Course structure available

Stage 06 · Containers & Platforms

Kubernetes Complete Course

Master Kubernetes from API objects and workloads through networking, storage, scheduling, security, autoscaling, extensibility, cluster lifecycle, observability, upgrades, scalability, and production operations.

Browse curriculum View all chapters

K8S

46chapters

230lessons

Intermediatestarting level

Hands-onlearning mode

Course stateCurriculum ready

Course brief

A comprehensive Kubernetes curriculum from first Pod to production cluster engineering.

This course is organized as a progressive operational curriculum from fundamentals through advanced production practice. Lesson files are reserved with stable repository paths so content can be added later without changing URLs or navigation.

By the end

You will be able to

Understand Kubernetes control-plane architecture, declarative APIs, reconciliation, and workload controllers
Operate applications with Services, Gateway/Ingress, storage, scheduling, autoscaling, and disruption controls
Apply RBAC, admission, Pod Security, NetworkPolicy, encryption, and software-supply-chain safeguards
Install, upgrade, back up, observe, troubleshoot, and scale Kubernetes clusters safely
Extend Kubernetes with CRDs, operators, webhooks, and production platform patterns

Complete syllabus

46 chapters in prerequisite order.

The structure goes beyond command references and feature lists. It includes architecture, security, reliability, troubleshooting, automation, governance, performance, and realistic production workflows.

Chapter 1

Kubernetes Foundations, Declarative Infrastructure, Reconciliation, Desired State, and Cluster Mental Model

5 lessons

Kubernetes Foundations, Declarative Infrastructure, Reconciliation, Desired State, and Cluster Mental Model: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Kubernetes Foundations, Declarative Infrastructure, Reconciliation, Desired State, and Cluster Mental Model: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Kubernetes Foundations, Declarative Infrastructure, Reconciliation, Desired State, and Cluster Mental Model: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Kubernetes Foundations, Declarative Infrastructure, Reconciliation, Desired State, and Cluster Mental Model: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Kubernetes Foundations, Declarative Infrastructure, Reconciliation, Desired State, and Cluster Mental ModelReserved in course structure

Planned

Chapter 2

Local Kubernetes Labs with kind, minikube, k3d, and Cluster Context Safety

5 lessons

Local Kubernetes Labs with kind, minikube, k3d, and Cluster Context Safety: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Local Kubernetes Labs with kind, minikube, k3d, and Cluster Context Safety: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Local Kubernetes Labs with kind, minikube, k3d, and Cluster Context Safety: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Local Kubernetes Labs with kind, minikube, k3d, and Cluster Context Safety: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Local Kubernetes Labs with kind, minikube, k3d, and Cluster Context SafetyReserved in course structure

Planned

Chapter 3

Control Plane and Node Architecture: API Server, etcd, Scheduler, Controllers, Kubelet, and Runtime

5 lessons

Control Plane and Node Architecture: API Server, etcd, Scheduler, Controllers, Kubelet, and Runtime: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Control Plane and Node Architecture: API Server, etcd, Scheduler, Controllers, Kubelet, and Runtime: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Control Plane and Node Architecture: API Server, etcd, Scheduler, Controllers, Kubelet, and Runtime: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Control Plane and Node Architecture: API Server, etcd, Scheduler, Controllers, Kubelet, and Runtime: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Control Plane and Node Architecture: API Server, etcd, Scheduler, Controllers, Kubelet, and RuntimeReserved in course structure

Planned

Chapter 4

Kubernetes API Resources, Group/Version/Kind, Metadata, spec/status, Discovery, and API Conventions

5 lessons

Kubernetes API Resources, Group/Version/Kind, Metadata, spec/status, Discovery, and API Conventions: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Kubernetes API Resources, Group/Version/Kind, Metadata, spec/status, Discovery, and API Conventions: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Kubernetes API Resources, Group/Version/Kind, Metadata, spec/status, Discovery, and API Conventions: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Kubernetes API Resources, Group/Version/Kind, Metadata, spec/status, Discovery, and API Conventions: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Kubernetes API Resources, Group/Version/Kind, Metadata, spec/status, Discovery, and API ConventionsReserved in course structure

Planned

Chapter 5

kubectl Fundamentals, Contexts, Namespaces, Output Formats, Explain, Diff, Apply, Patch, and Debug

5 lessons

kubectl Fundamentals, Contexts, Namespaces, Output Formats, Explain, Diff, Apply, Patch, and Debug: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

kubectl Fundamentals, Contexts, Namespaces, Output Formats, Explain, Diff, Apply, Patch, and Debug: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

kubectl Fundamentals, Contexts, Namespaces, Output Formats, Explain, Diff, Apply, Patch, and Debug: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

kubectl Fundamentals, Contexts, Namespaces, Output Formats, Explain, Diff, Apply, Patch, and Debug: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — kubectl Fundamentals, Contexts, Namespaces, Output Formats, Explain, Diff, Apply, Patch, and DebugReserved in course structure

Planned

Chapter 6

YAML Manifests, Declarative Apply, Server-Side Apply, Field Managers, Ownership, and Configuration Discipline

5 lessons

YAML Manifests, Declarative Apply, Server-Side Apply, Field Managers, Ownership, and Configuration Discipline: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

YAML Manifests, Declarative Apply, Server-Side Apply, Field Managers, Ownership, and Configuration Discipline: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

