Files in the ZIP · 4
.gitignoreREADME.mddocs/de/README.mddocs/en/README.md
Workshop wiki · K8S
Kubernetes
Complete, versioned learning material for this workshop—from reference documentation and workshop levels to exercises, assessments and the supporting texts for every practice module.
Kubernetes
My learning progress
With the web app option enabled, your progress is stored on this device.
Learning progress in the web app
Mark chapters as read, view reading progress and check off practice modules after enabling the optional web app. Workshop progress is calculated from chapters across all document pages. Your choices stay on this device; there is no account or server sync. Installation is not required. Withdrawing your choice in Privacy settings deletes the progress.
Workshop progress0%
Practice modules completed0 / 31
Documents read0 / 94
Workshop progress0%
0 / 990 chapters readCompleted
Practice modules
Workshop examples as ZIP files
All 31 practice examples in this workshop are available as individual ZIP files. Choose an example to download its package directly.
Files in the ZIP · 6
README.mddocs/de/README.mddocs/en/README.mdmanifests/00-namespace.yamlmanifests/10-deployment.yamlmanifests/20-service.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/app.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/platform-standards.yaml
Files in the ZIP · 8
README.mddocs/de/README.mddocs/en/README.mdmanifests/00-rbac.yamlmanifests/10-workloads.yamlmanifests/20-secure-pod.yamlmanifests/30-networkpolicy.yamlmanifests/90-risky-pod.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/probes.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/jobs.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/guestbook.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/postgres-stack.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/blue-green.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/worker-queue.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/canary-ingress.yaml
Files in the ZIP · 5
README.mddocs/de/README.mddocs/en/README.mdmanifests/00-working.yamlmanifests/90-broken-update.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/init-migration.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/sidecar.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/multi-container.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/configmap-reload.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/externalname.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/qos.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/taints-affinity.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/priority.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/daemonset.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/api-access.yaml
Files in the ZIP · 6
README.mddocs/de/README.mddocs/en/README.mdmanifests/00-namespace.yamlmanifests/10-allowed-pod.yamlmanifests/90-denied-pod.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/debug-target.yaml
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/ingress-tls.yaml
Files in the ZIP · 8
README.mddocs/de/README.mddocs/en/README.mdgateway-api/gateway.yamlgateway-api/gatewayclass.yamlgateway-api/httproute.yamlgateway-api/kustomization.yamlmanifests/workload.yaml
Files in the ZIP · 11
README.mdbase/deployment.yamlbase/kustomization.yamlbase/namespace.yamlbase/service.yamldocs/de/README.mddocs/en/README.mdoverlays/dev/kustomization.yamloverlays/dev/patch-replicas.yamloverlays/prod/kustomization.yamloverlays/prod/patch-replicas.yaml
Files in the ZIP · 7
README.mdchart/Chart.yamlchart/templates/deployment.yaml.tplchart/templates/service.yaml.tplchart/values.yamldocs/de/README.mddocs/en/README.md
Files in the ZIP · 4
README.mddocs/de/README.mddocs/en/README.mdmanifests/indexed-job.yaml
Files in the ZIP · 7
README.mddocs/de/README.mddocs/en/README.mdmanifests/00-workloads.yamlmanifests/10-default-deny.yamlmanifests/20-allow-dns.yamlmanifests/30-allow-backend.yaml
Learning material
Documentation in the Orthevs Wiki
The material retains its subject-specific structure. German and English versions are cross-linked, and diagrams are generated directly from the included Mermaid sources.
