Architecting with Google Kubernetes Engine
Learn how to deploy and manage containerized applications on Google Kubernetes Engine (GKE). Learn how to use other tools on Google Cloud that interact with GKE deployments. This course features a combination of lectures, demos, and hands-on labs to help you explore and deploy solution elements-including infrastructure components like pods, containers, deployments, and services-along with networks and application services. You'll also learn how to deploy practical solutions, including security and access management, resource management, and resource monitoring.
- Duration: 2 days
- Languages: English
- Level: Intermediate
- Group size: Up to 16
What you'll learn
- Create and manage workloads in Google Kubernetes Engine.
- Explain how pod networking works in Google Kubernetes Engine.
- Define and work with different Kubernetes storage abstractions.
- Describe and manage authentication, authorization, and security n Google Kubernetes Engine.
- Monitor applications running in Google Kubernetes Engine.
- Explore Google Cloud managed storage services options. Configure CI/CD pipelines for Google Kubernetes Engine.
Prerequisites
- Completed “Getting Started with Google Kubernetes Engine” or have equivalent experience
Course outline
Course Introduction
- Course introduction
Workloads: Deployments and Jobs
- Creating deployments.
- Inspecting deployments.
- Updating deployments.
- Adopting other deployment strategies.
- Using Jobs and Cronjobs
- Cluster scaling.
- Controlling Pod placement with labels and affinity rules.
- Controlling Pod placement with taints and tolerations.
- Getting software into your cluster.
Google Kubernetes Engine Networking
- Pod networking
- Kubernetes Services
- Service type and load balancers
- Ingress
- Container-native load balancing
- Network policies
Persistent Data and Storage
- Volumes
- Ephemeral volumes
- Durable volumes
- Statefulsets
- Configmaps
- Secrets
Access Control and Security in Kubernetes and Google Kubernetes Engine
- Explore Kubernetes authentication and authorization.
- Define Kubernetes RBAC and how it works with IAM to secure GKE clusters.
- Configure Workload Identity to access Google Cloud services from within GKE.
- Secure GKE with Pod Security Standards and Pod Security Admission.
- Implement Role-Based Access Control with GKE.
Google Kubernetes Engine Logging and Monitoring
- Cloud Observability
- Cloud Logging
- Cloud Monitoring
- Inspecting logs with the kubectl command
- Inspecting logs with Cloud Logging and logging agents
Using Google Cloud Managed Storage Services with Google Kubernetes Engine
- Using Google Cloud services.
- Using Cloud Storage.
- Using Google Cloud databases
- Using Cloud SQL and SQL Auth Proxy.
- Comparing storage options.
Using CI/CD with Google Kubernetes Engine
- What is CI/CD?
- CI/CD pipeline construction
- CI/CD tools available in Google Cloud
- Best practices for using CI/CD on Google Cloud
Course Summary
- Course Summary
Related courses
Architecting with Google Cloud: Design and Process
This course features a combination of lectures, design activities, and hands-on labs to show you how to use proven design patterns on Google Cloud to build highly reliable and efficient solutions and operate deployments that are highly available and cost-effective. This course was created for those who have already completed the Architecting with Google Compute Engine or Architecting with Google Kubernetes Engine course.
Architecting with Google Compute Engine
This course will familiarize you with Google Cloud's flexible infrastructure and platform services, with a specific focus on Compute Engine. This course uses a combination of lectures, demos, and hands-on labs to explore and deploy solution elements, including infrastructure components like networks, systems, and application services. You'll also learn how to deploy practical solutions such as hybrid networking, customer-supplied encryption keys, security and access management, quotas and billing, and resource monitoring.
Essentials of Monitoring Critical Systems
This course provides an overview of Google Cloud Monitoring. Participants will learn to monitor across multiple projects, build insightful dashboards, and create uptime checks for resource availability. They will explore querying with Prometheus Query Language (PromQL) for advanced analysis and learn how to enhance observability using the AI-powered capabilities of Google Cloud Gemini.
Not sure which course fits?
Book a 30-minute call. We'll look at where your team is, what they need to be able to do, and put together either a specific course date or a tailored learning plan.