Kubernetes CKAD - Learn The Practical Way + Practice Exam

Demonstrate creating a pod with kubectl run using an nginx image, check status with kubectl get pods, and access the pod via curl.

Learn how to define and use labels in Kubernetes metadata to categorize pods by environment, such as prod, test, and dev, and how to filter pods using selectors.

Explore how replica sets in Kubernetes maintain the desired number of pod replicas for availability. Ensure failed pods are replaced with the same configuration to keep the replica count steady.

Learn how a replica set in Kubernetes uses templates and labels to ensure a desired number of pod replicas, with selectors matching front end pods and automatic pod replacement.

Understand how namespaces create a logical boundary to isolate dev, qa, and prod within one Kubernetes cluster, enabling resource quotas and role-based access control.

Use secrets to securely pass passwords as environment variables, keeping values encrypted and not visible. Create a secret with kubectl and reference it via secret key ref in the pod.

Explains temporary pods in Kubernetes, demonstrating how to create a temporary nginx pod with --rm and -it to test connectivity to another pod, a handy debugging and exam technique.

Explore hostpath volumes by attaching a node directory to a pod, mounting it at /cash, and understand persistence, ephemeral pods, and limitations with replicas across nodes.

Explore pv and pvc binding, storage class requirements, and why deleting a pvc frees a pv only after the claim ends, illustrated by 2 gb, 3 gb, and 4 gb examples.

Diagnose cluster IP service issues by inspecting endpoints, using kubectl describe and edit to fix target ports and selectors, and verify connectivity between port 80 and 8080.

Learn how NodePort service exposes cluster applications to outside clients by creating a NodePort on every node, using the NodePort IP and port to route to the target pods.

Deploy an app and expose it with a nodeport service, mapping 8080 to 80. Learn access via cluster IP, node IP, and why load balancer services suit internet exposure.

Explore how Kubernetes schedules pods to nodes using resource requests, node affinity and selectors, and tolerations to control placement across production, test, and dev environments.

Learn how taints and tolerations control pod scheduling by locking nodes 1 and 2 to database pods, while non-db pods go to nodes 3 and 4, using tolerations as keys.

Learn how to taint and tolerate nodes using kubectl taint and pod tolerations, including no schedule and no execute effects, with imperative demos on node zero one.

Master node affinity in Kubernetes to express scheduling constraints with match expressions and operators like in and not in, selecting master or worker nodes.

Explore deployment strategies in Kubernetes, including rolling updates and recreates, and learn how to configure replicas and output deployment YAML with kubectl.

learn how the recreate deployment strategy deletes all old replicas before creating new ones, ensuring no coexistence of versions, demonstrated with version 1.0 to 2.0 while observing rollout status.

Learn canary deployment, a gradual rollout in Kubernetes that tests a new version with a subset of users before full release, alongside blue-green strategies.

Learn to implement canary deployment in Kubernetes by running parallel v1 and v2 deployments, exposing them via a cluster IP service, and gradually scaling v2 for rollout.

Demonstrates blue-green deployment in Kubernetes by creating v1 and v2 deployments, testing internally, swapping the service to v2, and safely scaling down v1.

Explore security in Kubernetes from a developer’s view, covering pods, namespaces, and access control with service accounts, security context, roles, and network policy for protecting apps in dev and prod.

Discover what a service account is, its namespace scope, and how to create one and attach it to a pod so the pod inherits the account’s permissions.

Define a pod-level security context to run containers under a specific user and group, control file system permissions, and optionally make the root filesystem read-only.

Demonstrates creating a service account, attaching it to a role via a role binding, and verifying permissions with kubectl. Shows applying multiple rules across pods, services, and deployments.

Identify how to restrict access using role and role binding to specific resources, such as pods, with resource names and kubectl apply, showing test one and test two.

Master cluster role and cluster role binding to manage cluster-scoped resources, using YAML similarly to roles, and apply them to non-namespaced elements like secrets and persistent volumes.