Architecture & Fundamentals
- Kubernetes architecture: Control plane (API server, etcd, scheduler, controller manager), worker nodes, kubelet
- Core objects: Pods, ReplicaSets, Deployments, Namespaces — how they fit together
- Services: ClusterIP, NodePort, LoadBalancer — internal and external traffic routing
- Configuration: ConfigMaps and Secrets — clean separation, secure usage
- kubectl in practice: get, describe, apply, exec, logs, port-forward — the daily toolkit
- First end-to-end deployment: from zero to a running application in the cluster
Workloads, Networking & Storage
- Workload types: StatefulSets for stateful apps, DaemonSets, Jobs & CronJobs
- Health probes: Liveness, readiness, startup — configured correctly, not guessed
- Ingress: nginx Ingress Controller, TLS termination, path routing, virtual hosts
- Network Policies: Default-deny baseline, targeted namespace-to-namespace traffic rules
- Resources: Requests & limits, LimitRange, ResourceQuota — fair cluster sharing
- Storage: PersistentVolumes, PVCs, StorageClasses, dynamic provisioning
Security, Operations & OpenShift
- RBAC: ServiceAccounts, Roles, ClusterRoles, RoleBindings — least privilege as the default
- Pod security: SecurityContext, PodSecurityAdmission, non-root containers
- Scaling: Horizontal Pod Autoscaler (HPA), Vertical Pod Autoscaler, Cluster Autoscaler
- Helm: Deploying charts, authoring your own, Helmfile for multi-environment management
- Troubleshooting: Systematic diagnosis — CrashLoopBackOff, Pending, OOMKilled, ImagePullBackOff
- OpenShift delta: Routes, Security Context Constraints (SCC), oc CLI, OperatorHub, OpenShift Console
After three focused days, participants leave with real hands-on competence — not a certificate and a vague memory of slides. Concretely:
- Deploy, configure, and scale containerized applications independently — no tab-switching to Google for every second step
- Debug the cluster systematically and narrow down failures before they become critical
- Set up RBAC and network policies so that security is built in from day one, not bolted on later
- Write Helm charts for your own services and make deployments fully reproducible
- Understand where OpenShift adds value on top of Kubernetes and apply it deliberately
The training is hands-on from day one. No slide marathons, no theory without context. Participants can bring their own cluster — or we work in a provided sandbox environment.
Book the Kubernetes training
A short conversation about your team, your current setup, and your goal — then a concrete proposal. No long discovery process, no empty discovery calls.
Get in touch