
Learn Kubernetes best practices by provisioning clusters with Terraform, configuring CI/CD, updating and upgrading the cluster, and securing TLS certificates, ingress, monitoring, logging, and secrets with operators.
Explore kubenet as the default network mode in azure kubernetes service, where nodes borrow subnet ips while pods receive a pod cidr, with nat routing and limited route table entries.
Explore how Azure CNI overlay mode solves IP exhaustion by assigning each node a unique pod CIDR, isolating pod IPs from the subnet and avoiding extra route hops.
Compare Kubernetes with Azure CNI overlay, highlighting up to 1000 nodes per cluster, no per-node route-table limits, and simplified pod networking.
Learn how to connect to KAS worker node using SSH for troubleshooting or maintenance tasks.
Learn how to schedule Kubernetes Node restarts/reboot using Kured.
https://github.com/weaveworks/kured
Learn how to secure sensitive data like passwords in AKS.
This demo will help you to securely retrieve your encrypted passwords from Azure Key Vault.
Learn how to create Security Policies for Kubernetes using OPA Gatekeeper.
Install and configure Prometheus and Grafana operators in Kubernetes using the operator lifecycle manager and Kube Prometheus. Explore CRDs, dashboards, and pre-configured monitoring components.
Explore deploying a Kubernetes logging stack using fluentd, fluent bit, Elasticsearch, and Kibana with operators. Learn to install the logging and Elasticsearch operators and access Kibana for logs.
Create a pod reader role and a role binding in a namespace, assign them to users and groups, and verify access with kubectl can-i for authorized and unauthorized users.
Explore passwordless identities in a Kubernetes workflow by linking a service account to an Azure managed identity, granting access to Key Vault secrets via workload identity.
[This course is still in progress. More content will be added in the coming days]
This course will walk you through the different best practices to be successful with Kubernetes operations. It will guide you through the day 1 and day 2 operations on Kubernetes.
Plan:
Introduction
Kubernetes Cluster Scalability
Manual Pod Scalability
Horizontal Pod Autoscaler (HPA)
Manual Cluster Nodes Scalability
Cluster Autoscaler
Azure Virtual Node
Kubernetes DevOps (Github Actions, Azure DevOps)
Kubernetes Security (Azure Security Center, Pod Identity, Aqua, Kubesec)
Kubernetes Operators
Kubernetes Operations (Kured, Cluster Auditing, Uptime SLA)
Most of the content and best practices are applicable for any Kubernetes cluster. And Azure Kubernetes Service (AKS) is used for the practices that depends on the cluster implementation.