Belajar Sendiri

Ship It · Part 3 · Medan Selera

Kubernetes map

The food court. A manager keeps many stalls serving, all day.

Every world is open. K1 to K3 build on each other. K1 starts with a quick check of what you know.

  1. World K1

    The Food Court

    See how Kubernetes works. Drive it with kubectl.

    0 of 13 done

    Show 13 lessonsHide lessons
    1. What you already know5 min
    2. One container is easy, 200 are not3 min
    3. When not to use Kubernetes3 min
    4. Want 3, See 24 min
    5. Food court, stalls, trays4 min
    6. The control plane and node parts5 min
    7. Your first cluster with kind5 min
    8. Drive it with kubectl5 min
    9. You are here: contexts4 min
    10. Zones: namespaces3 min
    11. Anatomy of a manifest4 min
    12. Labels and selectors4 min
    13. Dry run and kubectl explain4 min
    14. Boss challenge: Grand opening

  2. World K2

    Trays & Orders

    Run apps that heal and update without downtime.

    0 of 14 done

    Show 14 lessonsHide lessons
    1. Pods: a tray of dishes4 min
    2. Sidecars and init containers4 min
    3. ReplicaSets keep the count3 min
    4. Deployments: the standing order4 min
    5. Rolling updates and rollout undo5 min
    6. Restart or replace?3 min
    7. Pod states and their errors5 min
    8. Liveness, readiness and startup probes5 min
    9. Requests and limits4 min
    10. QoS classes3 min
    11. DaemonSets: one per stall3 min
    12. StatefulSets: names that stay4 min
    13. Jobs and CronJobs4 min
    14. Blue/green and canary with Deployments4 min
    15. Boss challenge: Lunch-rush upgrade

  3. World K3

    Counters & Doors

    Let traffic in, safely.

    0 of 11 done

    Show 11 lessonsHide lessons
    1. Every pod gets an IP3 min
    2. Services: one order number4 min
    3. NodePort, LoadBalancer and headless4 min
    4. EndpointSlices: who answers?4 min
    5. Cluster DNS3 min
    6. Debug with port-forward3 min
    7. Gateway API: the main entrance5 min
    8. HTTPRoute: signboards to stalls4 min
    9. Ingress, and why ingress-nginx retired3 min
    10. TLS with cert-manager4 min
    11. NetworkPolicies and CNI plugins5 min
    12. Boss challenge: Open the doors

  4. World K4

    Notes, Lockers & Packages

    Configure, store and package apps.

    0 of 12 done

    Show 12 lessonsHide lessons
    1. ConfigMaps: notes on the wall4 min
    2. Secrets: base64 is not a lock4 min
    3. External Secrets and Sealed Secrets3 min
    4. Scratch space: emptyDir3 min
    5. Lockers: PV and PVC5 min
    6. StorageClass and access modes4 min
    7. Storage for StatefulSets4 min
    8. Kustomize bases and overlays5 min
    9. Helm 4: install, upgrade, rollback5 min
    10. Write a small chart5 min
    11. Helm or Kustomize?3 min
    12. API deprecations and kyaml3 min
    13. Boss challenge: Same app, three kitchens

  5. World K5

    Lunch Rush

    Scale, schedule and see inside the cluster.

    0 of 13 done

    Show 12 lessonsHide lessons
    1. metrics-server and kubectl top3 min
    2. Scale out at lunch rush: HPA5 min
    3. VPA and node autoscaling3 min
    4. Pick a stall: nodeSelector and affinity4 min
    5. Taints, tolerations and spread5 min
    6. PodDisruptionBudgets3 min
    7. ResourceQuotas and LimitRanges4 min
    8. Logs and events4 min
    9. Prometheus, Grafana and OpenTelemetry4 min
    10. The debug ladder5 min
    11. Cluster upgrades and version skew4 min
    12. Managed Kubernetes and cost4 min
    13. Capstone mission 4: Run itMission 45 min
    14. Boss challenge: Lunch rush

  6. World K6

    Guards

    Lock the cluster down.

    0 of 11 done

    Show 10 lessonsHide lessons
    1. Three gates: authn, authz, admission4 min
    2. RBAC: roles and bindings5 min
    3. Ask first: kubectl auth can-i3 min
    4. Pod Security Standards4 min
    5. securityContext: lock the lunchbox5 min
    6. NetworkPolicies recap3 min
    7. Policies: CEL, Kyverno, Gatekeeper4 min
    8. Audit logs3 min
    9. Supply-chain recap4 min
    10. User namespaces3 min
    11. Capstone mission 5: Guard itMission 55 min
    12. Boss challenge: Lock the kitchen

  7. World K7

    Self-Driving

    Let Git drive the cluster.

    0 of 10 done

    Show 9 lessonsHide lessons
    1. GitOps: the order board is a repo4 min
    2. Argo CD or Flux?3 min
    3. Sync: from Git to cluster4 min
    4. Self-heal and drift4 min
    5. Automatic image updates4 min
    6. Promote with pull requests4 min
    7. Progressive delivery4 min
    8. CRDs and operators4 min
    9. Platform engineering and Backstage3 min
    10. Capstone mission 6: Hands offMission 65 min
    11. Boss challenge: Hands off

  8. World K9

    Cluster Admin

    Extra pack

    Run the cluster itself: kubeadm, nodes, upgrades, etcd and certificates.

    0 of 12 done

    Show 12 lessonsHide lessons
    1. What CKA adds to CKAD3 min
    2. kubeadm: how a cluster is born5 min
    3. Static pods and the manifests folder4 min
    4. The kubelet: systemctl and journalctl4 min
    5. crictl: containers under the kubelet4 min
    6. Node NotReady: the ladder5 min
    7. Cordon, drain, uncordon3 min
    8. Upgrade with kubeadm, one minor at a time5 min
    9. etcd backup and restore5 min
    10. Certificates and when they expire4 min
    11. Users: CSR, certificates and kubeconfig5 min
    12. Fix CoreDNS and kube-proxy4 min
    13. Boss challenge: Night of the broken node

  9. World K8

    Career Quest

    Turn your skills and your capstone into a job.

    0 of 8 done

    Show 8 lessonsHide lessons
    1. DevOps, SRE, platform, cloud: who does what?4 min
    2. Turn Kedai Kancil into a portfolio5 min
    3. Read job posts3 min
    4. Interview questions5 min
    5. The certification path4 min
    6. First cloud-native contributions4 min
    7. Keep up without burning out3 min
    8. A budget homelab4 min
    9. Boss challenge: Publish the capstone