YAML Manifests, Declarative Apply, Server-Side Apply, Field Managers, Ownership, and Configuration Discipline: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

YAML Manifests, Declarative Apply, Server-Side Apply, Field Managers, Ownership, and Configuration Discipline: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — YAML Manifests, Declarative Apply, Server-Side Apply, Field Managers, Ownership, and Configuration DisciplineReserved in course structure

Planned

Chapter 7

Namespaces, Labels, Selectors, Annotations, Finalizers, Owner References, and Resource Organization

5 lessons

Namespaces, Labels, Selectors, Annotations, Finalizers, Owner References, and Resource Organization: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Namespaces, Labels, Selectors, Annotations, Finalizers, Owner References, and Resource Organization: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Namespaces, Labels, Selectors, Annotations, Finalizers, Owner References, and Resource Organization: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Namespaces, Labels, Selectors, Annotations, Finalizers, Owner References, and Resource Organization: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Namespaces, Labels, Selectors, Annotations, Finalizers, Owner References, and Resource OrganizationReserved in course structure

Planned

Chapter 8

Pods, Multi-Container Patterns, Init Containers, Sidecars, Lifecycle Hooks, and Pod Phases

5 lessons

Pods, Multi-Container Patterns, Init Containers, Sidecars, Lifecycle Hooks, and Pod Phases: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Pods, Multi-Container Patterns, Init Containers, Sidecars, Lifecycle Hooks, and Pod Phases: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Pods, Multi-Container Patterns, Init Containers, Sidecars, Lifecycle Hooks, and Pod Phases: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Pods, Multi-Container Patterns, Init Containers, Sidecars, Lifecycle Hooks, and Pod Phases: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Pods, Multi-Container Patterns, Init Containers, Sidecars, Lifecycle Hooks, and Pod PhasesReserved in course structure

Planned

Chapter 9

Container Probes, Startup/Liveness/Readiness, Graceful Termination, Restart Behavior, and Application Health

5 lessons

Container Probes, Startup/Liveness/Readiness, Graceful Termination, Restart Behavior, and Application Health: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Container Probes, Startup/Liveness/Readiness, Graceful Termination, Restart Behavior, and Application Health: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Container Probes, Startup/Liveness/Readiness, Graceful Termination, Restart Behavior, and Application Health: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Container Probes, Startup/Liveness/Readiness, Graceful Termination, Restart Behavior, and Application Health: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Container Probes, Startup/Liveness/Readiness, Graceful Termination, Restart Behavior, and Application HealthReserved in course structure

Planned

Chapter 10

Resource Requests and Limits, QoS Classes, OOM Behavior, CPU Throttling, HugePages, and Resource Sizing

5 lessons

Resource Requests and Limits, QoS Classes, OOM Behavior, CPU Throttling, HugePages, and Resource Sizing: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Resource Requests and Limits, QoS Classes, OOM Behavior, CPU Throttling, HugePages, and Resource Sizing: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Resource Requests and Limits, QoS Classes, OOM Behavior, CPU Throttling, HugePages, and Resource Sizing: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Resource Requests and Limits, QoS Classes, OOM Behavior, CPU Throttling, HugePages, and Resource Sizing: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Resource Requests and Limits, QoS Classes, OOM Behavior, CPU Throttling, HugePages, and Resource SizingReserved in course structure

Planned

Chapter 11

ConfigMaps, Secrets, Environment Injection, Projected Volumes, Immutable Config, and Configuration Reloading

5 lessons

ConfigMaps, Secrets, Environment Injection, Projected Volumes, Immutable Config, and Configuration Reloading: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

ConfigMaps, Secrets, Environment Injection, Projected Volumes, Immutable Config, and Configuration Reloading: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

ConfigMaps, Secrets, Environment Injection, Projected Volumes, Immutable Config, and Configuration Reloading: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

ConfigMaps, Secrets, Environment Injection, Projected Volumes, Immutable Config, and Configuration Reloading: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — ConfigMaps, Secrets, Environment Injection, Projected Volumes, Immutable Config, and Configuration ReloadingReserved in course structure

Planned

Chapter 12

ReplicaSets and Deployments, Rolling Updates, Rollback, Revision History, and Deployment Strategies

5 lessons

ReplicaSets and Deployments, Rolling Updates, Rollback, Revision History, and Deployment Strategies: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

ReplicaSets and Deployments, Rolling Updates, Rollback, Revision History, and Deployment Strategies: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

ReplicaSets and Deployments, Rolling Updates, Rollback, Revision History, and Deployment Strategies: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

ReplicaSets and Deployments, Rolling Updates, Rollback, Revision History, and Deployment Strategies: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — ReplicaSets and Deployments, Rolling Updates, Rollback, Revision History, and Deployment StrategiesReserved in course structure

Planned

Chapter 13

StatefulSets, Stable Identity, Ordered Operations, Persistent Storage, and Stateful Application Patterns

5 lessons

StatefulSets, Stable Identity, Ordered Operations, Persistent Storage, and Stateful Application Patterns: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

StatefulSets, Stable Identity, Ordered Operations, Persistent Storage, and Stateful Application Patterns: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

StatefulSets, Stable Identity, Ordered Operations, Persistent Storage, and Stateful Application Patterns: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

StatefulSets, Stable Identity, Ordered Operations, Persistent Storage, and Stateful Application Patterns: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — StatefulSets, Stable Identity, Ordered Operations, Persistent Storage, and Stateful Application PatternsReserved in course structure

