CKA课程版本1.14.1 阅读


安排 (5%)

    • Use label selectors to schedule Pods.

Labels and Selectors

Jobs – Run to Completion

Understand the role of DaemonSets.


Understand how resource limits can affect Pod scheduling.

Managing Compute Resources for Containers

Configure Default Memory Requests and Limits for a Namespace, etc.

Understand how to run multiple schedulers and how to configure Pods to use them.

Configure Multiple Schedulers

Manually schedule a pod without a scheduler.

Assigning Pods to Nodes

Create static Pods
Taints and Tolerations

Display scheduler events.

Application Introspection and Debugging

Know how to configure the Kubernetes scheduler.

Kubernetes Scheduler
Scheduler Performance Tuning


记录/监控 (5%)

    • Understand how to monitor all cluster components.

Tools for Monitoring Resources
Resource metrics pipeline
Monitor Node Health

Understand how to monitor applications.

Application Introspection and Debugging

Debug a StatefulSet, etc.
kubectl Cheat Sheet

Manage cluster component logs.

Troubleshoot Clusters
Logging Architecture

Manage application logs.

Troubleshoot Applications


应用生命周期管理 (8%)

    • Understand Developments and how to perform rolling updates and rollbacks.


Know various ways to configure applications.

Configure a Pod to Use a ConfigMap, etc.

Know how to scale applications.

Horizontal Pod Autoscaler
Scale a StatefulSet

Understand the primitives necessary to create a self-healing application. 1

Configure Liveness, Readiness and Startup Probes



    • Understand Kubernetes cluster upgrade process.

Upgrading kubeadm clusters
Cluster Management

Facilitate operating system upgrades.

Cluster Management

Implement backup and restore methodologies.

Operating etcd clusters for Kubernetes



    • Know how to configure authentication and authorization.

Controlling Access to the Kubernetes API, etc.

Understand Kubernetes security primitives.

Controlling Access to the Kubernetes API, etc.

Know to configure network policies.

Network Policies
Declare Network Policy

Use Calico for NetworkPolicy, etc.

Create and manage TLS certificates for cluster components.

Manage TLS Certificates in a Cluster
Certificate Rotation
TLS bootstrapping

Work with images securely.

Pull an Image from a Private Registry

Define security contexts.

Pod Security Policies
Configure a Security Context for a Pod or Container

Secure persistent key value store. 2

Operating etcd clusters for Kubernetes

与 v1.15 相比没有差异。


    • Understand persistent volumes and know how to create them.

Persistent Volumes
Configure a Pod to Use a PersistentVolume for Storage

Understand access modes for volumes.

Persistent Volumes

Understand persistent volume claims primitive.

Persistent Volumes

Understand Kubernetes storage objects.

Volumes, etc.

Know how to configure applications with persistent storage.

Configure a Pod to Use a PersistentVolume for Storage


故障排除 (10%)

    • Troubleshoot application failure.

Application Introspection and Debugging
Debug a StatefulSet
Debug Init Containers
Debug Pods and ReplicationControllers

Determine the Reason for Pod Failure]
Troubleshoot Applications

Troubleshoot control plane failure.

Troubleshoot Clusters

Troubleshoot worker node failure.

Troubleshoot Clusters

Troubleshoot networking.

Debug Services
Debugging DNS Resolution


核心概念 (19%)

    • Understand the Kubernetes API primitives.

The Kubernetes API
Understanding Kubernetes Objects

Understand the Kubernetes cluster architecture.

Kubernetes Components

Nodes, etc.

Understand Services and other network primitives.

Endpoint Slices, etc.



    • Understand the networking configuration on the cluster nodes.

Cluster Networking

Understand Pod networking concepts.

Cluster Networking

Understand service networking.


Deploy and configure network load balancer.

Create an External Load Balancer

Know how to use Ingress rules.

Set up Ingress on Minikube with the NGINX Ingress Controller

Know how to configure and use the cluster DNS.

DNS for Services and Pods
Customizing DNS Service

Configure DNS for a Cluster

Understand CNI.

Network Plugins

与 v1.15 无差异


    • Design a Kubernetes cluster.

Nodes, etc.

Install Kubernetes masters and nodes.

Installing kubeadm
Creating a single control-plane cluster with kubeadm

Configure secure cluster communications.

Configure a Highly-Available Kubernetes cluster.

Options for Highly Available topology
Creating Highly Available clusters with kubeadm
Set up a High Availability etcd cluster with kubeadm

Know where to get the Kubernetes release binaries.

v1.16 Release Notes

Provision underlying infrastructure to deploy a Kubernetes cluster.

Choose a network solution.

Cluster Networking

Choose your Kubernetes infrastructure configuration.
Run end-to-end tests on your cluster.

Analyse end-to-end tests results.

Run Node end-to-end tests.

Install and use kubeadm to install, configure, and manage Kubernetes clusters.

see Install Kubernetes masters and nodes, etc.

(1.15 版本即将推出全新的 kubeadm 能力)


自我修复?- 当容器失败时重启容器,当节点死机时替换并重新调度容器,当容器不响应用户定义的健康检查时杀死容器,并在准备就绪时向客户端提供服务。↩

持久键值存储 = etcd或secret?