[ONGOING] masterclass: Kubernetes Self healing, networking, HA large scale, Mesh, TLS ...
✅ 37 mins - Kubernetes Design Principles: Understand the Why - Saad Ali, Google
🔗 Link to YT: hereKubernetes is quickly becoming indispensable for managing and deploying workloads on distributed systems across both cloud and on-prem environments. While most people are now familiar with how to use Kubernetes, few are aware of the “why” behind it. Why does the Kubernetes API look the way it does? Why do Kubernetes components only interact with each other through the Kubernetes API? Why is there a PersistentVolumeClaim object when you could easily reference a volume directly from a pod? To answer these questions and help you develop a deeper understanding of Kubernetes, this talk exposes the principles underpinning the design of Kubernetes.
✅ About TLS and cert-manager
🔗 cert-manager – Past, Present and Future — Jake Sanders (cert-manager Maintainer) & Ashley Davis (Jetstack): 🎥 Watch here | 📄 Slides | 🧾 Summary
cert-manager is the Cloud Native way to manage X.509 certificates inside Kubernetes. It's often one of the first tools administrators install on a new cluster, reaching over 15 million image pulls per day! The project recently entered the CNCF incubation phase after two years in the sandbox. In this talk, two maintainers discuss why cert-manager matters, its evolution, and what’s next.
🔗 Cert-Manager Beyond Ingress – Exploring the Variety of Use Cases - Matthew Bates, Jetstack 🎥 Watch here | 📄 Slides | 🧾 Summary
Cert-manager is a widely used project for the automation of X.509 TLS certificates. In 2020, it reached 1.0 and landed in the CNCF Sandbox. cert-manager has been popularised by its support of ACME and Ingress, enabling many millions of certificates to be issued and renewed, and to help secure the cloud native web with Kubernetes and all the various ingress controllers. But cert-manager, with its custom resources and controllers, extensible with issuers including those out-of-tree, can also be used for a myriad of other use cases in which certificates are required. This talk will walk through the various use cases for cert-manager, including ingress, control plane and nodes (kubeadm, CAPI), webhooks, intra-service mTLS (cert-manager-csi) and service mesh (OpenServiceMesh, Istio).
🔗 Best Friends Keep No Secrets: Going Secretless with cert-manager - Ashley Davis & Tim Ramlot, Venafi 🎥 Watch here | 📄 Slides | 🧾 Summary
In today's complex Kubernetes environments, managing secrets securely is a challenge. Traditional methods often involve complex configurations with secret vaults, secret syncing and secret backups. Regardless of which fancy technology is used, secrets always come with a risk of being leaked. Most of the secrets used in traditional applications can be replaced by short-lived certificates. Applications can prove to be the owner of a certificate without sharing any secrets. In Kubernetes, cert-manager can be used to provision these certificates to all applications without sharing any secret information. Table of contents: - Do we actually need secrets? Comparing authentication methods: static secrets vs short-lived secrets and proof of ownership - H ow to issue certificates using cert-manager without using [S|s]ecrets - Compatibility and other challenges
🔗 title 🎥 Watch here | 📄 Slides | 🧾 Summary
blablabla...
✅ - 35 mins - Certifik8s: All You Need to Know About Certificates in Kubernetes [I] - Alexander Brand, Apprenda
🔗 Link to YT: hereCertificates are an integral part of a secure Kubernetes cluster deployment. They are mainly used to secure the Kubernetes API server using TLS, but certificates (and keys) are also used for other cluster functions such as client authentication, encryption of secrets, TLS bootstrapping, and the generation of service account tokens.
Certificates pose interesting challenges to cluster operators. What does the certificate setup look like in an ideal scenario? How long should certificates be valid for? When nearing expiration dates, how can certificates be rotated to ensure the cluster remains operational? These challenges must be understood when it comes to deploying and operating a Kubernetes cluster.
After this talk, you should have a better understanding of:
• How each cluster component uses certificates for secure communications
• How certificates can be used for authentication, including service account tokens
• How the Kubelet TLS bootstrapping process works
• How to plan, generate and deploy the certificates required for a secure cluster
• How to rotate certificates that are nearing their expiration date
About Alexander Brand Alex works on the Kismatic Enterprise Toolkit at Apprenda, making the deployment of production Kubernetes clusters easier. He has been involved with Kubernetes and related projects since early 2016. Before Apprenda, Alex attended Queen's University in Canada, where he majored in Biomedical Computing.
