Manage Scalable Workloads in GKE Enterprise
Discover how to modernize, manage, and observe applications at scale using Google Kubernetes Engine. This course uses lectures and hands-on labs to help you explore and deploy using Google Kubernetes Engine (GKE), GKE fleets, Cloud Service Mesh, and config controller capabilities that will enable you to work with modern applications, even when they are split among multiple clusters hosted by multiple providers.
- Duration: 3 days
- Languages: English, German
- Level: Advanced
- Group size: Up to 16
What you'll learn
- Describe the challenges of designing a multi-cluster infrastructure.
- Describe the components and architecture of GKE fleets.
- Identify and describe the core components of a GKE fleet.
- Create, connect, and manage GKE clusters from multiple deployment environments.
- Describe how fleets discover and communicate with each other in GKE.
- Detail the benefits of using Service Mesh.
- Use Service Mesh to implement advanced routing and traffic management.
- Secure traffic between microservices using Cloud Service Mesh.
- Create multi-cluster networking architectures with Cloud Service Mesh.
- Use authentication to effectively manage identity in GKE at scale.
- Evaluate and apply various security measures to effectively protect and manage GKE deployments.
- Evaluate options and Google Cloud products that allow you to create scalable CI/CD implementations within a multi-cluster GKE environment.
- Explore how GKE facilitates the deployment and optimization of AI models.
Prerequisites
- Having completed Google Cloud Platform Fundamentals: Core Infrastructure or having equivalent experience.
- Having completed Architecting with GKE or having equivalent experience.
Course outline
Introduction to GKE at scale
- Multi-cluster overview
- GKE fleets
- Sameness and trust
- GKE fleet management
Multi-cluster GKE architecture
- Centralized cluster management
- Multi-cluster GKE
- Connect and manage fleet clusters
- Access GKE fleet clusters
Fleets and teams
- GKE fleets
- Example fleet solutions
- Fleet team management
- Fleet management
Managing GKE configuration at scale
- Configuration management challenges
- Centralized configuration management at scale
- Config Sync
- Policy controller
- Config Connector
- Blueprints
Fleet networking
- Fleet networking communications
- Pod discovery in GKE
- Multi-cluster Services
- Configuring multi-cluster Services
- Multi-cluster gateway
- Configuring multi-cluster gateways
Cloud Service Mesh
- Introducing Cloud Service Mesh
- Provisioning Cloud Service Mesh
- Handling requests
- Monitoring and supporting Cloud Service Mesh
Cloud Service Mesh routing
- Configuring Cloud Service Mesh with Istio API resources
- Configuring VirtualService and DestinationRule
- Configuring ServiceEntry
- Configuring a Gateway
- Configuring a WorkloadEntry and WorkloadGroup
- Network resilience and testing
Service Mesh security
- Authentication and encryption
- Service authentication in the mesh
- End-user authentication in Cloud Service Mesh
- Authorization in Cloud Service Mesh
Multi-cluster networking with Cloud Service Mesh
- Single network east-west routing
- Multiple network east-west routing
Manage identity in GKE with authentication
- Introduction to GKE Identity Service
- Connect gateway overview
- Configuring connect gateway for authentication and authorization
- Accessing clusters with GKE Identity Service
- Authenticating third-party identities with GKE Identity Service
- Fleet Workload Identity
Security posture, compliance, and preventative controls
- GKE security posture overview
- Security posture dashboard
- Implementing node security
- Vulnerability scanning
- Additional security services
CI/CD at scale in GKE
- CI/CD in Google Cloud
- Cloud Build and GKE
- Cloud Deploy and GKE
- Cloud Deploy: Policies, deployments, and security
- Cloud Run and Knative serving
- Cloud Deploy and Knative serving
- CI/CD in a private network
- Software supply chain security
GKE and AI
- AI and GKE overview
- AI model training on GKE
- AI model serving on GKE
- AI cost management on GKE
Related courses
Application Development with Cloud Run
This course introduces you to the fundamentals, practices, capabilities and tools for modern cloud application development with Cloud Run. Through a combination of lectures, hands-on labs, and supplemental materials, you learn how to develop and deploy applications on Google Cloud by using Cloud Run. This version of the course consists of three separate courses that include topics on creating containers, developing applications with Cloud Run, and Cloud Run functions.
Architecting with Google Cloud: Design and Process
This course features a combination of lectures, design activities, and hands-on labs to show you how to use proven design patterns on Google Cloud to build highly reliable and efficient solutions and operate deployments that are highly available and cost-effective. This course was created for those who have already completed the Architecting with Google Compute Engine or Architecting with Google Kubernetes Engine course.
Architecting with Google Compute Engine
This course will familiarize you with Google Cloud's flexible infrastructure and platform services, with a specific focus on Compute Engine. This course uses a combination of lectures, demos, and hands-on labs to explore and deploy solution elements, including infrastructure components like networks, systems, and application services. You'll also learn how to deploy practical solutions such as hybrid networking, customer-supplied encryption keys, security and access management, quotas and billing, and resource monitoring.
Not sure which course fits?
Book a 30-minute call. We'll look at where your team is, what they need to be able to do, and put together either a specific course date or a tailored learning plan.