Learn Kubernetes, Deployment Model, and Cloud Native Platform Engineering

Kaufman skill map untuk menguasai Kubernetes sebagai sistem deployment, operasi, reliability, security, dan platform engineering tingkat produksi.

Kubernetes Mental Model

23 min

Mental model Kubernetes sebagai desired-state reconciliation system: API object, spec/status, controller loop, eventual consistency, dan cara berpikir debugging production.

Cluster Architecture

26 min

Deep dive arsitektur cluster Kubernetes: control plane, worker node, API server, etcd, scheduler, controller manager, kubelet, runtime, networking, add-ons, failure domain, dan implikasinya terhadap deployment model production.

Kubernetes API, Resources, Objects, Metadata, and Versioning

22 min

Deep dive Kubernetes API resource object model: apiVersion, kind, metadata, spec, status, labels, annotations, ownerReferences, finalizers, subresources, versioning, server-side apply, dan API design invariant untuk platform engineering.

Pods and the Container Runtime Contract

Deep dive Pod sebagai unit eksekusi Kubernetes, container runtime contract, lifecycle, probes, sidecars, termination, debugging, dan failure modelling.

Labels, Selectors, Ownership, and Controller Relationships

Deep dive labels, selectors, annotations, ownerReferences, finalizers, garbage collection, controller ownership, dan object graph design di Kubernetes.

Scheduling, Placement, Affinity, Taints, and Topology

Deep dive Kubernetes scheduling, placement, affinity, taints, tolerations, topology spread, priority, preemption, eviction, dan failure modelling untuk workload production.

Workload Taxonomy: Deployment, StatefulSet, DaemonSet, Job, CronJob

Deep dive workload taxonomy Kubernetes: Deployment, ReplicaSet, StatefulSet, DaemonSet, Job, CronJob, bare Pod, dan decision framework untuk memilih controller yang benar.

Deployment Controller Deep Dive

Deep dive Deployment controller, ReplicaSet relationship, rollout lifecycle, rolling update math, status conditions, rollback, pause/resume, production failure modes, dan debugging.

Deployment Models: Rolling, Recreate, Blue-Green, Canary, Shadow, A/B

Deep dive release deployment models di Kubernetes: rolling, recreate, blue-green, canary, shadow, A/B, traffic switching, blast radius, rollback, dan decision framework production.

Progressive Delivery and Rollout Safety

20 min

Progressive delivery dan rollout safety di Kubernetes: canary automation, metric gates, traffic shifting, rollback policy, blast radius, dan failure modelling production.

Configuration, Secrets, and Runtime Environment Design

Kubernetes configuration dan secrets secara production-grade: ConfigMap, Secret, environment variables, mounted files, projected volumes, reload strategy, versioning, rotation, dan runtime configuration governance.

CPU, Memory, Requests, Limits, QoS, and Resource Governance

Deep dive into Kubernetes CPU, memory, requests, limits, QoS classes, eviction, overcommit, noisy-neighbor control, and production-grade resource governance.

Autoscaling: HPA, VPA, Cluster Autoscaler, and KEDA Patterns

Deep dive into Kubernetes autoscaling with HPA, VPA, node autoscaling, KEDA, metric selection, scaling lag, stability, SLO-aware scaling, and production failure modes.

Service Discovery and Kubernetes Networking Model

Deep dive into Kubernetes Service discovery, Services, EndpointSlices, DNS, kube-proxy, service types, traffic semantics, and production networking failure modes.

Ingress, Gateway API, and North-South Traffic

23 min

Deep dive into Kubernetes Ingress, Gateway API, north-south traffic, TLS termination, routing ownership, GatewayClass, Gateway, HTTPRoute, migration, and production traffic governance.

NetworkPolicy and Zero-Trust Cluster Networking

Deep dive into Kubernetes NetworkPolicy, zero-trust cluster networking, ingress and egress isolation, namespace boundaries, CNI enforcement, policy design, debugging, and governance.

Service Mesh: When Kubernetes Networking Is Not Enough

20 min

Deep dive into service mesh in Kubernetes, including when mesh is useful, sidecar and ambient models, mTLS, traffic policy, retries, circuit breaking, observability, Gateway API GAMMA, operational cost, and adoption strategy.