Planned

Chapter 14

DaemonSets, Node-Level Services, Update Strategies, Tolerations, and Infrastructure Agents

5 lessons

DaemonSets, Node-Level Services, Update Strategies, Tolerations, and Infrastructure Agents: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

DaemonSets, Node-Level Services, Update Strategies, Tolerations, and Infrastructure Agents: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

DaemonSets, Node-Level Services, Update Strategies, Tolerations, and Infrastructure Agents: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

DaemonSets, Node-Level Services, Update Strategies, Tolerations, and Infrastructure Agents: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — DaemonSets, Node-Level Services, Update Strategies, Tolerations, and Infrastructure AgentsReserved in course structure

Planned

Chapter 15

Jobs, CronJobs, Completion Modes, Backoff, Deadlines, Parallelism, and Reliable Batch Processing

5 lessons

Jobs, CronJobs, Completion Modes, Backoff, Deadlines, Parallelism, and Reliable Batch Processing: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Jobs, CronJobs, Completion Modes, Backoff, Deadlines, Parallelism, and Reliable Batch Processing: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Jobs, CronJobs, Completion Modes, Backoff, Deadlines, Parallelism, and Reliable Batch Processing: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Jobs, CronJobs, Completion Modes, Backoff, Deadlines, Parallelism, and Reliable Batch Processing: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Jobs, CronJobs, Completion Modes, Backoff, Deadlines, Parallelism, and Reliable Batch ProcessingReserved in course structure

Planned

Chapter 16

Services: ClusterIP, NodePort, LoadBalancer, ExternalName, Endpoints, EndpointSlices, and Traffic Policies

5 lessons

Services: ClusterIP, NodePort, LoadBalancer, ExternalName, Endpoints, EndpointSlices, and Traffic Policies: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Services: ClusterIP, NodePort, LoadBalancer, ExternalName, Endpoints, EndpointSlices, and Traffic Policies: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Services: ClusterIP, NodePort, LoadBalancer, ExternalName, Endpoints, EndpointSlices, and Traffic Policies: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Services: ClusterIP, NodePort, LoadBalancer, ExternalName, Endpoints, EndpointSlices, and Traffic Policies: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Services: ClusterIP, NodePort, LoadBalancer, ExternalName, Endpoints, EndpointSlices, and Traffic PoliciesReserved in course structure

Planned

Chapter 17

Ingress, Gateway API, HTTP Routing, TLS Termination, Controllers, and North-South Traffic Architecture

5 lessons

Ingress, Gateway API, HTTP Routing, TLS Termination, Controllers, and North-South Traffic Architecture: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Ingress, Gateway API, HTTP Routing, TLS Termination, Controllers, and North-South Traffic Architecture: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Ingress, Gateway API, HTTP Routing, TLS Termination, Controllers, and North-South Traffic Architecture: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Ingress, Gateway API, HTTP Routing, TLS Termination, Controllers, and North-South Traffic Architecture: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Ingress, Gateway API, HTTP Routing, TLS Termination, Controllers, and North-South Traffic ArchitectureReserved in course structure

Planned

Chapter 18

Cluster DNS, CoreDNS, Service Discovery, DNS Policies, Search Domains, and DNS Troubleshooting

5 lessons

Cluster DNS, CoreDNS, Service Discovery, DNS Policies, Search Domains, and DNS Troubleshooting: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Cluster DNS, CoreDNS, Service Discovery, DNS Policies, Search Domains, and DNS Troubleshooting: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Cluster DNS, CoreDNS, Service Discovery, DNS Policies, Search Domains, and DNS Troubleshooting: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Cluster DNS, CoreDNS, Service Discovery, DNS Policies, Search Domains, and DNS Troubleshooting: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Cluster DNS, CoreDNS, Service Discovery, DNS Policies, Search Domains, and DNS TroubleshootingReserved in course structure

Planned

Chapter 19

Kubernetes Network Model, CNI Architecture, Pod Networking, Service Proxies, kube-proxy, and Data Paths

5 lessons

Kubernetes Network Model, CNI Architecture, Pod Networking, Service Proxies, kube-proxy, and Data Paths: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Kubernetes Network Model, CNI Architecture, Pod Networking, Service Proxies, kube-proxy, and Data Paths: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Kubernetes Network Model, CNI Architecture, Pod Networking, Service Proxies, kube-proxy, and Data Paths: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Kubernetes Network Model, CNI Architecture, Pod Networking, Service Proxies, kube-proxy, and Data Paths: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Kubernetes Network Model, CNI Architecture, Pod Networking, Service Proxies, kube-proxy, and Data PathsReserved in course structure

Planned

Chapter 20

NetworkPolicy, Namespace and Pod Selection, Default Deny, Egress Controls, and Network Segmentation

5 lessons

NetworkPolicy, Namespace and Pod Selection, Default Deny, Egress Controls, and Network Segmentation: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

NetworkPolicy, Namespace and Pod Selection, Default Deny, Egress Controls, and Network Segmentation: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

NetworkPolicy, Namespace and Pod Selection, Default Deny, Egress Controls, and Network Segmentation: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

NetworkPolicy, Namespace and Pod Selection, Default Deny, Egress Controls, and Network Segmentation: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — NetworkPolicy, Namespace and Pod Selection, Default Deny, Egress Controls, and Network SegmentationReserved in course structure