Workshop overview
1Technical documentation
13
English · 58.7 KB
Architecture: Kubernetes
This document describes the conceptual and operational architecture of Kubernetes for a practice-oriented workshop. It does not merely define terms; it connects core concepts with operational decisions, common failure patterns, and concr…
Open document ↗Read English · 59.2 KBBest Practices: Kubernetes
This document collects assessed best practices for Kubernetes. It is intended for workshops, reviews, and final projects. The goal is not merely to write YAML, but to make decisions traceable, identify risks early, and operate changes sa…
Open document ↗Read English · 85.6 KBCommand Reference: Kubernetes
This reference collects the most important Kubernetes commands and explains when to use them, what output to expect, and what to pay attention to. The focus is on kubectl, kubeadm, and the tools you regularly need around Kubernetes in re…
Open document ↗Read English · 88.6 KBConcepts: Kubernetes
This document explains the core Kubernetes concepts in a way that lets you not only operate Kubernetes, but also classify it architecturally. It complements the architecture guide, the best-practices guide, and the command reference. Thi…
Open document ↗Read English · 76.1 KBCurriculum: Kubernetes
This curriculum structures a Kubernetes workshop from entry-level concepts through advanced platform and security operations. It is designed so you can derive individual training modules, multi-day workshops, team learning paths, or a co…
Open document ↗Read English · 79.4 KBDiagrams: Kubernetes
This document is a visual reference for your Kubernetes workshop. It complements the concepts, architecture, best-practices, command-reference, and curriculum documents with explanatory diagrams, sequence views, and troubleshooting flows…
Open document ↗Read English · 86.7 KBCloud Provisioning: Kubernetes
This file describes how to provision Kubernetes clusters in cloud environments. It complements the local and native environment documents with public-cloud and multi-cloud deployment options.
Open document ↗Read English · 99.2 KBProvisioning: Kubernetes on Bare Metal
This document describes the complete provisioning of Kubernetes in bare-metal environments. It guides you from hardware preparation through operating system setup, container runtime, cluster bootstrap, networking, load balancing, storage…
Open document ↗Read English · 78.6 KBProvisioning Kubernetes in Native VMs
This file documents how to provision Kubernetes in virtual machines for the Kubernetes workshop. It covers local VMs with VirtualBox or VMware, remote VMs rented from a provider, Vagrant-based VM labs, and lightweight alternatives such a…
Open document ↗Read English · 75.9 KBKubernetes on WSL on Windows 11
This document describes how to prepare a clean WSL2-based Kubernetes workshop environment on Windows 11 and then provision different Kubernetes variants.
Open document ↗Read English · 106.5 KBDay-2 Operations: Kubernetes
This document describes how to operate Kubernetes after provisioning. It complements the environment documents for WSL, local VMs, bare metal, and cloud. The focus is on Day-2 Operations: checking health, controlling changes, testing bac…
Open document ↗Read English · 119.1 KBSecurity: Kubernetes
This document describes the full subject area of security in Kubernetes. It is intended for workshops, internal platform standards, security reviews, operational handovers, and architecture decisions.
Open document ↗Read English · 124.4 KBTroubleshooting: Kubernetes
This document is a complete troubleshooting reference for Kubernetes. Use it when a cluster, node, add-on, or application does not behave as expected. It is deliberately more than a list of individual failure patterns: it describes worki…
Open document ↗ReadWorkshop levels
4
English · 38.6 KB
Kubernetes Workshop: Fundamentals (EN)
!Kubernetes Fundamentals
Open document ↗Read English · 34.2 KBKubernetes Workshop: Intermediate (EN)
!Kubernetes Intermediate
Open document ↗Read English · 33.4 KBKubernetes Workshop: Professional (EN)
!Kubernetes Professional
Open document ↗Read English · 35.6 KBKubernetes Workshop: Advanced + Security (EN)
!Kubernetes Advanced Security
Open document ↗ReadExercises
4
English · 16.5 KB
Kubernetes Workshop: Fundamentals – Exercises with Solutions
Reference: 01-fundamentals-EN.md Difficulty level: Fundamentals Format: Hands-on lab with sample solutions and walkthroughs
Open document ↗Read English · 23.5 KBKubernetes Workshop: Intermediate – Exercises with Solutions
Reference: 02-intermediate-EN.md Difficulty level: Intermediate Format: Hands-on lab with sample solutions and walkthroughs
Open document ↗Read English · 23.8 KBKubernetes Workshop: Professional – Exercises with Solutions
