Skip to content
Introduction
☸️ Kubernetes Advanced Course Study Archive

☸️ Kubernetes Advanced Course Study Archive

This archive is a dedicated space for studying and managing in-depth knowledge ranging from advanced Kubernetes (K8s) architecture and authentication and security mechanisms to Operator development and building real-world enterprise environments.

πŸ’‘ Learning Roadmap and Structure

For systematic learning, this archive is organized into 5 specialized areas. Choose a menu at the top, then open the related tab to start studying.

    graph TD
    A["1. Lab Environment Setup"] --> B["2. Basics & How It Works"]
    B --> C["3. In-depth Authentication & Security"]
    C --> D["4. Custom Resources & Operators"]
    D --> E["5. Hands-on Add-on Labs"]

    style A fill:#eef4ff,stroke:#326ce5,stroke-width:2px;
    style B fill:#eef4ff,stroke:#326ce5,stroke-width:2px;
    style C fill:#eef4ff,stroke:#326ce5,stroke-width:2px;
    style D fill:#eef4ff,stroke:#326ce5,stroke-width:2px;
    style E fill:#eef4ff,stroke:#326ce5,stroke-width:2px;

πŸ“‚ Core Topics and Details

πŸ› οΈ 1. Lab Environment Setup (Environment)

Covers the Kubernetes cluster installation environment and essential core add-on setup for stable, standardized hands-on labs.

πŸ“š 2. Basic Theory and Core Architecture (Basics)

  • How kubectl works: Analyzing the REST API call flow
  • Resource map & components: Interaction between the control plane and worker nodes
  • Stateless vs Stateful: How StatefulSet persistence works and the DNS role of a Headless Service
  • Package management: Resource packaging techniques with Helm

πŸ”’ 3. Authentication and Security (Security & IAM)

The central core part of the advanced Kubernetes course.

  • Security fundamentals: Symmetric/asymmetric keys, SSL/TLS handshake, chain of trust, and CA principles
  • K8s API authentication: client-cert, mTLS, webhook token authentication, OIDC integration
  • Certificate management in practice: Checking kubeadm certificate validity, renewing them, and a hands-on lab creating a custom user
  • Enterprise IAM: Single Sign-On (SSO) with Keycloak and Kubernetes integration

🧩 4. Operator Pattern Development (Operator & CRD)

  • CRD (Custom Resource Definition): Designing custom resource schemas
  • Controller pattern: Maintaining the desired state through the reconcile loop
  • Prometheus Operator: Automating an enterprise monitoring environment

πŸ§ͺ 5. Hands-on Add-on Labs (Labs)

Practice hands-on with the core add-ons essential to cluster operation, using YAML templates.

  • Metrics Server, Kubernetes Dashboard
  • MetalLB (LoadBalancer), Ingress-NGINX (L7 Gateway)
  • NFS Storage Provisioner
  • Krew and hands-on kubectl plugin development
πŸ“… Kubernetes Advanced Course Curriculum