Planned

Chapter 21

Volumes, PersistentVolumes, PersistentVolumeClaims, Access Modes, Reclaim Policies, and Data Lifecycle

5 lessons

Volumes, PersistentVolumes, PersistentVolumeClaims, Access Modes, Reclaim Policies, and Data Lifecycle: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Volumes, PersistentVolumes, PersistentVolumeClaims, Access Modes, Reclaim Policies, and Data Lifecycle: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Volumes, PersistentVolumes, PersistentVolumeClaims, Access Modes, Reclaim Policies, and Data Lifecycle: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Volumes, PersistentVolumes, PersistentVolumeClaims, Access Modes, Reclaim Policies, and Data Lifecycle: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Volumes, PersistentVolumes, PersistentVolumeClaims, Access Modes, Reclaim Policies, and Data LifecycleReserved in course structure

Planned

Chapter 22

StorageClasses, Dynamic Provisioning, CSI Drivers, Volume Expansion, Snapshots, Clones, and Topology

5 lessons

StorageClasses, Dynamic Provisioning, CSI Drivers, Volume Expansion, Snapshots, Clones, and Topology: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

StorageClasses, Dynamic Provisioning, CSI Drivers, Volume Expansion, Snapshots, Clones, and Topology: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

StorageClasses, Dynamic Provisioning, CSI Drivers, Volume Expansion, Snapshots, Clones, and Topology: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

StorageClasses, Dynamic Provisioning, CSI Drivers, Volume Expansion, Snapshots, Clones, and Topology: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — StorageClasses, Dynamic Provisioning, CSI Drivers, Volume Expansion, Snapshots, Clones, and TopologyReserved in course structure

Planned

Chapter 23

Scheduling Foundations, Node Selection, nodeSelector, Node Affinity, Pod Affinity, and Anti-Affinity

5 lessons

Scheduling Foundations, Node Selection, nodeSelector, Node Affinity, Pod Affinity, and Anti-Affinity: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Scheduling Foundations, Node Selection, nodeSelector, Node Affinity, Pod Affinity, and Anti-Affinity: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Scheduling Foundations, Node Selection, nodeSelector, Node Affinity, Pod Affinity, and Anti-Affinity: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Scheduling Foundations, Node Selection, nodeSelector, Node Affinity, Pod Affinity, and Anti-Affinity: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Scheduling Foundations, Node Selection, nodeSelector, Node Affinity, Pod Affinity, and Anti-AffinityReserved in course structure

Planned

Chapter 24

Taints, Tolerations, Topology Spread Constraints, Priority Classes, Preemption, and Placement Policy

5 lessons

Taints, Tolerations, Topology Spread Constraints, Priority Classes, Preemption, and Placement Policy: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Taints, Tolerations, Topology Spread Constraints, Priority Classes, Preemption, and Placement Policy: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Taints, Tolerations, Topology Spread Constraints, Priority Classes, Preemption, and Placement Policy: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Taints, Tolerations, Topology Spread Constraints, Priority Classes, Preemption, and Placement Policy: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Taints, Tolerations, Topology Spread Constraints, Priority Classes, Preemption, and Placement PolicyReserved in course structure

Planned

Chapter 25

Pod Disruption Budgets, Eviction API, Node Draining, Graceful Maintenance, and Availability Engineering

5 lessons

Pod Disruption Budgets, Eviction API, Node Draining, Graceful Maintenance, and Availability Engineering: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Pod Disruption Budgets, Eviction API, Node Draining, Graceful Maintenance, and Availability Engineering: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Pod Disruption Budgets, Eviction API, Node Draining, Graceful Maintenance, and Availability Engineering: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Pod Disruption Budgets, Eviction API, Node Draining, Graceful Maintenance, and Availability Engineering: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Pod Disruption Budgets, Eviction API, Node Draining, Graceful Maintenance, and Availability EngineeringReserved in course structure

Planned

Chapter 26

Horizontal Pod Autoscaling, Metrics APIs, Vertical Pod Autoscaling Concepts, and Workload Autoscaling Design

5 lessons

Horizontal Pod Autoscaling, Metrics APIs, Vertical Pod Autoscaling Concepts, and Workload Autoscaling Design: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Horizontal Pod Autoscaling, Metrics APIs, Vertical Pod Autoscaling Concepts, and Workload Autoscaling Design: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Horizontal Pod Autoscaling, Metrics APIs, Vertical Pod Autoscaling Concepts, and Workload Autoscaling Design: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Horizontal Pod Autoscaling, Metrics APIs, Vertical Pod Autoscaling Concepts, and Workload Autoscaling Design: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Horizontal Pod Autoscaling, Metrics APIs, Vertical Pod Autoscaling Concepts, and Workload Autoscaling DesignReserved in course structure

Planned

Chapter 27

Cluster Autoscaling Concepts, Node Provisioning, Capacity Planning, Overprovisioning, and Elastic Clusters

5 lessons

Cluster Autoscaling Concepts, Node Provisioning, Capacity Planning, Overprovisioning, and Elastic Clusters: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Cluster Autoscaling Concepts, Node Provisioning, Capacity Planning, Overprovisioning, and Elastic Clusters: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Cluster Autoscaling Concepts, Node Provisioning, Capacity Planning, Overprovisioning, and Elastic Clusters: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Cluster Autoscaling Concepts, Node Provisioning, Capacity Planning, Overprovisioning, and Elastic Clusters: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Cluster Autoscaling Concepts, Node Provisioning, Capacity Planning, Overprovisioning, and Elastic ClustersReserved in course structure