Reference: 03-professional-EN.md Difficulty level: Professional Format: architecture, operations, and hands-on walkthrough with sample solutions
Open document ↗Read English · 24.8 KBKubernetes Workshop: Advanced + Security – Exercises with Solutions
Reference: 04-advanced-security-EN.md Difficulty level: Advanced + Security Format: security review, hands-on lab, walkthrough, and sample solutions
Open document ↗ReadAssessments and solutions
9
English · 10.3 KB
Kubernetes Assessment: 01 Fundamentals
Difficulty level: Fundamentals Language: English Format: written assessment with a small hands-on component Recommended duration: 90 to 120 minutes Maximum score: 100 points Passing threshold: 70 points
Open document ↗Read English · 17.0 KBModel Solution: Kubernetes Assessment 01 – Fundamentals
Difficulty level: Fundamentals Language: English Type: model solution / expected answer guide
Open document ↗Read English · 12.1 KBKubernetes Assessment: 02 Intermediate
Difficulty level: Intermediate Language: English Format: combined concept, design and hands-on assessment Recommended duration: 150 to 180 minutes Maximum score: 100 points Passing threshold: 70 points
Open document ↗Read English · 23.6 KBModel Solution: Kubernetes Assessment 02 – Intermediate
Difficulty level: Intermediate Language: English Type: model solution / expected answer guide
Open document ↗Read English · 13.4 KBKubernetes Assessment: 03 Professional
Difficulty level: Professional Language: English Format: architecture, operations and runbook assessment Recommended duration: 3 to 4 hours Maximum score: 100 points Passing threshold: 70 points
Open document ↗Read English · 27.8 KBSample Solution: Kubernetes Exam 03 – Professional
Difficulty level: Professional Language: English Type: sample solution / expected-answer guide
Open document ↗Read English · 15.3 KBKubernetes Assessment: 04 Advanced + Security
Difficulty level: Advanced + Security Language: English Format: security review, policy, hardening and incident-response assessment Recommended duration: 3 to 4 hours Maximum score: 100 points Passing threshold: 70 points
Open document ↗Read English · 29.3 KBSample Solution: Kubernetes Exam 04 – Advanced + Security
Difficulty level: Advanced + Security Language: English Type: sample solution / expected-answer guide
Open document ↗Read English · 48.5 KBKubernetes Certifications and Certification Paths
Content review date: June 12, 2026 Language: English Purpose: Guidance on official Kubernetes certifications, related cloud-native certifications, and certification paths where Kubernetes knowledge is important or useful.
Open document ↗ReadPractice modules
31 modules as one continuous learning path.
The sequence remains unchanged: from the lab skeleton through technical foundations and operating models to final troubleshooting. The technical directory names are deliberately preserved.
00 lab-skeleton
201 basic-workloads
202 config-network-storage
2
German and English · 2.4 KB
02 Config Network Storage
Dieses Lab erweitert eine App um ConfigMap, Secret, Probes, Ingress und PVC.
Open document ↗Read English · 1.8 KBExample Documentation: Kubernetes Config network storage
Analyze ConfigMaps, Secrets, services, NetworkPolicy, PV/PVC and Ingress.
Open document ↗Read03 platform-operations
2
German and English · 2.4 KB
03 Platform Operations
Dieses Lab zeigt typische Plattformvorgaben für Namespaces und Workloads.
Open document ↗Read English · 1.8 KBExample Documentation: Kubernetes Platform operations
Assess observability, autoscaling, GitOps, upgrades, backup and cost model.
Open document ↗Read04 security-hardening
2
German and English · 2.5 KB
04 Security Hardening
Dieses Lab zeigt RBAC, sichere Pod-Defaults, NetworkPolicy und ein bewusst riskantes Manifest.
Open document ↗Read English · 1.8 KBExample Documentation: Kubernetes Security hardening
Harden RBAC, Pod Security, NetworkPolicy, secrets, supply chain and runtime detection.
Open document ↗Read05 health-probes
2
German and English · 1.1 KB
05 Health Probes
Dieses Lab zeigt eine kleine Webanwendung mit startupProbe, readinessProbe und livenessProbe.
Open document ↗Read English · 886 BExample Documentation: Kubernetes Health Probes
Trace startup, readiness and liveness probes on a small Deployment.
Open document ↗Read06 jobs-cronjobs
2
German and English · 1.1 KB
06 Jobs CronJobs
Dieses Lab zeigt einen einmaligen Job und einen regelmäßig geplanten CronJob.
Open document ↗Read English · 849 BExample Documentation: Kubernetes Jobs and CronJobs
Understand batch workloads with bounded runtime, logs, retry rules and automatic cleanup.
Open document ↗Read07 guestbook-redis
2
German and English · 1.1 KB
07 Guestbook Redis
Dieses Lab baut eine kleine mehrschichtige Anwendung nach: Redis-Leader, Redis-Follower und ein PHP-Frontend.
