Course
digicode: K8SD2O
Sovereign Cloud with Kubernetes
Course facts
Download as PDF- Evaluating the fundamentals of a sovereign cloud
- Mapping typical cloud services to Kubernetes
- Implementing IaaS, PaaS, SaaS, and FaaS services using cloud-native technologies
- Using Kubernetes as a common API for infrastructure and platform services
- Evaluating and strategically enhancing integrated Kubernetes platforms
- Identifying and reducing dependencies on proprietary cloud services and distributions
- Selecting suitable open-source and cloud-native projects (CNCF) for a cloud platform
Today, public cloud providers and integrated Kubernetes platforms conveniently provide many infrastructure and platform services. At the same time, this creates dependencies on individual providers’ APIs, operating models, and technologies.
Kubernetes, together with the Cloud Native Computing Foundation (CNCF), offers an open foundation for deliberately assembling these functions yourself. Instead of configuring infrastructure primarily via GUIs, the desired state is described in a versioned format and implemented automatically. Using declarative APIs, Custom Resource Definitions, and operators, infrastructure and platform services can be deployed and managed according to a unified model.
In this course, we will explore and implement, among other things:
- Infrastructure as a Service: virtual machines with KubeVirt
- Storage and Object Storage: persistent storage and S3-compatible object storage
- Database as a Service: CloudNativePG and Vitess
- Software as a Service and Identity: multi-tenant applications and Keycloak
- Functions as a Service: Knative and CloudEvents
- Networking: Services, Ingress, and Gateway API
- Security and Policies: cert-manager and Kyverno
- Container Registry: Harbor
- Observability: OpenTelemetry, Prometheus, Grafana, and Jaeger
- Infrastructure and Platform APIs: CRDs, Operator Patterns, and Crossplane
- Multi-Cluster and Cluster Lifecycle: Cluster API
The focus here is not on the individual product. What matters is the role a service plays within a cloud platform, which API is used, and how interchangeable its implementation remains.
Kubernetes thus becomes not only a runtime environment for containers, but also the control plane of a cloud platform.
Cloud Sovereignty
Technical sovereignty does not mean you have to develop or operate all components yourself. OpenShift, SUSE, or other integrated platforms can also be part of a sovereign architecture. The key is to understand which functions the platform handles for you and where dependencies arise.
You will therefore learn to assess:
- Where do workloads run, and where is data stored?
- Who controls identities, certificates, and keys?
- Which APIs and standards are used?
- Which platform functions are interchangeable?
- Can workloads and services be moved to a different distribution or infrastructure?
- Which functions should be operated in-house, and which are better obtained as managed services?
The course thus not only teaches you how to build a Kubernetes platform but also equips you with the ability to thoroughly evaluate off-the-shelf platforms, supplement them in a targeted manner, and consciously manage vendor dependencies.
The interactive course combines theory, demonstrations, and hands-on exercises.
Using a single, end-to-end example project, participants set up various services on a Kubernetes-based cloud platform and integrate them into a unified architecture. This process highlights which tasks Kubernetes handles on its own, which functions are provided by additional cloud-native components, and which of these are already preconfigured in integrated platforms.
This course is designed for cloud and platform engineers, DevOps engineers, system engineers, system administrators, software and solution architects, and infrastructure managers.
It is particularly well-suited for individuals who not only want to operate Kubernetes platforms but also want to understand and evaluate their architecture, dependencies, and alternatives.
A basic understanding of Kubernetes and container technologies is required. Participants should be familiar with resources such as pods, deployments, services, and persistent volumes, and have basic experience with kubectl.
The focus is on open standards, portable architectural concepts, and open-source technologies rather than on a specific Kubernetes distribution or a single cloud provider.
As a result, the knowledge gained can be applied to Kubernetes platforms built in-house as well as to OpenShift, SUSE, and other distributions, and in private, public, hybrid, and multi-cloud environments.