- Amazon EKS self-study course is added: 48 chapters (Part 0 - an optional foundation on AWS accounts, IAM, VPC, EC2 and tooling; Parts 1-9 - cluster architecture, nodes and compute, identity and security, storage, networking, observability, operations and troubleshooting) tied to the hands-on labs. Available in 8 languages: Russian (source), English, Spanish, French, German, Georgian, Traditional Chinese and Japanese.
- EKS labs 101-132 are added: 32 composite labs deployed through Terragrunt with automatic
check_resultvalidation and reference solutions, in the same 8 languages. - EKS course reference guides are added: Glossary, Runbook, ADRs, Maturity scorecard and Cost model, also in 8 languages.
- Istio self-study course and ICA labs 01-35 are now fully localized: Georgian, Traditional Chinese and Japanese translations are added, bringing the course and labs to 8 languages (Russian, English, Spanish, French, German, Georgian, Traditional Chinese and Japanese).
- CKA + CKAD joint self-study course is added: 58 chapters (Part 0 - an optional foundation on networking, DNS, TLS, containers, Linux, YAML and vim; Parts 1-10 - the exam program) tied to the hands-on labs. Every chapter is marked with the exam it belongs to (CKA / CKAD / both). Available in 8 languages: Russian (source), English, Spanish, French, German, Georgian, Traditional Chinese and Japanese.
- CKA/CKAD labs 101-125 are added: 25 composite labs in the exam style with the automatic
check_resultvalidation and the reference solutions, in the same 8 languages. - Preparation route guides are added: CKA program and labs and CKAD program and labs - the official exam domains with their weights mapped onto the chapters and the labs.
- Course glossary is added: all the terms of the course grouped by the chapters with the links.
- Free Killercoda scenarios are cross-linked from 44 chapters of the CKA/CKAD course - an in-browser practice with no setup, placed next to our own lab in every chapter that has one.
- Course contents is extended: a
Practicesection with the links to the labs and to the CKA/CKAD mock exams, aWhich labs to choosesection (our labs for the exam preparation, Killercoda for a quick start) and aWhat to read nextsection with the further reading.
- Lab 32 Istio.gRPC: per-request load balancing, port naming, retries and timeouts is added.
- Lab 33 Istio.Control plane performance & operations: discovery selectors, Sidecar scope, istiod golden signals, OPA Gatekeeper is added.
- Lab 34 Istio.Hardening & threat model: STRICT mTLS, default-deny, egress control, RBAC on Istio CRDs, OPA Gatekeeper, NetworkPolicy is added.
- Lab 35 Istio.Multicluster mesh: multi-primary, multi-network, shared CA, east-west gateway, cross-cluster discovery is added.
- Istio self-study course is added: 32 chapters (Part 1 - ICA exam prep, Part 2 - production best practices) tied to the hands-on labs. Available in 5 languages: Russian (source), English, Spanish, French and German.
ping_pongnow speaks gRPC (PingPong.Echo + Health + reflection) and has a built-in gRPC client / load generator (-grpc-client).ping_pongdebug images installkubectl-k8ivia krew with shell completion; scratch/alpine images cross-compile natively (BuildKit$BUILDPLATFORM) instead of under QEMU.- ICA labs 01-35 are now translated into Spanish (
README_ES.MD), French (README_FR.MD) and German (README_DE.MD) in addition to the existing Russian and English versions.
- Lab 04 Istio.Zero Trust: mTLS and AuthorizationPolicy is added.
- Lab 05 Istio.Controlled Egress: ServiceEntry, Egress Gateway and Sidecar scope is added.
- Lab 06 Istio.Load Balancing and Traffic Mirroring is added.
- Lab 07 Istio.Helm install and Canary upgrade with revisions is added.
- Lab 08 Istio.Observability: Prometheus, Jaeger and Kiali is added.
- Lab 09 Istio.Advanced: Ambient mode is added.
- Lab 10 Istio.Resilience: Timeout and Circuit Breaker is added.
- Lab 11 Istio.End-user authentication: RequestAuthentication and JWT is added.
- Lab 12 Istio.Troubleshooting: istioctl analyze, proxy-status, proxy-config is added.
- Lab 13 Istio.Securing Edge Traffic with TLS is added.
- Lab 14 Istio.Locality-aware Failover is added.
- Lab 15 Istio.Installation & Configuration: customizing the Istio install (IstioOperator and MeshConfig) is added.
- Lab 16 Istio.Kubernetes Gateway API: ingress routing with Gateway and HTTPRoute is added.
- Lab 17 Istio.Rate Limiting: local rate limit with EnvoyFilter is added.
- Lab 18 Istio.Telemetry API: access logs and distributed tracing is added.
