Kubernetes Engineer: Free Skill Evaluation

Cloud-native architecture containers orchestration declarative systems deployment scaling service discovery self-healing image container registry layers Dockerfile multi-stage build networks volumes non-root containers minimal images immutable tags scanning KUBERNETES ARCHITECTURE Control Plane Nodes API SERVER cluster state consistency backup restore concepts SCHEDULER CONTROLLERS DECLARATIVE CONFIGURATION Desired state in versioned configuration KUBECTL YAML API groups versions resource types Pod lifecycle shared network shared volumes sidecar adapter ambassador concepts INIT CONTAINERS Pending Running Succeeded Failed RESTART POLICIES SIGTERM grace periods lifecycle hooks concepts replicas rollout revision rollback REPLICASETS maxUnavailable maxSurge ROLLBACK stable identities stable storage ordered deployment concepts logging agent monitoring agent node-level daemon JOBS CRONJOBS WORKLOAD PROJECT Deploy Stateless + Stateful Application Suite SERVICES ClusterIP NodePort LoadBalancer SERVICE DISCOVERY ENDPOINTS / ENDPOINTSLICES selector Pod readiness target port Endpoints KUBERNETES DNS INGRESS GatewayClass Gateway HTTPRoute TCPRoute INGRESS VS GATEWAY API Pod-to-Pod Pod-to-Service external-to-Service Calico Cilium cloud CNI NETWORK POLICIES Default Deny NETWORK SECURITY LAB CoreDNS namespace Service DNS configuration CONFIGMAPS Secret objects base64 is not encryption secret access control cloud secret stores external secret controllers concepts Vault awareness ENV VARS VS FILE MOUNTS CONFIG RELOAD STRATEGIES ephemeral persistent storage VOLUMES PERSISTENT VOLUMES PERSISTENT VOLUME CLAIMS STORAGECLASS CSI RWO ROX RWX RWOP concepts VOLUME SNAPSHOTS STORAGE HEALTH STORAGE LAB RESOURCE REQUESTS RESOURCE LIMITS CPU THROTTLING OOMKILLED Guaranteed Burstable BestEffort LIMITRANGE RESOURCEQUOTA node selectors node affinity Pod affinity anti-affinity TAINTS & TOLERATIONS TOPOLOGY SPREAD CONSTRAINTS PRIORITY CLASSES POD DISRUPTION BUDGETS AUTOSCALING FOUNDATION Pod scaling Node scaling Resource-right-sizing CPU memory custom metrics concepts METRICS API VERTICAL POD AUTOSCALER AWARENESS CLUSTER AUTOSCALING KARPENTER AWARENESS AUTOSCALING LAB HEALTH PROBES Startup Readiness Liveness PROBE DESIGN startup readiness termination SECURITY FOUNDATION certificates tokens cloud identity integration Role ClusterRole RoleBinding LEAST PRIVILEGE RBAC RBAC LAB SERVICE ACCOUNTS Privileged Baseline Restricted runAsNonRoot user/group read-only root filesystem LINUX CAPABILITIES SECCOMP ADMISSION CONTROL ValidatingAdmissionPolicy OPA/Gatekeeper concepts Kyverno awareness trusted registries signed image awareness vulnerability scanning source build artifact NetworkPolicy private clusters restricted endpoints SECRETS SECURITY AUDITING SECURITY PROJECT Harden a Multi-Tenant Kubernetes Cluster Chart values templates variables conditions loops dev staging production HELM DEPENDENCIES HELM UPGRADES HELM PROJECT base overlays patches HELM VS KUSTOMIZE metrics logs traces Pod health scraping targets labels PROMQL GRAFANA ALERTING KUBERNETES LOGGING LOKI / OPENSEARCH AWARENESS context propagation DISTRIBUTED TRACING OBSERVABILITY PROJECT Kubernetes Monitoring & Reliability Platform KUBERNETES TROUBLESHOOTING METHODOLOGY Symptom Scope application command configuration image name tag resources scheduling constraints PVC application memory limit leak FAILED PROBES selectors ports endpoints DNS FAILURE INGRESS / GATEWAY FAILURE STORAGE FAILURE kubelet disk network API server etcd controller KUBERNETES EVENTS EPHEMERAL DEBUG CONTAINERS TROUBLESHOOTING PROJECT kubeadm managed Kubernetes local clusters KUBEADM HIGH-AVAILABILITY CONTROL PLANE ETCD BACKUP ETCD RESTORE CERTIFICATES kube-apiserver kubectl CLUSTER UPGRADE API DEPRECATIONS CGROUPS V2 UPGRADE LAB MANAGED KUBERNETES Amazon EKS managed control plane worker nodes networking EKS VPC NETWORKING EKS ACCESS MANAGEMENT EKS NODE GROUPS EKS FARGATE AWARENESS EKS LOAD BALANCING EBS CSI EFS CSI concepts HPA cluster scaling Karpenter awareness IAM integration workload identity patterns private endpoint concepts EKS OBSERVABILITY EKS PROJECT Production Application Platform on Amazon EKS TERRAFORM FOR KUBERNETES ENGINEERS VPC EKS IAM TERRAFORM STATE TERRAFORM MODULES TERRAFORM + HELM INFRASTRUCTURE PROJECT Provision EKS Platform with Terraform GITOPS Application sync health AUTO-SYNC SELF-HEALING PRUNING PROJECTS APPLICATIONSETS ARGO CD SECURITY GITOPS PROJECT Git → Argo CD → Multi-Environment Kubernetes Platform Rolling Blue/Green Canary ARGO ROLLOUTS AWARENESS TRAFFIC SPLITTING service-to-service identity traffic control telemetry WHEN NOT TO USE SERVICE MESH namespaces RBAC quotas HARD MULTI-TENANCY AWARENESS failure isolation geography environment separation FLEET MANAGEMENT AWARENESS CLUSTER LIFECYCLE PLATFORM ENGINEERING service template Helm chart CI pipeline create service deploy service provision database BACKSTAGE AWARENESS CUSTOM RESOURCE DEFINITIONS OPERATORS OPERATOR PATTERN BUILDING A SIMPLE CONTROLLER AWARENESS SLI SLO SLA PLATFORM SLO Deployment Success Rate Kubernetes API availability Pods requests vs actual usage idle nodes autoscaling team workload INCIDENT MANAGEMENT timeline root cause contributing factors Pod CrashLoop node NotReady failed rollout application configuration persistent data VELERO AWARENESS cluster loss node loss Region loss contain revoke inspect access log summarization YAML explanation troubleshooting hypotheses AI SAFETY