Course : Containers: Challenges, Uses, and Solutions

Containers: Challenges, Uses, and Solutions

4,2 / 5

A current look at container orchestration solutions and their ecosystem in order to implement a CaaS (Container as a Service) platform. It addresses the operation, installation, and use of containers in an organization and provides tips for how to use them.

Inter

In-house

Custom

Seminar in person or remote class

Ref. CCB

Price : 2890 CHF E.T.

3d - 21h00

Dates and Registration

Teaching objectives

At the end of the training, the participant will be able to:

Detail the various aspects of containerization technology and its ecosystem
See how Kubernetes works, and its internal and external components
Understand interactions with the private/public cloud and legacy system
Know the benefits and limits of micro-service architectures in both technical and organizational terms.

Intended audience

Architects, IT infrastructure managers, project managers, system and/or network administrators, and developers.

Prerequisites

No particular knowledge.

Course schedule

Fundamentals

Application in 12 factors, integration, continuous deployment (CI/CD), Cloud-native applications.
SaaS, PaaS, IaaS, object and block storage. Private, public, hybrid cloud: Problem of lock-in.
Elastic architecture, Cattle versus Pet, Infrastructure as Code.
Existing tools (Terraform, Ansible). Bebefit of containers versus Virtual Machines.
CaaS in an enterprise: interoperability, Devops organization, digital transformation.
Bimodal IT and DevOps.

Demonstration

Cloud IaaS: Digital Ocean, MS-Azure.

Docker

Basic concepts: Immutability, image, layers, registry, network and storage issues.
Automation with Dockerfile/docker-compose, integration with Github, Jenkins, DockerHub.
Expected benefits: Reproducibility, manageability.
Benefits in terms of elasticity, agility, upgradability.
Impacts on development and infrastructure teams.

Demonstration

Building, modifying, and publishing Docker images.

Kubernetes, container orchestrator.

Master/Workers nodes, concepts of Pods, service, different types of Ingress Controller.
Storage: stateful, stateless, shared (NFS, GlusterFS, CEPH, rook).
Configuration management. Using Jobs and DaemonSets.
Internal component (etcd, kubelet, kube-dns, kube-proxy, apiserver), complementary (Helm/Tiller, envoy, side-car proxy).
Service Discovery/Mesh (Istio), calico, cilium.

Demonstration

Building a cluster and deploying a complete stack (including Wordpress).

Container as a Service (CaaS)

Standardization: OCI, CNCF, CNI, CSI, CRI.
Cloud/Managed solutions: Amazon AWS ECS and EKS and Fargate, Google GCP, Microsoft Azure, DigitalOcean.
Most common On-Premises solutions: Docker DataCenter, Rancher, RedHat OpenShift.
Evolution to Serverless.

Security of CaaS/Kubernetes/Docker

Infrastructure security: partitioning, RBAC, vault/secret, logs.
Securing containers (runtime): Seccomp, SElinux, Apparmor, Linux Capabilities, PodSecurityPolicies.
Securing the Supply Chain: registry, notary, compliance check

Demonstration

Specific attacks, L3/L4/L7 micro-segmentation. Scanning an image’s vulnerabilities, container hardening, exporting real-time logs in Splunk.

Customer reviews

4,2 / 5

Customer reviews are based on end-of-course evaluations. The score is calculated from all evaluations within the past year. Only reviews with a textual comment are displayed.

Dates and locations

Select your location or opt for the remote class then choose your date.

Remote class