- Lab 19 Istio.Custom CA: plug your own root and intermediate CA into istiod is added.
- Lab 20 Istio.mTLS migration: PERMISSIVE to STRICT with zero downtime is added.
- Lab 21 Istio.Sidecar scoping: limit the proxy configuration scope is added.
- Lab 22 Istio.TLS origination: initiate TLS from the mesh is added.
- Lab 23 Istio.WasmPlugin: extend the data plane with WebAssembly is added.
- Lab 24 Istio.Ambient: waypoint proxy and L7 authorization is added.
- Lab 25 Istio.Progressive delivery with Flagger is added.
- Lab 26 Istio.Dynamic CA: cert-manager and istio-csr is added.
- Lab 27 Istio.EnvoyFilter and Lua: custom logic with an inline script is added.
- Lab 28 Istio.TCP routing: routing non-HTTP traffic is added.
- Lab 29 Istio.Ingress TLS: MUTUAL and PASSTHROUGH modes is added.
- Lab 30 Istio.StatefulSets and headless services in the mesh is added.
- Lab 31 Istio.Zero-downtime production migration: ingress-nginx to Istio Gateway is added.
- ICA labs 01, 02 and 03 are reworked: valid
check_resulttests, reference solutions, per-lab prefixes and regioneu-central-1/t3instances. - Lab 07 Istio.Helm install and Canary upgrade with revisions: In-Place upgrade section is added.
- k8i kubectl plugin was released
- Lab 03 EKS.Application Autoscaling with KEDA and Prometheus based on rps is added.
- Analize fature is added to k8i kubectl plugin .shows all workloads running on a selected set of nodes. For each workload it displays the namespace, kind, name, pod count, and aggregated CPU/memory requests, limits, and usage.
- K8s version 1.36 is added to k8s_self_managment_v2 module.
- Lab 03 Istio.Fault Injection and Retry is added.
- ping_pong:debug is updated (new aws cli , redis client)
- K8s version 1.35 is added to k8s_self_managment_v2 module.
- Article Vibe Coding → Spec-Driven: How AI Development Found an Engineering Approach is added.
- Article From Spot.io to Karpenter: Node Management Migration Experience in Kubernetes is added.
- Lab 01 Istio.Installing Istio is added.
- Lab 02 Istio.Dark Launch is added.
- ica mock exam 02 is added.
- ica mock exam 02 solutions is added.
- eks modules are updated. This enables the creation of diverse tasks and the emulation of a production environment.
- EKS lab . Karpenter Basics is added.
- EKS lab .Karpenter Basics RUS is added.
- New useful links for exams are added.
- ica mock exam 01 is added.
- ica mock exam 01 solutions is added.
- New useful links for exams are added.
- cks mock exam 04 is added.
- cks mock exam 04 solutions is added.
- cks mock exam 04 video solution is added.
- CKS Lab 28. Detect and stop unauthorized access with Falco is updated.
- cks mock exam 03 is added.
- cks mock exam 03 solutions is added.
- K8s version 1.34 is added to k8s_self_management module.
- AWS AI Practitioner example question is updated.
- a service for synchronizing EKS(Kubernetes) services is added.
- Unit tests for k8s-svc-sync are added.
- CKAD mock exam 02 tests are fixed.
- AWS AI Practitioner example question is added.
- CKS Lab 30. Create istio network policy is added.
- CKS Lab 30. solutions is added.
- CKA Lab 10. Kubernetes resource orchestration (kro) is added.
- CKA Lab 10. solutions is added.
- CKAD mock exam 01 tests are fixed.
- CKAD mock exam 02 tests are fixed.
- calculation of headers size, body size and full size is added to ping_pong
- body is added to ping_pong for POST and PUT methods.
- CKS Lab 27. Cilium network policy with mTLS is added.
- CKS Lab 27. solutions is added.
- Cks lab 27.video solution is added.
- CKS Lab 28. Detect and stop unauthorized access with Falco is added.
- CKS Lab 28. solutions is added.
- Cks lab 28.video solution is added.
- CKS Lab 29. Perform Docker security configutaion is added.
- CKS Lab 29. solutions is added.
- Cks lab 29.video solution is added.
- CKA Lab 09. Gateway API in Kubernetes is added.
- CKA Lab 09. solutions is added.
- CKA lab 09.video solution is added.
- K8s version 1.33 is added to k8s_self_management module.
- additional response size is added to ping_pong
- docker image for runner(viktoruj/runner) is updated(terraform and terragrunt versions are updated).
- api was added to ping_pong service.
- emulate crash was added to ping_pong service.
- emulate slow response was added to ping_pong service.
- osInfo was added to api ping_pong
- getVar was added to api ping_pong
- setVar was added to api ping_pong
- cks mock exam 02 is added.
