Kubernetes — Fundamentals

From manifests to production-grade application exposure. Program aligned with the 5 domains of the official CKAD (Certified Kubernetes Application Developer) curriculum maintained by the CNCF.

Duration

3 days

Level

Beginner to intermediate

Format

Inter / Intra

Inter-company price

From €1,750

Students

10 max

Book a session Request a private session

Learning objectives

What you'll be able to do after the training.

🎯

Design & deploy

Build OCI images, define YAML manifests and ship multi-tier apps independently.

🛡

Configure & secure

Master ConfigMaps, Secrets, SecurityContexts, ServiceAccounts and resource limits per CKAD best practices.

🚀

Observe & expose

Tool probes, logs, metrics; expose apps via Services + Ingress and write basic NetworkPolicies.

Target audience

Who it's for, what's required.

👥 Audience

Developers shipping code to a K8s cluster
Lead Tech preparing the CKAD certification
DevOps engineers wanting to master the application-side runtime
Architects scoping a Kubernetes target

📋 Prerequisites

Linux and command-line basics
Container model basics (Docker or any OCI runtime)
General networking notions (HTTP, DNS, ports)
A laptop for the labs

Detailed program

Syllabus, day by day.

Application Design & Build · Application Deployment

Day 1 — Design and deploy your apps

Cluster architecture, control plane, kubelet, kubectl
Pods, ReplicaSets, Deployments, Jobs, CronJobs
Multi-container Pods: sidecar, init, ambassador
Persistent vs ephemeral volumes, Volume Claims
Deployment strategies: rolling, recreate, blue/green, canary
Helm & Kustomize: packaging and templating

LabDeploy a multi-tier app (front + API + DB) with Deployment, services, and a zero-downtime update strategy.

Configuration, Security · Observability & Maintenance

Day 2 — Configure, secure, observe

ConfigMaps, Secrets: creation, mounting, env
SecurityContext, ServiceAccount, RBAC (app-side view)
Resource requests, limits, ResourceQuota, LimitRange
Probes: readiness, liveness, startup
Logs, events, kubectl debug, ephemeral containers
Custom Resource Definitions (CRD) — overview

LabHarden a sensitive app: externalized Secrets, non-root context, namespace quotas, debug a CrashLoopBackOff pod.

Services & Networking

Day 3 — Expose and orchestrate

Services: ClusterIP, NodePort, LoadBalancer, ExternalName
Ingress controllers, IngressClass, automated TLS (cert-manager)
Basic NetworkPolicies: namespace and label-based isolation
Internal DNS (CoreDNS), service.namespace.svc resolution
CKAD certification prep: tips and exam workflow

LabExpose the app via Ingress with TLS, isolate the namespace via NetworkPolicy, package the whole as a Helm chart.