Kubernetes Storage Model: Volumes, PV, PVC, StorageClass, and CSI

Deep dive into Kubernetes storage model: volumes, PersistentVolumes, PersistentVolumeClaims, StorageClasses, CSI, snapshots, expansion, topology, failure modes, and production governance.

Stateful Workloads and Data-Aware Deployment Design

Deep dive into Kubernetes StatefulSet, stable identity, persistent storage, ordered deployment, quorum-aware operations, data-aware rollout, and stateful workload failure modelling.

Batch, Event-Driven, and Scheduled Workloads

17 min

Deep dive into Kubernetes batch, scheduled, and event-driven workload design using Job, CronJob, queue workers, idempotency, retry policy, failure semantics, and operational governance.

RBAC, ServiceAccounts, and Identity Boundaries

14 min

Deep dive into Kubernetes RBAC, ServiceAccounts, workload identity, authorization boundaries, least privilege design, privilege escalation risks, token handling, and enterprise access governance.

Pod Security, SecurityContext, and Runtime Hardening

16 min

Pod security, SecurityContext, runtime hardening, Pod Security Standards, seccomp, Linux capabilities, non-root execution, read-only filesystem, host namespace risk, and production hardening workflow.

Admission Control, Policy-as-Code, and Governance

16 min

Admission control, policy-as-code, validating admission policy, mutating admission policy, admission webhooks, Pod Security Admission, OPA Gatekeeper, Kyverno, governance rollout, exception handling, and failure modelling.

Supply Chain Security for Kubernetes Delivery

Supply chain security for Kubernetes delivery, image identity, digest pinning, SBOM, provenance, SLSA, signing, attestation, admission enforcement, vulnerability policy, CI/CD identity, registry trust, and deployment governance.

Observability Foundations: Logs, Metrics, Events, Traces

12 min

Observability foundations for Kubernetes, including metrics, logs, events, traces, audit records, resource metrics pipeline, kube-state-metrics, OpenTelemetry, Prometheus, dashboard design, alerting, correlation, and production signal strategy.

Production Debugging: Pods, Nodes, Network, DNS, Storage

20 min

Production debugging for Kubernetes systems, including a systematic triage method across Pods, Nodes, Services, DNS, networking, storage, resources, rollout state, events, logs, ephemeral containers, and incident evidence collection.

Reliability Engineering, SLOs, and Failure Modelling

Reliability engineering for Kubernetes platforms, including SLOs, SLIs, error budgets, availability thinking, probes, graceful shutdown, disruption budgets, rollout reliability, dependency failure, blast radius, resilience patterns, and failure modelling.

Kubernetes Upgrades, Version Skew, and Compatibility Management

Kubernetes upgrade engineering, version skew, API deprecation, compatibility management, control-plane upgrade sequencing, node upgrade strategy, add-on compatibility, preflight validation, rollback limits, and enterprise upgrade governance.

GitOps Delivery Model: Declarative Operations at Scale

22 min

GitOps delivery model for Kubernetes, including declarative desired state, source of truth, pull-based reconciliation, drift detection, promotion strategy, environment topology, secret handling, policy integration, rollback, multi-cluster delivery, and enterprise operating model.

Helm, Kustomize, and Kubernetes Package Management

Helm, Kustomize, and Kubernetes package management for production platforms, including chart design, values contracts, overlays, templating boundaries, GitOps integration, governance, testing, anti-patterns, and decision frameworks.

CRDs, Operators, and Platform APIs

15 min

CustomResourceDefinitions, custom controllers, operators, and platform APIs, including Kubernetes API extension design, spec/status contracts, reconciliation loops, finalizers, conditions, conversion, governance, testing, and operator anti-patterns.

Multi-Cluster, Multi-Tenant, and Enterprise Topologies

Multi-cluster, multi-tenant, and enterprise Kubernetes topology design, including tenancy isolation models, fleet governance, namespace architecture, cluster-per-boundary decisions, multi-region strategy, policy distribution, and operational failure modelling.

Platform Engineering and Internal Developer Platforms