Planned

Chapter 28

ServiceAccounts, RBAC, Roles, ClusterRoles, Bindings, Impersonation, and Least-Privilege Authorization

5 lessons

ServiceAccounts, RBAC, Roles, ClusterRoles, Bindings, Impersonation, and Least-Privilege Authorization: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

ServiceAccounts, RBAC, Roles, ClusterRoles, Bindings, Impersonation, and Least-Privilege Authorization: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

ServiceAccounts, RBAC, Roles, ClusterRoles, Bindings, Impersonation, and Least-Privilege Authorization: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

ServiceAccounts, RBAC, Roles, ClusterRoles, Bindings, Impersonation, and Least-Privilege Authorization: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — ServiceAccounts, RBAC, Roles, ClusterRoles, Bindings, Impersonation, and Least-Privilege AuthorizationReserved in course structure

Planned

Chapter 29

Authentication, Client Certificates, OIDC, Bootstrap Tokens, API Access, and Identity Integration

5 lessons

Authentication, Client Certificates, OIDC, Bootstrap Tokens, API Access, and Identity Integration: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Authentication, Client Certificates, OIDC, Bootstrap Tokens, API Access, and Identity Integration: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Authentication, Client Certificates, OIDC, Bootstrap Tokens, API Access, and Identity Integration: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Authentication, Client Certificates, OIDC, Bootstrap Tokens, API Access, and Identity Integration: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Authentication, Client Certificates, OIDC, Bootstrap Tokens, API Access, and Identity IntegrationReserved in course structure

Planned

Chapter 30

Admission Control, Mutating and Validating Webhooks, ValidatingAdmissionPolicy, and Policy Enforcement

5 lessons

Admission Control, Mutating and Validating Webhooks, ValidatingAdmissionPolicy, and Policy Enforcement: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Admission Control, Mutating and Validating Webhooks, ValidatingAdmissionPolicy, and Policy Enforcement: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Admission Control, Mutating and Validating Webhooks, ValidatingAdmissionPolicy, and Policy Enforcement: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Admission Control, Mutating and Validating Webhooks, ValidatingAdmissionPolicy, and Policy Enforcement: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Admission Control, Mutating and Validating Webhooks, ValidatingAdmissionPolicy, and Policy EnforcementReserved in course structure

Planned

Chapter 31

Pod Security Standards and Admission, Security Contexts, Capabilities, seccomp, AppArmor, and Non-Root Workloads

5 lessons

Pod Security Standards and Admission, Security Contexts, Capabilities, seccomp, AppArmor, and Non-Root Workloads: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Pod Security Standards and Admission, Security Contexts, Capabilities, seccomp, AppArmor, and Non-Root Workloads: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Pod Security Standards and Admission, Security Contexts, Capabilities, seccomp, AppArmor, and Non-Root Workloads: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Pod Security Standards and Admission, Security Contexts, Capabilities, seccomp, AppArmor, and Non-Root Workloads: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Pod Security Standards and Admission, Security Contexts, Capabilities, seccomp, AppArmor, and Non-Root WorkloadsReserved in course structure

Planned

Chapter 32

Secret Encryption at Rest, KMS Providers, etcd Protection, External Secret Systems, and Credential Rotation

5 lessons

Secret Encryption at Rest, KMS Providers, etcd Protection, External Secret Systems, and Credential Rotation: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Secret Encryption at Rest, KMS Providers, etcd Protection, External Secret Systems, and Credential Rotation: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Secret Encryption at Rest, KMS Providers, etcd Protection, External Secret Systems, and Credential Rotation: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Secret Encryption at Rest, KMS Providers, etcd Protection, External Secret Systems, and Credential Rotation: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Secret Encryption at Rest, KMS Providers, etcd Protection, External Secret Systems, and Credential RotationReserved in course structure

Planned

Chapter 33

Image Security, Registry Trust, Image Pull Secrets, Digests, SBOMs, Signatures, Provenance, and Admission Gates

5 lessons

Image Security, Registry Trust, Image Pull Secrets, Digests, SBOMs, Signatures, Provenance, and Admission Gates: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Image Security, Registry Trust, Image Pull Secrets, Digests, SBOMs, Signatures, Provenance, and Admission Gates: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Image Security, Registry Trust, Image Pull Secrets, Digests, SBOMs, Signatures, Provenance, and Admission Gates: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Image Security, Registry Trust, Image Pull Secrets, Digests, SBOMs, Signatures, Provenance, and Admission Gates: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Image Security, Registry Trust, Image Pull Secrets, Digests, SBOMs, Signatures, Provenance, and Admission GatesReserved in course structure

Planned

Chapter 34

Container Runtime Interface, containerd, RuntimeClasses, Sandboxed Runtimes, and Runtime Troubleshooting

5 lessons

Container Runtime Interface, containerd, RuntimeClasses, Sandboxed Runtimes, and Runtime Troubleshooting: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Container Runtime Interface, containerd, RuntimeClasses, Sandboxed Runtimes, and Runtime Troubleshooting: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Container Runtime Interface, containerd, RuntimeClasses, Sandboxed Runtimes, and Runtime Troubleshooting: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Container Runtime Interface, containerd, RuntimeClasses, Sandboxed Runtimes, and Runtime Troubleshooting: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Container Runtime Interface, containerd, RuntimeClasses, Sandboxed Runtimes, and Runtime TroubleshootingReserved in course structure