Open document ↗Read English · 962 BExample Documentation: Kubernetes Guestbook Redis
Analyze a small multi-tier application with frontend, leader Service and follower Service.
Open document ↗Read08 stateful-postgres
2
German and English · 1.3 KB
08 Stateful Postgres
Dieses Lab zeigt eine zustandsbehaftete Datenbank mit StatefulSet, Headless Service, PVC, Init-SQL, Backup-CronJob und NetworkPolicies.
Open document ↗Read English · 943 BExample Documentation: Stateful Postgres
Run a stateful application with persistent storage, initialization, service discovery and a backup Job.
Open document ↗Read09 blue-green-release
2
German and English · 1.2 KB
09 Blue Green Release
Dieses Lab zeigt ein Blue-Green-Release mit zwei Deployments und einem Service-Switch über Labels.
Open document ↗Read English · 1.1 KBExample Documentation: Blue Green Release
Trace a release without changing an existing Deployment image in place: start the new version, validate it, switch the Service and roll back if needed.
Open document ↗Read10 worker-queue
2
German and English · 1.1 KB
10 Worker Queue
Dieses Lab zeigt eine kleine Queue-Architektur mit Redis, Producer-Job, Worker-Deployment, PDB, HPA und NetworkPolicies.
Open document ↗Read English · 1.0 KBExample Documentation: Worker Queue
Trace asynchronous processing with a queue, producer, worker scaling and network boundaries.
Open document ↗Read11 canary-ingress
2
German and English · 953 B
11 Canary Ingress
Dieses Lab zeigt zwei App-Versionen und zwei Ingress-Varianten: einen Standard-Ingress für Stable und einen NGINX-Canary-Ingress mit 10 Prozent Gewicht.
Open document ↗Read English · 875 BExample Documentation: Canary Ingress
Trace a canary release with stable and canary versions plus weighted Ingress routing.
Open document ↗Read12 rolling-update-failure
2
German and English · 920 B
12 Rolling Update Failure
Dieses Lab startet eine funktionierende Version und enthält zusätzlich eine fehlerhafte Patch-Datei für ein bewusst kaputtes Update.
Open document ↗Read English · 945 BExample Documentation: Rolling Update Failure
Observe a broken rolling update and recover it with a rollback.
Open document ↗Read13 init-container-migration
2
German and English · 708 B
13 Init Container Migration
Dieses Lab zeigt eine App, die erst nach einer Migration im Init Container startet.
Open document ↗Read English · 916 BExample Documentation: Init Container Migration
Understand how an application starts only after a successful init container.
Open document ↗Read14 sidecar-pattern
2
German and English · 649 B
14 Sidecar Pattern
Dieses Lab zeigt einen Hauptcontainer, der Logdateien schreibt, und einen Sidecar, der dieselbe Datei aus einem Shared Volume liest.
Open document ↗Read English · 763 BExample Documentation: Sidecar Pattern
Trace the sidecar pattern with a main container and a supporting log container.
Open document ↗Read15 multi-container-pod
2
German and English · 731 B
15 Multi Container Pod
Dieses Lab zeigt zwei Container im selben Pod: ein Webserver und ein Helper, der über localhost gegen den Webserver prüft.
Open document ↗Read English · 824 BExample Documentation: Multi Container Pod
Understand Pod boundaries using two containers with a shared network namespace.
Open document ↗Read16 configmap-reload
2
German and English · 988 B
16 ConfigMap Reload
Dieses Lab vergleicht ConfigMap als Umgebungsvariable und als gemountete Datei.
Open document ↗Read English · 935 BExample Documentation: ConfigMap Reload
Observe the difference between ConfigMap values as environment variables and mounted files.
Open document ↗Read17 externalname-service-discovery
2
German and English · 644 B
17 ExternalName Service Discovery
Dieses Lab zeigt einen internen Service-Namen, der auf einen externen DNS-Namen verweist.
Open document ↗Read English · 783 BExample Documentation: ExternalName Service Discovery
Use a stable internal Service name for an external DNS target.
Open document ↗Read18 resource-qos
219 taints-affinity
2
German and English · 869 B
19 Taints Affinity
Dieses Lab zeigt Node Affinity und Tolerations. Es setzt voraus, dass ein Trainingsnode passend gelabelt und optional getaintet wird.
