3 Domains before Kubernetes 3 Domains after
Skills · Kubernetes
Kubernetes
50 skills in 8 steps, from “Deliver an application on Kubernetes” to “Make an application cloud native on Kubernetes”.
Start · Deploy and observe an application on KubernetesAll skills
- 50 skills to acquire in this domain
- 8 steps in the order you learn them
- 0/50 acquired from your progress, in this browser
- 3 prerequisite domains to know before starting here
Your path
The domain's steps
In the order you learn them: each step builds on the previous one. Your status is computed in your browser, from what you have read and passed (quizzes, labs).
-
Deliver an application on Kubernetes
See the 8 skills
- Deploy and observe an application on Kubernetes
- Update an application and roll back
- Configure an application with ConfigMaps and Secrets
- Adapt manifests per environment with Kustomize
- Expose an application with a Service, Ingress or Gateway
- Isolate traffic between Pods with NetworkPolicies
- Configure kubectl access to your clusters: kubeconfig, contexts and default namespace
- Change Kubernetes resources declaratively without drifting from Git
-
Design Kubernetes workloads
See the 8 skills
- Compose a multi-container Pod: init, sidecar, shared volumes
- Run one-off and scheduled tasks (Job, CronJob)
- Make a workload reliable: health probes and resources
- Provide persistent storage to an application
- Deploy a stateful application (StatefulSet)
- Run an agent on every node (DaemonSet)
- Scale an application automatically
- Keep an application available during disruptions
-
Observe and troubleshoot a cluster
-
Understand, install and maintain a cluster
See the 10 skills
- Explain the architecture of a Kubernetes cluster
- Install a Kubernetes cluster
- Make the control plane of a kubeadm cluster highly available
- Control where Pods are placed
- Cap a namespace's resources
- Maintain and manage nodes without service interruption
- Back up and restore a cluster's state
- Detect and migrate deprecated APIs before an upgrade
- Upgrade a kubeadm cluster by one minor version
- Use custom resources and operators
-
Secure a Kubernetes cluster
See the 9 skills
- Harden a Pod's execution context (securityContext)
- Give a workload a minimal identity (ServiceAccount)
- Authorize access to the Kubernetes API with RBAC
- Make the cluster reject what breaks a security rule
- Confine a container against the host kernel (seccomp, AppArmor)
- Isolate a Pod in a sandboxed runtime (RuntimeClass)
- Harden a cluster's components with the CIS Benchmark
- Trace who acted on the API with the Kubernetes audit log
- Encrypt and authenticate traffic between Pods
-
Deploy applications with Helm
-
Design and distribute Helm charts
-
Make an application cloud native on Kubernetes
See the 5 skills
- Audit an application factor by factor (12-factor) on Kubernetes and fix its gaps
- Match a cluster's node count to pending Pods and shrink it without disrupting the service
- Serve an application with scale-to-zero on Knative and measure its cold start
- Enforce timeouts, retries and identity-based authorization between services with a mesh
- Assess a CNCF project before adopting it: maturity, governance and project health
No skill matches this filter.