DO2-001: Deploy&Operate Engineer Professional Artisan

Objective 1.1. Explain advanced Kubernetes resources

Details
• Explain the purpose of daemon sets in Kubernetes
• Explain Kubernetes jobs and the difference between Jobs and Deployments
• Explain CronJobs. Understand the cron syntax
• Explain ConfigMaps
• Explain Secrets

Objective 1.2. Explain Kubernetes Ingress

Details
• Understand the difference between Ingress resources and Ingress controllers
• Understand virtual hosts and path-based fanout
• Explain how Ingress resources can be used to direct traffic based on hostname and URL path

Objective 1.3. Explain Kubernetes Role-Based Access Control (RBAC)

Details
• Explain the difference between users, groups, and service accounts in Kubernetes
• Explain Roles and RoleBindings
• Understand the difference between Roles and ClusterRoles, RoleBindings and ClusterRoleBindings
• Understand API groups and verbs

Objective 1.4. Understand Helm and Helm charts

Details
• Explain what Helm is
• Explain what Helm charts are
• Understand Helm repositories and charts
• Be able to deploy applications on a Kubernetes cluster from a Helm chart
• Understand the differences between Helm v2 and Helm v3, and the security implications of Helm v2

Objective 1.5. Understand the Kubernetes Dashboard

Details
• Be able to deploy the Kubernetes Dashboard
• Understand Dashboard permissions, and how to authenticate to the Dashboard
• Explain how to use the dashboard to view the cluster status and create resources on the cluste

Objective 1.6. Explain Kubernetes logging (including centralized logging)

Details
• Explain the application logging process in a containerized environment
• Be able to view container logs using kubectl
• Be able to use kubectl to collect logs from multiple containers by using selectors
• Understand the usage of log visualization tools (kubetail, stern)
• Explain centralized logging in a Kubernetes cluster
• Explain the flow of a log line in a centralized logging environment

Objective 1.7. Explain Kubernetes monitoring

Details
• Explain metrics and sources of metrics in a containerized environment
• Explain time series
• Explain how operators can be used to deploy applications on Kubernetes (e.g. the Prometheus operator)
• Explain Kubernetes monitoring using Prometheus

Objective 1.8. Understand Kubernetes troubleshooting techniques

Details
• Troubleshoot crashing pods
• Troubleshoot pods that cannot be scheduled
• Troubleshoot pods that cannot start

Objective 1.9. Explain Kubernetes pod scheduling concepts

Details
• Compare and contrast how nodeName and nodeSelector can be used to constrain the nodes on which a pod can be scheduled
• Explain pod-to-node affinity and anti-affinity – required vs preferred rules
• Explain pod-to-pod affinity and anti-affinity. Understand the use of topologyKey
• Explain taints and tolerations
• Be able to use cordon and drain
• Explain resources and limits, and how they are used when scheduling and when running pods