Final Exam: Advanced Kubernetes Skills

WHAT YOU WILL LEARN

• 

  Compare and contrast kubernetes networking with its legacy ancestors
  

  recall the basics of kubernetes networking, including ip address management
  

  explain kubernetes pods and how they work with traditional networking
  

  explain how logging is performed in kubernetes and how ip independence makes this challenging
  

  describe the container networking interface of cni and what it does and why it is important and the different types of cnis, including flannel, calico, canal and others
  

  describe some of the chief networking components of kubernetes networking
  

  demonstrate how to configure kubernetes iptables
  

  demonstrate how to configure kubernetes routing tables
  

  describe the features of kubernetes multus
  

  describe the features and benefits of kubernetes load balancing
  

  describe the 4c's of cloud native security and how cloud providers such as aws and azure implement this security
  

  describe some of the main security concerns and vulnerabilities faced when migrating to the cloud
  

  describe some of the vulnerabilities and concerns that can allow software code to be vulnerable to attacks
  

  explain how scalability and automation of kubernetes also increases the security risks
  

  discuss several security design patterns
• 

  describe common security issues and exploits when using kubernetes
  

  describe how security contexts are normally applied to pods in kubernetes
  

  describe the process for authentication and authorization for using the kubernetes api
  

  demonstrate how to restrict a container's access to resources with apparmor
  

  demonstrate how to configure a security context for a pod
  

  describe what are operators in kubernetes and the operator pattern
  

  discuss reasons why it is beneficial to extend kubernetes
  

  discuss the kubernetes object model and features such as controller objects, apis extensions, user types, resources and access extensions
  

  configure an http proxy server that can be used to access the kubernetes api
  

  describe several plugins and add-ons that can be used to extend the functionality of kubernetes
  

  describe kubernetes customization and extensions via the service catalog
  

  install kubectl plugins in kubernetes
  

  write and install kubectl plugins in kubernetes
  

  perform debugging on pods in kubernetes
  

  create and use customresourcedefinitions in kubernetes