Skip to content

Kubernetes

Kubernetes lets you describe the state your containerized workloads should be in — how many replicas, what image, what storage, what network access — and continuously reconciles the real cluster toward that state, forever, without you running a command every time something drifts. This is a hands-on guide to using it well: understanding the architecture underneath a kubectl apply, writing production-grade workloads, securing and observing a cluster, debugging what breaks, and operating OpenShift where that's the platform in front of you.

It's built to work two ways: read it start to finish as a course, or jump straight to the one page that answers what you need right now.

Start Here, Based on Where You Are

You are... Start at
New to Kubernetes entirely Getting Started
Comfortable with the basics, want the daily-driver objects Core Concepts
Running real workloads, want to tune rollouts and scheduling Workloads & Scheduling
Exposing services, debugging traffic Networking
Working with stateful apps and volumes Storage
Managing app config, Secrets, or packaging with Helm/Kustomize Configuration & Packaging
Locking down a cluster Security
Wiring up probes, logs, and metrics Observability & Health
Running the control plane yourself Cluster Administration
Building a deployment pipeline or adopting GitOps CI/CD & GitOps
Running Kubernetes in production at scale Production Engineering
Working on Red Hat OpenShift specifically OpenShift
Learning by doing, on a local cluster Labs
Wanting full worked examples, failure paths included Case Studies
Something's broken right now Troubleshooting
Prepping for a Kubernetes or DevOps interview Interview Preparation
Already know Kubernetes, need a fast lookup Quick Reference

The Learning Path

flowchart TD
    A[Getting Started] --> B[Core Concepts]
    B --> C[Workloads & Scheduling /\nNetworking / Storage]
    C --> D[Configuration & Packaging /\nSecurity / Observability]
    D --> E[Cluster Administration /\nCI/CD & GitOps]
    E --> F[Production Engineering /\nOpenShift]
    F --> G[Labs & Case Studies]
    G --> H[Interview Preparation]

Learn by Building

Each project uses only what the previous ones already taught you. Skip ahead if you're already past a stage.

  1. Deploy and expose your first app — Your First Deployment
  2. Roll out a change with zero dropped requests — Deployment Strategies, Case Study: Rolling Deployment With Zero Downtime
  3. Route real traffic in with TLS — Ingress and Ingress Controllers
  4. Give a database stable storage — StatefulSets, StatefulSet Storage Patterns
  5. Package it as a Helm chart — Helm Fundamentals and Writing Charts
  6. Isolate a new team in its own namespace — Case Study: Multi-Tenant Namespace Setup
  7. Lock down access with least privilege — RBAC
  8. Scale it automatically under load — Autoscaling, Case Study: Autoscaling Under Load
  9. Adopt GitOps instead of pushing kubectl apply by hand — GitOps With ArgoCD and Flux
  10. Practice debugging a real incident — Case Study: Debugging a CrashLoopBackOff Incident
  11. Run the production readiness checklist against it — Production Readiness Checklist
  12. Learn from other people's outages — Kubernetes Outages: 11 Real Postmortems

Interactive Tools

Try your own numbers against the same rules the controllers use:

What Changed Recently

Kubernetes moves fast, and a lot of tutorials online still teach patterns that no longer apply. The changes from the last few releases that most affect day-to-day work, and where each is covered:

Change What it means for you Covered in
HPA tolerance per object stable, HPA scale to zero beta (v1.37) Tune flapping per HPA; scale idle workloads to zero on object or external metrics Autoscaling
ingress-nginx retired (March 2026) No more security fixes; move to Gateway API or another maintained controller Gateway API
preStop sleep action stable (v1.34) Delay shutdown so endpoints drain, without a sleep binary in the image Deployment Strategies
Native sidecar containers stable (v1.33) Sidecars start before and stop after the app, and don't block Jobs from completing Pods
In-place Pod resize stable (v1.35) Change CPU/memory of a running Pod without restarting it; VPA can use it Autoscaling
kube-proxy nftables mode stable (v1.33), IPVS deprecated (v1.35) Prefer nftables (or eBPF) for large clusters Services Deep Dive
Endpoints API deprecated (v1.33) Use kubectl get endpointslices in scripts and debugging Services
ValidatingAdmissionPolicy stable (v1.30) Simple admission rules in CEL, with no webhook to run Authentication and Authorization
Helm 4 released (Nov 2025) Server-side apply, new plugin system; test pipelines before upgrading Helm
cgroup v1 being removed; swap support stable Nodes need cgroup v2; swap can now be enabled deliberately kubeadm Cluster Setup
etcd 3.6 Snapshot restore moved from etcdctl to etcdutl Backup and Restore

Every Section

  • Getting Started — history and origins, what Kubernetes actually is, control-plane architecture, installing kubectl, your first deployment
  • Core Concepts — Pods, ReplicaSets and Deployments, Services, namespaces, labels and selectors, Jobs and CronJobs
  • Workloads & Scheduling — deployment strategies, StatefulSets, DaemonSets, affinity and taints, requests/limits, autoscaling
  • Networking — the cluster networking model, Services in depth, Ingress, NetworkPolicy, DNS, CNI plugins
  • Storage — volumes, PersistentVolumes and Claims, StorageClasses and dynamic provisioning, StatefulSet storage
  • Configuration & Packaging — ConfigMaps and Secrets in depth, config injection, Helm, Kustomize, external secret stores
  • Security — authentication and authorization, RBAC, service accounts, Pod Security Admission, supply chain, encryption at rest
  • Observability & Health — probes, logging architecture, metrics-server, events and debugging
  • Cluster Administration — kubeadm, etcd, node management, upgrades, backup and restore, multi-tenancy
  • CI/CD & GitOps — pipelines for Kubernetes, kubectl scripting, progressive delivery, ArgoCD and Flux
  • Production Engineering — capacity planning, cost optimization, multi-cluster design, disaster recovery, readiness review
  • OpenShift — what OpenShift adds, the oc CLI and Projects, Routes, Source-to-Image, Operators
  • Labs — minikube, kind, Docker Desktop, Podman, and guided hands-on scenarios
  • Case Studies — full worked deployments, including the failure paths
  • Troubleshooting — a symptom-first debugging methodology, not just a list of errors
  • Interview Preparation — by subject and by level, tied back to the concepts
  • Quick Reference — cheat sheets, no prose

Further Reading