This course covers the fundamentals of the OpenStack IAAS (Infrastructure As A Service) solution used for creating a private cloud. It starts with a general cloud primer and the main cloud types (IAAS – Infrastructure As A Service, PAAS – Platform As A Service, SAAS – Software As A Service) continuing with the origin, development and main features of OpenStack, its architecture and core building blocks. An important part of the training is the demonstration of the basic features and operation of an OpenStack system.
This 4 days long course teaches you the fundamentals and daily operation of the OpenStack open source IAAS (Infrastructure As A Service) cloud solution used for creating private clouds. After a short cloud and Openstack primer it presents the architecture of OpenStack and introduces its base components as well as their configuration and administration in details. Besides in-depth theoretical coverage students also do hands-on exercises with all studied OpenStack components in their own OpenStack lab system.
Kubernetes is the leading open-source system for automating deployment, scaling and management of containerized applications. This course introduces participants to the basic concepts and architecture of Kubernetes, its Initial install, setup and access control, Kubernetes Pods and Workloads, Scheduling and node management, Accessing the applications, Persistent storage in Kubernetes, its Logging, and finally Monitoring and Troubleshooting facilities. The course doesn’t only prepare delegates for the daily administration of Docker & Kubernetes systems but also for the official Certified Kubernetes Administrator (CKA) Certified Kubernetes Application Developer (CKAD) exams of the Cloud Native Computing Foundation (CNCF).
CEPH is an open-source distributed and fault tolerant storage system widely used in cloud environments like in Openstack. Participants of this training will learn about the main concept and architecture of Ceph, its installation and daily operation as well as using it in Openstack environments. Besides in-depth theoretical coverage students also do hands-on exercises in their own Openstack + CEPH lab system.
This 2-day long training introduces concepts, procedures, and best practices to harden Kubernetes based systems and container-based applications against security threats. It deals with 6 main areas of cloud-native security: Kubernetes cluster setup, Kubernetes cluster hardening, hardening the underlying operating system and networks, minimizing microservices vulnerabilities, supply chain security as well as monitoring, logging, and runtime security. This course does not only prepare delegates for the daily security administration of Kubernetes-based systems but also for the official Certified Kubernetes Security Specialist (CKS) exam of the Cloud Native Computing Foundation (CNCF).
Containerized applications are accessed over the network, but how are they connected to the network while staying isolated from each other? Participants of this training will learn about the different types of networking resources that facilitates the connectivity for containers, the Container Network Interface (CNI) as well as CNI plugins. Besides in-depth theoretical coverage students also do hands-on exercises in their own Kubernetes lab system. Modules: Network connectivity for containers Container network interface CNI plugins Services deep dive
As Kubernetes becomes the most widely used platform for deploying applications it becomes of paramount importance to know how to address problems that may occur in these systems. This course will present from the generic methodologies applicable in the troubleshooting to the domain specific instructions that will address the various aspects of Kubernetes and the deployed applications.
CEPH is an open-source distributed and fault tolerant storage system widely used in cloud environments. It can fulfill the storage needs of a Kubernetes environment. Rook is an open source storage manager that allows the integration of Ceph into Kubernetes and helps with the management of the storage cluster. Participants of this training will learn about the main concept and architecture of Ceph, its installation and daily operation as well as using it in Kubernetes environments. Besides in-depth theoretical coverage students also do hands-on exercises in their own Kubernetes + CEPH lab system.
Moving applications to the cloud brings new challenges for both developers and operators. Developers will use microservices to build their applications, while operators will need to manage large numbers of microservices deployments. Istio will reduce the complexity of such microservices by providing a service mesh that can transparently integrate into existing distributed applications and provides a way to securely connect and monitor microservices. In this workshop we will first discuss the architecture of Istio, then we will install it into an existing Kubernetes cluster. Once we have Istio in place, we will deploy a sample application and will have a look at some of the functionalities of Istio.