Kubernetes Networking deep dive and Troubleshooting

Course Description

Kubernetes is the de-facto system for container orchestration, e.g. automating the deployment, scaling and management of microservices-based, containerized applications. And as Kubernetes is becoming the most widely used platform for deploying applications, it is of paramount importance to know how to address problems that may occur in these systems.

This course will present from the generic methodologies applicable in the troubleshooting to the domain specific instructions that will address the various aspects of Kubernetes and the deployed applications.

This training builds on the knowledge gained by students on one of our Kubernetes administration trainings and teaches advanced topics about Kubernetes networking and troubleshooting practices for them.

The first part of the training deals with the different types of networking resources that facilitates the connectivity for containers, the Container Network Interface (CNI) as well as CNI plugins.

In the second part of this training participants learn about a wide range of IT troubleshooting concepts and technics starting with the generic methodologies applicable in troubleshooting to the domain specific instructions that will address the various aspects of Kubernetes clusters and applications deployed in them.

Besides in-depth theoretical coverage, students also do hands-on exercises in their own Kubernetes lab system throughout the training.

Training Objectives

At the end of the training participants:

• Understand how network resources are isolated for containers and how network namespaces are connected with veth pairs, Linux bridges, Open vSwitch and routing.
• Know the role of iptables and IPVS in container networking and understand the macvlan, ipvlan and SR-IOV connection options.
• Understand the Container Network Interface (CNI) specification and be familiar with the reference plugins as well as popular third party plugins such as Calico, Multus CNI, Whereabouts, sriov-cni and ovs-cni.
• Understand in depth how Kubernetes services are implemented with iptables and with IPVS and how dual stack services work.
• Apply a systematic fault analysis and diagnosis methodology and use the system, container and Kubernetes level diagnosis tools.
• Troubleshoot the Kubernetes control plane and worker node components, their configuration and logging, request processing, RBAC and node issues.
• Troubleshoot workload errors in Pods, Deployments and StatefulSets.
• Troubleshoot Kubernetes networking, including the network architecture, the CNI, services and network policies.
• Troubleshoot storage issues in Kubernetes, including the Container Storage Interface (CSI).

Target Audience

System administrators, developers and DevOps who participated on one of our Kubernetes administration trainings or have a Certified Kubernetes Administrator (CKA) certification and want to learn more about Kubernetes networking as well as general IT systems troubleshooting technics and their implementation at Kubernetes clusters.

Prerequisites

Linux container (e.g. Docker) and Kubernetes admin. skills, for instance by participating on our Docker and Kubernetes administration courses.