Open document ↗Read English · 823 BExample Documentation: Taints Affinity
Trace targeted scheduling with node labels, node affinity and tolerations.
Open document ↗Read20 priority-preemption
2
German and English · 710 B
20 Priority Preemption
Dieses Lab zeigt PriorityClass und erklärt, wie wichtige Pods bei Ressourcenknappheit weniger wichtige Pods verdrängen können.
Open document ↗Read English · 793 BExample Documentation: Priority Preemption
Understand PriorityClass and preemption behavior for critical and less important workloads.
Open document ↗Read21 daemonset-node-agent
2
German and English · 688 B
21 DaemonSet Node Agent
Dieses Lab zeigt einen kleinen Node-Agent als DaemonSet, der auf jedem Linux-Node läuft.
Open document ↗Read English · 802 BExample Documentation: DaemonSet Node Agent
Understand how an agent Pod is run on every node using a DaemonSet.
Open document ↗Read22 serviceaccount-api-access
2
German and English · 770 B
22 ServiceAccount API Access
Dieses Lab zeigt einen Pod ohne Token und einen Pod mit explizit erlaubtem, lesendem API-Zugriff.
Open document ↗Read English · 878 BExample Documentation: ServiceAccount API Access
Limit API access from Pods using ServiceAccounts, token mounts and RBAC.
Open document ↗Read23 pod-security-admission
2
German and English · 894 B
23 Pod Security Admission
Dieses Lab zeigt einen Namespace mit restricted Pod Security Admission und zwei Pods: einer ist erlaubt, einer löst Warnungen oder Ablehnung aus.
Open document ↗Read English · 954 BExample Documentation: Pod Security Admission
Trace Pod Security Admission with a restricted namespace and both allowed and risky Pods.
Open document ↗Read24 ephemeral-debug-container
2
German and English · 914 B
24 Ephemeral Debug Container
Dieses Lab erzeugt einen fehlerhaft konfigurierten Pod und zeigt, wie kubectl debug zur Untersuchung genutzt wird.
Open document ↗Read English · 781 BExample Documentation: Ephemeral Debug Container
Inspect a faulty Pod with kubectl debug.
Open document ↗Read25 ingress-tls-dummy
2
German and English · 780 B
25 Ingress TLS Dummy
Dieses Lab zeigt Ingress TLS mit einem Dummy-Zertifikat. Das Secret ist nur für Training gedacht.
Open document ↗Read English · 779 BExample Documentation: Ingress TLS Dummy
Trace Ingress TLS with a self-signed test certificate and TLS Secret.
Open document ↗Read26 gateway-api
2
German and English · 1000 B
26 Gateway API
Dieses Lab zeigt eine einfache App plus Gateway-API-Routing. Die Standard-Workloads liegen unter manifests/; die Gateway-API-Ressourcen liegen separat unter gateway-api/, weil dafür Gateway-API-CRDs und ein Gateway Controller nötig sind.
Open document ↗Read English · 870 BExample Documentation: Gateway API
Understand Gateway API as a modern routing layer with GatewayClass, Gateway and HTTPRoute.
Open document ↗Read27 kustomize-overlays
2
German and English · 710 B
27 Kustomize Overlays
Dieses Lab zeigt base, overlays/dev und overlays/prod mit unterschiedlichen Replicas, Labels und ConfigMap-Werten.
Open document ↗Read English · 768 BExample Documentation: Kustomize Overlays
Manage common base resources with dev and prod overlays.
Open document ↗Read28 helm-chart
229 parallel-indexed-job
230 networkpolicy-troubleshooting
2
German and English · 1.0 KB
30 NetworkPolicy Troubleshooting
Dieses Lab zeigt eine funktionierende App und danach eine schrittweise NetworkPolicy-Reparatur: erst Default-Deny, dann DNS-Egress, dann Backend-Traffic.
Open document ↗Read English · 936 BExample Documentation: NetworkPolicy Troubleshooting
Break a working connection with default-deny and then allow it again step by step.
Open document ↗ReadK8S · Orthevs Academy
31 modules as one continuous learning path.
The sequence remains unchanged: from the lab skeleton through technical foundations and operating models to final troubleshooting. The technical directory names are deliberately preserved.