster

  • Omnichannel Management (Navigating the Developer Perspective in the Web Console vs. advanced oc CLI techniques)
  • Workload Basics (Defining Pod specs, container lifecycles, and the “Sidecar” pattern)
  • Access Control Fundamentals (Implementing RBAC: Roles, RoleBindings, and managing User permissions)
  • Storage Orchestration (Mapping PersistentVolumeClaims to appropriate StorageClasses for dynamic provisioning

Chapter 3: Initial Deployment and Resource Governance

  • Rapid Application Prototyping (Utilizing Source-to-Image (S2I) to automate container builds directly from Git)
  • Stability via Resource Scoping (Defining LimitRanges for default/max CPU and Memory consumption at the project level)
  • Quota Management (Enforcing ResourceQuotas to prevent cluster-wide resource exhaustion)

Day 2: Security, Scalability, and Persistence

Chapter 4: Hardening and Network Isolation

  • Workload Security Guardrails (Applying Security Context Constraints (SCC) to restrict root access and host-level privileges)
  • Software-Defined Networking (SDN) (Configuring NetworkPolicies to control Egress/Ingress traffic and troubleshooting connectivity)
  • Cryptographic Security (Implementing TLS termination, certificate management, and securing the data-in-transit path)

Chapter 5: Multi-Tier Application Deployment

  • Application Packaging Tools (Building reusable logic with OpenShift Templates and managing complex releases with Helm Charts)
  • Advanced Scheduling (Influencing Pod placement using Node Selectors, Affinities, and Taints/Tolerations)

Chapter 6: Data and Reliability

  • High Availability (HA) Frameworks (Configuring Liveness, Readiness, and Startup probes to automate self-healing)
  • Elasticity (Implementing Horizontal Pod Autoscalers (HPA) to handle fluctuating application traffic)

Day 3: Service Mesh and Observability

Chapter 7: Microservices Management with Istio

  • Service Mesh Foundations (Architecture of the Data Plane vs. Control Plane and the Envoy sidecar proxy)
  • Installation & Deployment (Deploying the OpenShift Service Mesh Operator and integrating apps into the Mesh)
  • Traffic Engineering (Managing A/B testing, Canary rollouts, and VirtualServices)

Chapter 8: Mesh Resilience and Insights

  • Zero-Trust Security (Enabling Mutual TLS (mTLS) and fine-grained authorization within the mesh)
  • Fault Tolerance (Implementing circuit breakers, retries, and timeout policies)
  • The Observability Stack (Visualizing telemetry with Kiali, and deep-dive monitoring via Prometheus and Grafana)

Day 4: Cloud-Native Continuous Integration (Tekton)

Chapter 9: Modernizing the CI/CD Pipeline

  • Introduction to Tekton Architecture (Understanding the Kubernetes-native approach to CI vs. traditional Jenkins)
  • The Tekton Toolbelt (Leveraging the tkn CLI, Triggers, the community Catalog, and the Dashboard interface)

Chapter 10: Building Automated Pipelines

  • Pipeline Component Design (Developing reusable Tasks/TaskRuns and orchestrating them into complex Pipelines)
  • Event-Driven Automation (Configuring Triggers and Interceptors to respond to Git Webhooks)
  • End-to-End Delivery (Automating the flow from source code commit to a running OpenShift deployment)

Day 5: Extensibility and Custom Automation

Chapter 11: The Operator Framework

  • The Operator Pattern (Understanding the “Controller” loop and how to extend the Kubernetes API with Custom Resource Definitions – CRDs)
  • Ecosystem Utilization (Navigating the OperatorHub to deploy certified services like databases and middleware)

Chapter 12: Custom Operator Development

  • Automation at Scale (Introduction to the Operator SDK and building custom controllers to automate operational tasks)
  • Advanced Lifecycle Management (Implementing “Day 2” automation for backups, updates, and application tuning)