Planned

Chapter 35

Kubelet Architecture, Node Registration, Static Pods, Certificates, Eviction, Node Pressure, and Node Operations

5 lessons

Kubelet Architecture, Node Registration, Static Pods, Certificates, Eviction, Node Pressure, and Node Operations: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Kubelet Architecture, Node Registration, Static Pods, Certificates, Eviction, Node Pressure, and Node Operations: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Kubelet Architecture, Node Registration, Static Pods, Certificates, Eviction, Node Pressure, and Node Operations: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Kubelet Architecture, Node Registration, Static Pods, Certificates, Eviction, Node Pressure, and Node Operations: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Kubelet Architecture, Node Registration, Static Pods, Certificates, Eviction, Node Pressure, and Node OperationsReserved in course structure

Planned

Chapter 36

etcd Architecture, Quorum, Persistence, Snapshots, Compaction, Defragmentation, and Disaster Recovery

5 lessons

etcd Architecture, Quorum, Persistence, Snapshots, Compaction, Defragmentation, and Disaster Recovery: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

etcd Architecture, Quorum, Persistence, Snapshots, Compaction, Defragmentation, and Disaster Recovery: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

etcd Architecture, Quorum, Persistence, Snapshots, Compaction, Defragmentation, and Disaster Recovery: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

etcd Architecture, Quorum, Persistence, Snapshots, Compaction, Defragmentation, and Disaster Recovery: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — etcd Architecture, Quorum, Persistence, Snapshots, Compaction, Defragmentation, and Disaster RecoveryReserved in course structure

Planned

Chapter 37

API Server, Scheduler, Controller Manager, Cloud Controller Manager, and Control-Plane Configuration

5 lessons

API Server, Scheduler, Controller Manager, Cloud Controller Manager, and Control-Plane Configuration: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

API Server, Scheduler, Controller Manager, Cloud Controller Manager, and Control-Plane Configuration: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

API Server, Scheduler, Controller Manager, Cloud Controller Manager, and Control-Plane Configuration: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

API Server, Scheduler, Controller Manager, Cloud Controller Manager, and Control-Plane Configuration: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — API Server, Scheduler, Controller Manager, Cloud Controller Manager, and Control-Plane ConfigurationReserved in course structure

Planned

Chapter 38

Cluster Bootstrapping with kubeadm, PKI, Control-Plane HA, Worker Join, and Production Topology

5 lessons

Cluster Bootstrapping with kubeadm, PKI, Control-Plane HA, Worker Join, and Production Topology: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Cluster Bootstrapping with kubeadm, PKI, Control-Plane HA, Worker Join, and Production Topology: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Cluster Bootstrapping with kubeadm, PKI, Control-Plane HA, Worker Join, and Production Topology: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Cluster Bootstrapping with kubeadm, PKI, Control-Plane HA, Worker Join, and Production Topology: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Cluster Bootstrapping with kubeadm, PKI, Control-Plane HA, Worker Join, and Production TopologyReserved in course structure

Planned

Chapter 39

Kubernetes Version Skew, Release Support, Upgrade Planning, kubeadm Upgrade, Node Rotation, and Rollback Strategy

5 lessons

Kubernetes Version Skew, Release Support, Upgrade Planning, kubeadm Upgrade, Node Rotation, and Rollback Strategy: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Kubernetes Version Skew, Release Support, Upgrade Planning, kubeadm Upgrade, Node Rotation, and Rollback Strategy: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Kubernetes Version Skew, Release Support, Upgrade Planning, kubeadm Upgrade, Node Rotation, and Rollback Strategy: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Kubernetes Version Skew, Release Support, Upgrade Planning, kubeadm Upgrade, Node Rotation, and Rollback Strategy: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Kubernetes Version Skew, Release Support, Upgrade Planning, kubeadm Upgrade, Node Rotation, and Rollback StrategyReserved in course structure

Planned

Chapter 40

Backup and Disaster Recovery: etcd, Persistent Data, Manifests, Cluster State, and Recovery Validation

5 lessons

Backup and Disaster Recovery: etcd, Persistent Data, Manifests, Cluster State, and Recovery Validation: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Backup and Disaster Recovery: etcd, Persistent Data, Manifests, Cluster State, and Recovery Validation: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Backup and Disaster Recovery: etcd, Persistent Data, Manifests, Cluster State, and Recovery Validation: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Backup and Disaster Recovery: etcd, Persistent Data, Manifests, Cluster State, and Recovery Validation: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Backup and Disaster Recovery: etcd, Persistent Data, Manifests, Cluster State, and Recovery ValidationReserved in course structure

Planned

Chapter 41

Observability with Metrics, Logs, Events, Audit Logs, kube-state-metrics, OpenTelemetry, and Cluster Telemetry

5 lessons

Observability with Metrics, Logs, Events, Audit Logs, kube-state-metrics, OpenTelemetry, and Cluster Telemetry: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Observability with Metrics, Logs, Events, Audit Logs, kube-state-metrics, OpenTelemetry, and Cluster Telemetry: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Observability with Metrics, Logs, Events, Audit Logs, kube-state-metrics, OpenTelemetry, and Cluster Telemetry: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Observability with Metrics, Logs, Events, Audit Logs, kube-state-metrics, OpenTelemetry, and Cluster Telemetry: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Observability with Metrics, Logs, Events, Audit Logs, kube-state-metrics, OpenTelemetry, and Cluster TelemetryReserved in course structure

