Architecting with Google Kubernetes Engine

Completed “Google Cloud Fundamentals: Core Infrastructure” or have equivalent experience

What you'll learn

• Understand how software containers work.
• Understand the architecture of Kubernetes.
• Understand the architecture of Google Cloud.
• Understand how pod networking works in Google Kubernetes Engine.
• Create and manage Kubernetes Engine clusters using the Google Cloud Console and gcloud/kubectl commands.
• Launch, roll back, and expose jobs in Kubernetes.
• Manage access control using Kubernetes RBAC and IAM.
• Manage pod security policies and network policies.
• Use Secrets and ConfigMaps to isolate security credentials and configuration artifacts.
• Understand Google Cloud choices for managed storage services.
• Monitor applications running in Google Kubernetes Engine.

Module 1 Introduction to Google Cloud

Topics

• Use the Google Cloud Console
• Use Cloud Shell
• Define Cloud Computing
• Identify Google Cloud Compute Services
• Understand Regions and Zones
• Understand the Cloud Resource Hierarchy
• Administer your Google Cloud Resources

Objectives

• Identify Google Cloud services and their function.
• Choose the right Google Cloud services to create your own Cloud solution 1 lab and 1 quiz

Activities

• 1 lab and 1 quiz

Module 2 Containers and Kubernetes in Google Cloud

Topics

• Create a Container Using Cloud Build
• Store a Container in Container Registry
• Understand the Relationship Between Kubernetes and Google Kubernetes Engine (GKE)
• Understand how to Choose Among Google Cloud Compute Platforms

Objectives

• Create a Container using Cloud Build.
• Store a Container in Container Registry.
• Compare and Contrast Kubernetes and GKE features.

Activities

• 1 lab and 1 quiz

Module 3 Kubernetes Architecture

Topics

• Understand the Architecture of Kubernetes: Pods, Namespaces
• Understand the Control-plane Components of Kubernetes
• Create Container Images using Cloud Build
• Store Container Images in Container Registry
• Create a Kubernetes Engine Cluster

Objectives

• Conceptualize the Kubernetes Architecture.
• Deploy a Kubernetes Cluster using GKE.
• Deploy Pods to a GKE Cluster.
• View and Manage Kubernetes Objects.
• Conceptualize the Migrate for Anthos process

Activities

• 1 lab and 1 quiz

Module 04 Kubernetes Operations

Topics

• The Kubectl Command

Objectives

• Work with the Kubectl Command.
• Inspect the Cluster and Pods.
• View a Pod’s Console Output.
• Sign in to a Pod Interactively.

Activities

• 2 labs and 1 quiz

Module 05 Deployment, Jobs, and Scaling

Topics

• Deployments
• Ways to Create Deployments
• Services and Scaling
• Updating Deployments
• Rolling Updates
• Blue/Green Deployments
• Canary Deployments
• Managing Deployments
• Jobs and CronJobs
• Parallel Jobs
• CronJobs
• Cluster Scaling
• Downscaling
• Node Pools
• Controlling Pod Placement
• Affinity and Anti-Affinity
• Pod Placement Example
• Taints and Tolerations
• Getting Software into your Cluster

Objectives

• Create and Use Deployments.
• Create and Run Jobs and CronJobs.
• Scale Clusters Manually and Automatically.
• Configure Node and Pod Affinity.
• Get Software into your Cluster with Helm Charts and Kubernetes Marketplace.

Activities

• 3 labs and 1 quiz

Module 06 GKE Networking

Topics

• Introduction
• Pod Networking
• Services
• Finding Services
• Service Types and Load Balancers
• How Load Balancers Work
• Ingress Resource
• Container-Native Load Balancing
• Network Security

Objectives

• Create Services to expose applications that are running within Pods.
• Use load balancers to expose Services to external clients.
• Create Ingress resources for HTTP(S) load balancing.
• Leverage container-native load balancing to improve Pod load balancing.
• Define Kubernetes network policies to allow and block traffic to Pods.

Activities

• 2 labs and 1 quiz

Module 07 Persistent Data and Storage

Topics

• Volumes
• Volume Types
• The PersistentVolume Abstraction
• More on PersistentVolumes
• StatefulSets
• ConfigMaps
• Secrets

Objectives

• Use Secrets to isolate security credentials.
• Use ConfigMaps to isolate configuration
• Push out and roll back updates to Secrets and ConfigMaps.
• Configure Persistent Storage Volumes for Kubernetes Pods.
• Use StatefulSets to ensure that claims on persistent storage volumes persist across restarts.

Activities

• 2 labs and 1 quiz

Module 08 Access Control and Security in Kubernetes and Kubernetes Engine

Topics

• Understand Kubernetes Authentication and Authorization
• Define Kubernetes RBAC Roles and Role Bindings for Accessing Resources in Namespaces
• Define Kubernetes RBAC Cluster Roles and ClusterRole Bindings for
• Accessing Cluster-scoped Resources
• Define Kubernetes Pod Security Policies
• Understand the Structure of IAM
• Define IAM roles and Policies for Kubernetes Engine Cluster Administration

Objectives

• Define IAM roles and policies for GKE.
• Define Kubernetes RBAC roles and role bindings.
• Define Kubernetes pod security policies

Activities

• 2 labs and 1 quiz

Module 09 Logging and Monitoring

Topics

• Use Cloud Monitoring to monitor and manage availability and performance
• Locate and inspect Kubernetes logs
• Create probes for wellness checks on live applications

Objectives

• Create forensic logs for systems monitoring.
• Monitor your system performance from different vantage points.
• Create probes for wellness checks on live applications.

Activities

• 2 labs and 1 quiz

Module 10 Using Google Cloud Managed Storage Services from Kubernetes Applications

Topics

• Understand Pros and Cons for Using a Managed Storage Service Versus Self-managed Containerized Storage
• Enable Applications Running in GKE to Access Google Cloud Storage Services
• Understand Use Cases for Cloud Storage, Cloud SQL, Cloud Spanner, Cloud Bigtable, Cloud Firestore, and BigQuery from within a Kubernetes Application

Objectives

• Understand use cases for Cloud Storage within a Kubernetes application.
• Understand use cases for Cloud SQL and Cloud Spanner within a Kubernetes application.
• Understand use cases for Datastore within a Kubernetes application
• Understand use cases for Cloud Bigtable within a Kubernetes application.

Activities

• 1 lab and 1 quiz

Module 11 Logging and Monitoring

Topics

• CI/CD overview
• CI/CD for Google Kubernetes Engine
• CI/CD Examples
• Manage application code in a source repository that can trigger code changes to a continuous delivery pipeline.

Objectives

• Create a continuous delivery pipeline using Cloud Build and start it manually or automatically with a code change. Implement a canary deployment that hosts two versions of your application in production for release testing.

Activities

• 1 lab