5 days
Day 1: Foundational Architecture and Environment Setup
Chapter 1: The Modern Container Landscape
- Core Container Concepts (Understanding Linux namespaces, control groups, and the OCI standard)
- The Kubernetes & OpenShift Hierarchy (Analyzing the relationship between the K8s control plane and OpenShift’s enterprise enhancements)
- Platform Ecosystem Overview (Comparing Self-managed vs. Managed editions like ROSA and ARO, and detailing core cluster components)
Chapter 2: Interacting with the Cluster
- Omnichannel Management (Navigating the Developer Perspective in the Web Console vs. advanced
ocCLI techniques) - Workload Basics (Defining Pod specs, container lifecycles, and the “Sidecar” pattern)
- Access Control Fundamentals (Implementing RBAC: Roles, RoleBindings, and managing User permissions)
- Storage Orchestration (Mapping PersistentVolumeClaims to appropriate StorageClasses for dynamic provisioning
Chapter 3: Initial Deployment and Resource Governance
- Rapid Application Prototyping (Utilizing Source-to-Image (S2I) to automate container builds directly from Git)
- Stability via Resource Scoping (Defining
LimitRangesfor default/max CPU and Memory consumption at the project level) - Quota Management (Enforcing
ResourceQuotasto prevent cluster-wide resource exhaustion)
Day 2: Security, Scalability, and Persistence
Chapter 4: Hardening and Network Isolation
- Workload Security Guardrails (Applying Security Context Constraints (SCC) to restrict root access and host-level privileges)
- Software-Defined Networking (SDN) (Configuring NetworkPolicies to control Egress/Ingress traffic and troubleshooting connectivity)
- Cryptographic Security (Implementing TLS termination, certificate management, and securing the data-in-transit path)
Chapter 5: Multi-Tier Application Deployment
- Application Packaging Tools (Building reusable logic with OpenShift Templates and managing complex releases with Helm Charts)
- Advanced Scheduling (Influencing Pod placement using Node Selectors, Affinities, and Taints/Tolerations)
Chapter 6: Data and Reliability
- High Availability (HA) Frameworks (Configuring Liveness, Readiness, and Startup probes to automate self-healing)
- Elasticity (Implementing Horizontal Pod Autoscalers (HPA) to handle fluctuating application traffic)
Day 3: Service Mesh and Observability
Chapter 7: Microservices Management with Istio
- Service Mesh Foundations (Architecture of the Data Plane vs. Control Plane and the Envoy sidecar proxy)
- Installation & Deployment (Deploying the OpenShift Service Mesh Operator and integrating apps into the Mesh)
- Traffic Engineering (Managing A/B testing, Canary rollouts, and VirtualServices)
Chapter 8: Mesh Resilience and Insights
- Zero-Trust Security (Enabling Mutual TLS (mTLS) and fine-grained authorization within the mesh)
- Fault Tolerance (Implementing circuit breakers, retries, and timeout policies)
- The Observability Stack (Visualizing telemetry with Kiali, and deep-dive monitoring via Prometheus and Grafana)
Day 4: Cloud-Native Continuous Integration (Tekton)
Chapter 9: Modernizing the CI/CD Pipeline
- Introduction to Tekton Architecture (Understanding the Kubernetes-native approach to CI vs. traditional Jenkins)
- The Tekton Toolbelt (Leveraging the
tknCLI, Triggers, the community Catalog, and the Dashboard interface)
Chapter 10: Building Automated Pipelines
- Pipeline Component Design (Developing reusable Tasks/TaskRuns and orchestrating them into complex Pipelines)
- Event-Driven Automation (Configuring Triggers and Interceptors to respond to Git Webhooks)
- End-to-End Delivery (Automating the flow from source code commit to a running OpenShift deployment)
Day 5: Extensibility and Custom Automation
Chapter 11: The Operator Framework
- The Operator Pattern (Understanding the “Controller” loop and how to extend the Kubernetes API with Custom Resource Definitions – CRDs)
- Ecosystem Utilization (Navigating the OperatorHub to deploy certified services like databases and middleware)
Chapter 12: Custom Operator Development
- Automation at Scale (Introduction to the Operator SDK and building custom controllers to automate operational tasks)
- Advanced Lifecycle Management (Implementing “Day 2” automation for backups, updates, and application tuning)