Planned

Chapter 42

Application and Cluster Troubleshooting: Debug Containers, DNS, Networking, Scheduling, Storage, and Control Plane

5 lessons

Application and Cluster Troubleshooting: Debug Containers, DNS, Networking, Scheduling, Storage, and Control Plane: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Application and Cluster Troubleshooting: Debug Containers, DNS, Networking, Scheduling, Storage, and Control Plane: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Application and Cluster Troubleshooting: Debug Containers, DNS, Networking, Scheduling, Storage, and Control Plane: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Application and Cluster Troubleshooting: Debug Containers, DNS, Networking, Scheduling, Storage, and Control Plane: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Application and Cluster Troubleshooting: Debug Containers, DNS, Networking, Scheduling, Storage, and Control PlaneReserved in course structure

Planned

Chapter 43

CustomResourceDefinitions, API Extension, Controllers, Operators, Reconciliation Loops, and Operator Patterns

5 lessons

CustomResourceDefinitions, API Extension, Controllers, Operators, Reconciliation Loops, and Operator Patterns: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

CustomResourceDefinitions, API Extension, Controllers, Operators, Reconciliation Loops, and Operator Patterns: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

CustomResourceDefinitions, API Extension, Controllers, Operators, Reconciliation Loops, and Operator Patterns: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

CustomResourceDefinitions, API Extension, Controllers, Operators, Reconciliation Loops, and Operator Patterns: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — CustomResourceDefinitions, API Extension, Controllers, Operators, Reconciliation Loops, and Operator PatternsReserved in course structure

Planned

Chapter 44

Multi-Tenancy, ResourceQuota, LimitRange, Namespace Boundaries, Fairness, and Shared-Cluster Governance

5 lessons

Multi-Tenancy, ResourceQuota, LimitRange, Namespace Boundaries, Fairness, and Shared-Cluster Governance: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Multi-Tenancy, ResourceQuota, LimitRange, Namespace Boundaries, Fairness, and Shared-Cluster Governance: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Multi-Tenancy, ResourceQuota, LimitRange, Namespace Boundaries, Fairness, and Shared-Cluster Governance: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Multi-Tenancy, ResourceQuota, LimitRange, Namespace Boundaries, Fairness, and Shared-Cluster Governance: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Multi-Tenancy, ResourceQuota, LimitRange, Namespace Boundaries, Fairness, and Shared-Cluster GovernanceReserved in course structure

Planned

Chapter 45

Scalability and Performance: API Throughput, etcd, Scheduler, Large Clusters, Watch Load, and Client Efficiency

5 lessons

Scalability and Performance: API Throughput, etcd, Scheduler, Large Clusters, Watch Load, and Client Efficiency: Concepts, Architecture, and Mental ModelReserved in course structure

Planned

Scalability and Performance: API Throughput, etcd, Scheduler, Large Clusters, Watch Load, and Client Efficiency: Guided Hands-On Workflow and Core OperationsReserved in course structure

Planned

Scalability and Performance: API Throughput, etcd, Scheduler, Large Clusters, Watch Load, and Client Efficiency: Configuration, Design Choices, and TradeoffsReserved in course structure

Planned

Scalability and Performance: API Throughput, etcd, Scheduler, Large Clusters, Watch Load, and Client Efficiency: Diagnostics, Failure Modes, Security, and PerformanceReserved in course structure

Planned

Checkpoint Lab — Scalability and Performance: API Throughput, etcd, Scheduler, Large Clusters, Watch Load, and Client EfficiencyReserved in course structure

Planned

Chapter 46

Production Capstone: Design, Secure, Deploy, Scale, Upgrade, Observe, and Recover a Kubernetes Platform

5 lessons

Production Capstone: Design, Secure, Deploy, Scale, Upgrade, Observe, and Recover a Kubernetes Platform: Requirements, Constraints, and Target ArchitectureReserved in course structure

Planned

Production Capstone: Design, Secure, Deploy, Scale, Upgrade, Observe, and Recover a Kubernetes Platform: Implementation and Automation Build-OutReserved in course structure

Planned

Production Capstone: Design, Secure, Deploy, Scale, Upgrade, Observe, and Recover a Kubernetes Platform: Security, Governance, and Reliability ValidationReserved in course structure

Planned

Production Capstone: Design, Secure, Deploy, Scale, Upgrade, Observe, and Recover a Kubernetes Platform: Failure Injection, Troubleshooting, and Recovery DrillReserved in course structure

Planned

Production Capstone: Design, Secure, Deploy, Scale, Upgrade, Observe, and Recover a Kubernetes Platform: Final Operational Review and HandoffReserved in course structure

Planned

Keep the academy open

Support free, practical DevOps education.

Every lesson is designed to remain readable in a browser, downloadable from GitHub, and usable without a paid learning platform. Contributions help expand and maintain the curriculum.

Ethereum / ERC-20

0x716c4Ab160C4B66F31a28AE2448BfF68fc3a2ef0Send only Ethereum/ERC-20 compatible assets to this address.

Kubernetes Complete Course

A comprehensive Kubernetes curriculum from first Pod to production cluster engineering.

