CKA Curriculum v1.14.1 読む

CKA の勉強のために カリキュラム を確認する。ついでに該当しそうな doc を記録する。

Scheduling (5%)

• Use label selectors to schedule Pods.
  • Labels and Selectors
    • Jobs - Run to Completion
    • Deployments
    • ReplicaSet
    • DaemonSet
• Understand the role of DaemonSets.
  • DaemonSet
• Understand how resource limits can affect Pod scheduling.
  • Managing Compute Resources for Containers
    • Configure Default Memory Requests and Limits for a Namespace, etc.
• Understand how to run multiple schedulers and how to configure Pods to use them.
  • Configure Multiple Schedulers
• Manually schedule a pod without a scheduler.
  • 
  • Assigning Pods to Nodes
  • Create static Pods
  • Taints and Tolerations
• Display scheduler events.
  • 
  • Application Introspection and Debugging
• Know how to configure the Kubernetes scheduler.
  • 
  • Kubernetes Scheduler
  • kube-scheduler
  • Scheduler Performance Tuning

v1.15 との差分なし

Logging/Monitoring (5%)

• Understand how to monitor all cluster components.
  • Tools for Monitoring Resources
  • Resource metrics pipeline
  • Monitor Node Health
• Understand how to monitor applications.
  • Application Introspection and Debugging
  • Debug a StatefulSet, etc.
  • kubectl Cheat Sheet
• Manage cluster component logs.
  • Troubleshoot Clusters
  • Auditing
  • Logging Architecture
• Manage application logs.
  • Troubleshoot Applications

v1.15 との差分なし

Application Lifecycle Management (8%)

• Understand Developments and how to perform rolling updates and rollbacks.
  • Deployments
• Know various ways to configure applications.
  • 
  • Configure a Pod to Use a ConfigMap, etc.
  • Secrets
• Know how to scale applications.
  • Deployments
  • Horizontal Pod Autoscaler
  • Scale a StatefulSet
• Understand the primitives necessary to create a self-healing application. ¹
  • 
  • ReplicationController
  • Configure Liveness, Readiness and Startup Probes

v1.15 との差分なし

Cluster (11%)

• Understand Kubernetes cluster upgrade process.
  • Upgrading kubeadm clusters
  • Cluster Management
• Facilitate operating system upgrades.
  • 
  • Cluster Management
• Implement backup and restore methodologies.
  • Operating etcd clusters for Kubernetes

v1.15 との差分なし

Security (12%)

• Know how to configure authentication and authorization.
  • Controlling Access to the Kubernetes API, etc.
• Understand Kubernetes security primitives.
  • Controlling Access to the Kubernetes API, etc.
• Know to configure network policies.
  • Network Policies
  • Declare Network Policy
  • Use Calico for NetworkPolicy, etc.
• Create and manage TLS certificates for cluster components.
  • Manage TLS Certificates in a Cluster
  • Certificate Rotation
  • TLS bootstrapping
• Work with images securely.
  • 
  • Pull an Image from a Private Registry
• Define security contexts.
  • Pod Security Policies
  • Configure a Security Context for a Pod or Container
• Secure persistent key value store. ²
  • 
  • Secrets
  • Operating etcd clusters for Kubernetes

v1.15 との差分なし

Storage (7%)

• Understand persistent volumes and know how to create them.
  • Persistent Volumes
  • Configure a Pod to Use a PersistentVolume for Storage
• Understand access modes for volumes.
  • Persistent Volumes
• Understand persistent volume claims primitive.
  • Persistent Volumes
• Understand Kubernetes storage objects.
  • 
  • Volumes, etc.
• Know how to configure applications with persistent storage.
  • Configure a Pod to Use a PersistentVolume for Storage

v1.15 との差分なし

Troubleshooting (10%)

• Troubleshoot application failure.
  • Application Introspection and Debugging
  • Debug a StatefulSet
  • Debug Init Containers
  • Debug Pods and ReplicationControllers
  • Determine the Reason for Pod Failure]
  • Troubleshoot Applications
• Troubleshoot control plane failure.
  • Troubleshoot Clusters
• Troubleshoot worker node failure.
  • Troubleshoot Clusters
• Troubleshoot networking.
  • Debug Services
  • Debugging DNS Resolution

v1.15 との差分なし

Core Concepts (19%)

• Understand the Kubernetes API primitives.
  • The Kubernetes API
  • Understanding Kubernetes Objects
• Understand the Kubernetes cluster architecture.
  • Kubernetes Components
  • Nodes, etc.
• Understand Services and other network primitives.
  • Endpoint Slices, etc.

v1.15 との差分なし

Networking (11%)

• Understand the networking configuration on the cluster nodes.
  • 
  • Cluster Networking
• Understand Pod networking concepts.
  • 
  • Cluster Networking
• Understand service networking.
  • 
  • Service
• Deploy and configure network load balancer.
  • Create an External Load Balancer
• Know how to use Ingress rules.
  • Ingress
  • Set up Ingress on Minikube with the NGINX Ingress Controller
• Know how to configure and use the cluster DNS.
  • DNS for Services and Pods
  • Customizing DNS Service
  • Configure DNS for a Cluster
• Understand CNI.
  • Network Plugins

v1.15 との差分なし

Installation, Configuration & Validation (12%)

• Design a Kubernetes cluster.
  • 
  • Nodes, etc.
• Install Kubernetes masters and nodes.
  • 
  • Installing kubeadm
  • Creating a single control-plane cluster with kubeadm
• Configure secure cluster communications.
  • 
• Configure a Highly-Available Kubernetes cluster.
  • 
  • Options for Highly Available topology
  • Creating Highly Available clusters with kubeadm
  • Set up a High Availability etcd cluster with kubeadm
• Know where to get the Kubernetes release binaries.
  • v1.16 Release Notes
• Provision underlying infrastructure to deploy a Kubernetes cluster.
  • 
• Choose a network solution.
  • Cluster Networking
• Choose your Kubernetes infrastructure configuration.
• Run end-to-end tests on your cluster.
  • 
• Analyse end-to-end tests results.
  • 
• Run Node end-to-end tests.
  • 
• Install and use kubeadm to install, configure, and manage Kubernetes clusters.
  • see Install Kubernetes masters and nodes, etc.

(new kubeadm competency coming in 1.15)

ref.

1. Self-healing か？ - Restarts containers that fail, replaces and reschedules containers when nodes die, kills containers that don’t respond to your user-defined health check, and doesn’t advertise them to clients until they are ready to serve. ↩

2. persistent key value store = etcd or secret? ↩