- (5y ago) LISA19 - Deep Dive into Kubernetes Internals for Builders and Operators
- (1y ago) Crossplane Intro and Deep Dive - the Cloud Native Control Plane Framework
Self Healing:
- (1y ago) The Magic of Kubernetes Self-Healing Capabilities - Saad Ali, Google
- (8y ago) Deploying Self Healing Services With Kubernetes w/ Rob Scott
- (1y ago) "Kubernetes self-healing: HA for services and control plane" - Lukasz Sztachanski i Lukasz Luczaj
Networking
- Understanding Kubernetes Networking in 30 Minutes - Ricardo Katz & James Strong- Life of a Packet [I] - Michael Rubin, Google
- Tutorial: Communication Is Key - Understanding Kubernetes Networking - Jeff Poole, Vivint Smart Home
- Surviving Day 2 - How to Troubleshoot Kubernetes Networking - Thomas Graf, Isovalent
- Kubernetes Networking Intro and Deep-Dive - Bowei Du & Tim Hockin, Google
- Understanding Kubernetes Networking. Part 1: Container Networking
✅ Tutorial: From CNI Zero to CNI Hero: A Kubernetes Networking Tutorial Using CNI
🔗 Link to YT: herematerial available here:
fork of demo
HA Large scale
- Highly Available Kubernetes Clusters - Best Practices - Meaghan Kjelland & Karan Goel, Google
- (1y ago) Building a Large Scale Multi-Cloud Multi-Region SaaS Platform with Kubernetes Controllers
- (1y ago) Architecting Resilience: Lessons from Managing 7K+ Kubernetes Clusters at Scale
Mesh: Istio and Cilium:
- (5y ago) Demystifying Service Mesh, HashiCorp
- (1y ago) Comparing Sidecar-Less Service Mesh from Cilium and Istio - Christian Posta, Solo.io
- (1y ago) Simplifying Multi-Cluster and Multi-Cloud Deployments with Cilium - Liz Rice, Isovalent
- (1y ago) Istio Ambient Service Mesh Made Simple - Lin Sun, Solo.io
- (1y ago) Best-Practices for Securing Egress Traffic with Istio - Niranjan Shankar, Microsoft
- (6mm ago) What Istio Got Wrong: Learnings from the Last Seven Years of Service Mesh - C. Posta, L. Ryan
- (1y ago) Reliable multi-cluster application architectures with Istio - Ameer Abbas & John Howard, Google
- (1y ago) What Istio Got Wrong: Learnings from the Last Seven Years of Service Mesh - C. Posta, L. Ryan
- (1y ago) Create resilient multi-cluster, multi-regional and multi-tenant architectures with Istio and K8s
04/26 -> Actual - 🟡 - Cyber Security super bundle
- 60 hours - 🟡 - Linux System Administration Essentials (LFS207)- 35 hours - 🟢 - Kubernetes Fundamentals (LFS258)
- 30 hours - 🛑 - Kubernetes Security Essentials (LFS260)
- 40 hours - 🛑 - Implementing DevSecOps (LFS262)
- 24 hours - 🛑 - Mastering Infrastructure Security: Strategies, Tools, and Practices (SKF200)
- 35 hours - 🛑 - Mastering Kubernetes Security with Kyverno (LFS255)
06/25 -> 03/26 - 🟢🎓 -
Advanced Cloud Engineer IT Professional Program (LFS002)
- 40 hours - 🟢 - Containers Fundamentals (LFS253)- 35 hours - 🟢 - Kubernetes Fundamentals (LFS258)
- 20 hours - 🟢 - Service Mesh Fundamentals (LFS243)
- 25 hours - 🟢 - Monitoring Systems and Services with Prometheus (LFS241)
- 30 hours - 🟢 - Managing Kubernetes Applications with Helm (LFS244)
- 30 hours - 🟢 - Cloud Native Logging with Fluentd and Fluent Bit (LFS242)
05/25 -> 06/25 - 🟢🎓 - Introduction to DevOps and Cloud Infrastructure Technologies
- 20 hours - 🟢 - Introduction to Jenkins (LFS167)- 20 hours - 🟢 - Introduction to kubernetes (LFS158)
- 50 hours - 🟢 - Introduction to Cloud Infrastructure Technologies (LFS151)
- 12 hours - 🟢 - Introduction to DevOps and Site Reliability Engineering (LFS162)
06/25 - 🟢 - Kubernetes troubleshooting: a step-by-step guide
- 2 hours - 🟢 - Link hereExplaination and analysis (with Devtron) of the following common errors, their possible root causes and how to fix them:
- CRASHLOOPBACKOFF
-- OOMKilled
-- CPU throttling
- ENV Variables/Secrets Mount Issue
- Database connection issues FROM The Linux Foundation
Courses and workshops on AI
06/25 - 🟢 - AI Cloud Explained: What It Is, Why It Matters, and How It Works
- 2 hours - 🟢 - Link hereExplored scalable AI workloads, model training, deployment, and real-time processing in cloud environments.
05/25 - 🟢 - Desarrolla una Aplicación Web con Inteligencia Artificial Usando Endpoints de API OpenAI
- 4 hours - 🟢 - Link hereBuilt a web application using AI API endpoints, focusing on practical OpenAI integration.
From: Nuclio Digital School
Courses and workshops on Agile management, Project management and foundraising
10/25 - 🟢 Designing in Italy for Global Citizenship
- 35 hours - 🟢 - more info hereCovered EU funding programmes and project management tools, including Next Generation EU, Cohesion Policy, Horizon Europe, PM², LFA, RACI, SWOT, stakeholder mapping and SMART indicators.
from: ProgEU: Progress in European Union
05/25 - 🟢 Agile management
- 16 hours - 🟢 - more info hereIntensive 4-week program designed to provide professionals and students with foundational and practical knowledge of Agile methodologies. Through a combination of recorded content, live sessions, and hands-on challenges, participants will gain tools to manage digital products and teams effectively in dynamic environments
from: Nuclio digital school
💬³ = On the bucket list, to start asap
💬² = DevOps with kubernetes starts in june
💬¹ = NodeJS ... Stopped to follow others
ECTS = European Credit Transfer and Accumulation System (ECTS)
Resume :
here
badges : here