Chapter 20
Kubernetes GT
Kubernetes GT
Five-day hands-on course in two blocks. Chapters are deliberately short - the real learning happens in the labs.
Cluster: Kubernetes 1.35.2 on Ubuntu 24.04. You work from support01 (ssh student@192.168.56.101, password linux).
Slides
Link to slides - valid to 9.10.2026
Block 1
Day 1 - Kubernetes fundamentals and platform architecture
- Ecosystem, containers and orchestration
- Architecture: control plane and worker nodes
- The Kubernetes API and kubectl
- Declarative vs. imperative
- Namespaces
- Labels, selectors and annotations
- Objects and their lifecycle
- Pods
- ReplicaSets and Deployments
Day 2 - Application deployment and networking
- DaemonSets
- StatefulSets (and a first look at PVCs)
- Jobs and CronJobs
- ConfigMaps and Secrets
- Networking, CNI, Services and DNS
- Helm
- Ingress (legacy)
- Gateway API
- Kustomize
Day 3 - Application operations and troubleshooting
- Rolling updates and rollbacks
- Requests, limits and quotas
- Autoscaling with HPA
- Scheduling and node operations
- Startup, readiness and liveness probes
- Logs and events
- Troubleshooting and kubectl debug
Review after Day 3
Feedback round, gaps to reinforce, and emphasis for Block 2.
Block 2
Day 4 - Kubernetes security
- Authentication and authorization
- RBAC and least privilege
- Service accounts
- Security context and container hardening
- Pod Security Standards and Admission
- Admission policies
- Network policies and segmentation
- Images, secrets and audit
Day 5 - Production operations and best practices
- PV, PVC and StorageClasses
- Stateful workloads
- Monitoring with Prometheus and Grafana
- Backup and disaster recovery
- CRDs and operators
- Production operations and best practices