Course
Kubernetes for Real Workloads
Run Kubernetes the way operators do: pods and deployments that survive node failures, requests and limits that hold under pressure, probes, rollbacks, RBAC, network policies, and the failure modes that page you at 3am.
Workloads That Survive the First Week
Pods, Deployments, and Services, plus the resource accounting and probes that keep them alive under real load.
- 01Pods, Deployments, and Services: the shape of a workloadThe three objects that carry almost every workload, and why you manage ReplicaSets by declaring a Deployment.20mOpen
- 02Requests, Limits, and Why Your Pod Got OOMKilledRequests drive scheduling, limits drive the kernel, and the gap between them decides who gets evicted first.25mOpen
- 03Probes: Readiness, Liveness, and Startup Done HonestlyThe three probe types answer three different questions — mix them up and you get cascading restarts.20mMembers
Config, Secrets, and Rollouts That Don't Page You
ConfigMaps and Secrets without leaks, rolling updates you can undo, and a runbook for the classic 3am failures.
- 01ConfigMaps and Secrets Without the LeaksBase64 is not encryption. Where config and credentials actually live, how to inject them, and how to rotate safely.25mMembers
- 02Rolling Updates, Rollbacks, and Surge TuningHow a Deployment replaces pods safely, what the knobs actually do, and how to undo a bad release in seconds.20mMembers
- 03CrashLoopBackOff, ImagePullBackOff, and Other 3AM ClassicsA field runbook: read the pod status, read the events, and most pages resolve in under ten minutes.25mMembers
Containment: RBAC, Network Policy, and Pod Security
Default-deny thinking applied to who can act on the cluster, what pods can talk to, and what a pod is allowed to be.
- 01RBAC: Roles, Bindings, and ServiceAccounts Without the FootgunWho can do what, scoped tight — because a compromised pod with a mounted token is an API client.30mPremium
- 02NetworkPolicy: Default-Deny and Egress ControlEvery pod can reach every pod until you say otherwise — and your CNI might be silently ignoring your policies.25mPremium
- 03Pod Security, Admission Control, and Image HygienePod Security Standards replaced PSPs; combined with image pinning and scanning, they close the last door.30mPremium