You will be able to

46 chapters in prerequisite order.

Kubernetes Foundations, Declarative Infrastructure, Reconciliation, Desired State, and Cluster Mental Model

Local Kubernetes Labs with kind, minikube, k3d, and Cluster Context Safety

Control Plane and Node Architecture: API Server, etcd, Scheduler, Controllers, Kubelet, and Runtime

Kubernetes API Resources, Group/Version/Kind, Metadata, spec/status, Discovery, and API Conventions

kubectl Fundamentals, Contexts, Namespaces, Output Formats, Explain, Diff, Apply, Patch, and Debug

YAML Manifests, Declarative Apply, Server-Side Apply, Field Managers, Ownership, and Configuration Discipline

Namespaces, Labels, Selectors, Annotations, Finalizers, Owner References, and Resource Organization

Pods, Multi-Container Patterns, Init Containers, Sidecars, Lifecycle Hooks, and Pod Phases

Container Probes, Startup/Liveness/Readiness, Graceful Termination, Restart Behavior, and Application Health

Resource Requests and Limits, QoS Classes, OOM Behavior, CPU Throttling, HugePages, and Resource Sizing

ConfigMaps, Secrets, Environment Injection, Projected Volumes, Immutable Config, and Configuration Reloading

ReplicaSets and Deployments, Rolling Updates, Rollback, Revision History, and Deployment Strategies

StatefulSets, Stable Identity, Ordered Operations, Persistent Storage, and Stateful Application Patterns

DaemonSets, Node-Level Services, Update Strategies, Tolerations, and Infrastructure Agents

Jobs, CronJobs, Completion Modes, Backoff, Deadlines, Parallelism, and Reliable Batch Processing

Services: ClusterIP, NodePort, LoadBalancer, ExternalName, Endpoints, EndpointSlices, and Traffic Policies

Ingress, Gateway API, HTTP Routing, TLS Termination, Controllers, and North-South Traffic Architecture

Cluster DNS, CoreDNS, Service Discovery, DNS Policies, Search Domains, and DNS Troubleshooting

Kubernetes Network Model, CNI Architecture, Pod Networking, Service Proxies, kube-proxy, and Data Paths

NetworkPolicy, Namespace and Pod Selection, Default Deny, Egress Controls, and Network Segmentation

Volumes, PersistentVolumes, PersistentVolumeClaims, Access Modes, Reclaim Policies, and Data Lifecycle

StorageClasses, Dynamic Provisioning, CSI Drivers, Volume Expansion, Snapshots, Clones, and Topology

Scheduling Foundations, Node Selection, nodeSelector, Node Affinity, Pod Affinity, and Anti-Affinity

Taints, Tolerations, Topology Spread Constraints, Priority Classes, Preemption, and Placement Policy

Pod Disruption Budgets, Eviction API, Node Draining, Graceful Maintenance, and Availability Engineering

Horizontal Pod Autoscaling, Metrics APIs, Vertical Pod Autoscaling Concepts, and Workload Autoscaling Design

Cluster Autoscaling Concepts, Node Provisioning, Capacity Planning, Overprovisioning, and Elastic Clusters

ServiceAccounts, RBAC, Roles, ClusterRoles, Bindings, Impersonation, and Least-Privilege Authorization

Authentication, Client Certificates, OIDC, Bootstrap Tokens, API Access, and Identity Integration

Admission Control, Mutating and Validating Webhooks, ValidatingAdmissionPolicy, and Policy Enforcement

Pod Security Standards and Admission, Security Contexts, Capabilities, seccomp, AppArmor, and Non-Root Workloads

Secret Encryption at Rest, KMS Providers, etcd Protection, External Secret Systems, and Credential Rotation

Image Security, Registry Trust, Image Pull Secrets, Digests, SBOMs, Signatures, Provenance, and Admission Gates

Container Runtime Interface, containerd, RuntimeClasses, Sandboxed Runtimes, and Runtime Troubleshooting

Kubelet Architecture, Node Registration, Static Pods, Certificates, Eviction, Node Pressure, and Node Operations

etcd Architecture, Quorum, Persistence, Snapshots, Compaction, Defragmentation, and Disaster Recovery

API Server, Scheduler, Controller Manager, Cloud Controller Manager, and Control-Plane Configuration

Cluster Bootstrapping with kubeadm, PKI, Control-Plane HA, Worker Join, and Production Topology

Kubernetes Version Skew, Release Support, Upgrade Planning, kubeadm Upgrade, Node Rotation, and Rollback Strategy

Backup and Disaster Recovery: etcd, Persistent Data, Manifests, Cluster State, and Recovery Validation

Observability with Metrics, Logs, Events, Audit Logs, kube-state-metrics, OpenTelemetry, and Cluster Telemetry

Application and Cluster Troubleshooting: Debug Containers, DNS, Networking, Scheduling, Storage, and Control Plane

CustomResourceDefinitions, API Extension, Controllers, Operators, Reconciliation Loops, and Operator Patterns

Multi-Tenancy, ResourceQuota, LimitRange, Namespace Boundaries, Fairness, and Shared-Cluster Governance

Scalability and Performance: API Throughput, etcd, Scheduler, Large Clusters, Watch Load, and Client Efficiency

Production Capstone: Design, Secure, Deploy, Scale, Upgrade, Observe, and Recover a Kubernetes Platform

No lesson matches that search.

Support free, practical DevOps education.