Model Online / On-Site
Duration
Modules 5 modules

Course Objective & Scope

Managed Kubernetes services simplify control plane setup, yet cloud IAM integration, IP address planning, node provisioning and version upgrades still demand careful architectural choices. This programme teaches how to design and operate production-grade clusters tailored to the organisation's cloud provider (Amazon EKS, Azure AKS or Google GKE).

Private cluster topologies, pod-level cloud identity (IRSA/Pod Identity, Azure Workload Identity, GKE Workload Identity), CNI and load balancer integration, fast node provisioning with Karpenter/NAP and zero-downtime version upgrades are practised hands-on. Participants leave with a managed Kubernetes architecture checklist customized for their environment.

Who Should Attend?

  • Cloud, DevOps and platform engineers building and operating Kubernetes in the cloud
  • Solution architects designing multi-cloud or hybrid container platforms
  • Infrastructure teams migrating workloads to EKS, AKS or GKE
  • Prerequisite: basic Kubernetes and familiarity with at least one major cloud provider

Key Takeaways

  • Explain the architectural differences, node pool options and shared responsibility models of EKS, AKS and GKE
  • Grant cloud service permissions to Pods without static keys using Workload Identity
  • Configure VPC/VNet IP planning, CNI plugins and native cloud Load Balancer/Ingress integration
  • Balance spot and on-demand capacity with Karpenter or Cluster Autoscaler
  • Execute zero-downtime cluster upgrades, centralise telemetry and apply FinOps cost controls

Curriculum

Managed Kubernetes Architecture and Cluster Design
  • EKS, AKS and GKE (Standard/Autopilot) control planes and SLA models
  • Managed node groups, Fargate/Serverless pods and private API endpoints
Authentication, RBAC and Workload Identity
  • Cluster access via AWS IAM, Entra ID and Google IAM
  • Keyless cloud service access with Pod Identity, IRSA and Workload Identity
  • Key Vault / Secrets Manager and the External Secrets Operator
Cloud Networking and Storage Integration
  • VPC CNI, Azure CNI Overlay, GKE Dataplane V2 (Cilium) and avoiding IP exhaustion
  • ALB/NLB, Azure App Gateway and GKE Gateway Controller
  • EBS/EFS, Azure Disk/Files and Persistent Disk CSI drivers
Autoscaling and FinOps Cost Optimisation
  • Cluster Autoscaler and Karpenter / AKS Node Autoprovisioning
  • Spot/Preemptible nodes, PDBs and unit cost visibility with Kubecost/OpenCost
Lifecycle, Upgrades and Production Operations
  • Control plane and node pool version upgrades (in-place versus blue/green)
  • Add-on lifecycle management, audit logs and production readiness checklist

Other Courses in This Category

  • Kubernetes Security and Cluster Troubleshooting

    Security controls and deep troubleshooting in production Kubernetes clusters: validating RBAC, Pod Security Standards and NetworkPolicies; diagnosing CrashLoopBackOff, OOMKilled, DNS/CNI networking, CSI storage and node failures.

    Docker & Kubernetes Corporate
    Live Course
    5 modules
    View
  • Container and Kubernetes Security: Hardening, Policy and Runtime Defence

    End-to-end container and Kubernetes security across the 4Cs: image scanning (Trivy), SBOMs and Cosign signing, Linux isolation (seccomp, AppArmor), CIS Benchmark hardening, Kyverno/OPA Gatekeeper and runtime detection with Falco/Tetragon.

    Docker & Kubernetes Corporate
    Live Course
    5 modules
    View
  • Docker: Containerisation and Multi-Container Application Delivery

    Docker for application containerisation: container lifecycle, multi-stage Dockerfile authoring, image slimming and security, volumes and networking, multi-service environments with Docker Compose and CI/CD integration.

    Docker & Kubernetes Corporate
    Live Course
    5 modules
    View
  • Kubernetes: Container Orchestration, Deployment and Operations

    Container orchestration with Kubernetes: Pods, Deployments, StatefulSets, Services and Ingress/Gateway API, ConfigMaps and Secrets, PVC storage, autoscaling with HPA, resource management and production cluster operations.

    Docker & Kubernetes Corporate
    Live Course
    5 modules
    View
  • Helm: Packaging, Templating and Managing Kubernetes Applications

    Packaging and release management on Kubernetes with Helm: chart structure, Go templates and Sprig functions, per-environment values files, dependencies, OCI registry distribution, hooks and chart testing.

    Docker & Kubernetes Corporate
    Live Course
    5 modules
    View

Get in touch