- cks mock exam 02 solutions is added.
- spot_additional_type is added to k8s_self_management module. Now you can use spot instances with additional type. example
- all_spot_subnet is added to k8s_self_management module. Now you can use spot instances in all subnets. example
- --terragrunt-parallelism now is depends on cpu cores. It helps you create environments faster on multi-core computers.
- kcna example is added.
- kcsa example is added.
- K8s version 1.32 is added to k8s_self_management module.
- cka lab 08 is updated to kubernetes version 1.32.
- slow start to ping_pong is added. Now you can use
DELAY_STARTto delay start in seconds before start app (default = 0) . It is useful for testing slow start of app and test startup probes.
- CKS lab 26. Install Cilium with WireGuard is added.
- Cks lab 26.Install Cilium with WireGuard solutions are added.
- Cks lab 26.Install Cilium with WireGuard video solution is added.
- We have launched a comprehensive series on practical Kubernetes exam preparation with devops kitchen talks channel, starting with CKAD . CKAD 01 episode , script.
- cka lab 08 is updated to kubernetes version 1.31.
- fixed issue with node labels in k8s_self_managment_v2 module with 1.31 version.
- ping_pong image is updated . Now default SERVER_NAME = pod name
- ckad mock 02 is updated, question 21 is added.
- ckad mock 02 solutions are added.
- ckad mock 02 is updated, question 02 is updated.
- ckad mock 02 solution are updated.
- cilium CNI is added to k8s_self_management module. New cks exam contains cilium questions.
- Cka lab 8.Cilium NetworkPolicy L7 is added.
- solutions Cka lab 8.Cilium NetworkPolicy L7 is added.
- Video for Cka lab 8 solution is added.
- K8s version 1.31 is added to k8s_self_management module.
- new terraform aws vpc module is crearated. github
- Creation of a VPC with specified CIDR blocks, tags, and NACL settings.
- Dynamic creation of public and private subnets with automatic retrieval of their IDs.
- Subnet creation with the ability to assign them to specific Availability Zones (AZ) or AZ IDs.
- Independent tagging for each subnet, allowing for individual resource labeling.
- Flexible network management: ability to add new subnets or remove existing ones without impacting other subnets.
- Support for three NAT Gateway scenarios (by default, AZ NAT Gateway is used):
- AZ: One NAT Gateway is created for each AZ specified in private subnets.
- SINGLE: One NAT Gateway is created for the entire VPC.
- SUBNET: One NAT Gateway per subnet.
- NONE: No NAT Gateway is created for the subnet, and no routes for 0.0.0.0/0 are configured.
- Each subnet can be configured with any NAT Gateway type, and all types can coexist within a single VPC.
- Custom DHCP options to fine-tune network configurations.
- Output of all created resources, including subnet IDs grouped by type, AZ, and AZ ID.
- Cka lab 6. Create general resources (Namespace, Deployment, Service) is added.
- Video for Cka lab 6 solution is added.
- k3s template is added. It helps to create k8s cluster with k3s for simple scenarios.
- Cka lab 7. CPU throttle is added.
- Cks labs are updated.
- Cka lab 5. PriorityClass is added.
- Cka lab 5. PriorityClass solutions is added.
- Video for Cka lab 5 solutions is added.
- lfcs mock exam 1 is added .
- lfcs mock exam 1 solutions are added
- K8s version 1.30 is added to k8s_self_management module.
- k8s version 1.30 is used in cka-mock 1
- k8s version 1.30 is used in cka-mock 2
- kube-bench in cks mock1 is updated to version 0.7.3 .
- k8s version 1.30 is used in cks mock1
- k8s version 1.30 is used in ckad mock1
- k8s version 1.30 is used in ckad mock2
- Cka lab 3. Nginx ingress. Routing by header is added.
- Cka lab 3 solution is added.
- Video for Cka lab 3 solution is added.
- Cka lab 4. Nginx ingress. Routing 30% of requests to new version of app is added.
- Cka lab 4 solution is added.
- Video for Cka lab 4 solution is added.
- Ckad mock exam 2 is added . List of questions updated as of March 2024
- Ckad mock exam 2 solutions are added
- Video for CKAD mock 2 solutions is added.
- Two new features cpu and memory load profile are added to ping_pong service
- CMDB and resources aws regions are split
- (HPA by CPU) is added cka lab 02
- solution fo cka lab 02 (HPA by CPU) is added
- summary lisf of labs is added
- cka lab 01 (Fix problems with kube-api) is added
- solution for cka lab 01 (Fix problems with kube-api) is added
- video solution for cka lab 01 (Fix problems with kube-api) is added
- k8s version 1.29 is used in cka-mock 1
- k8s version 1.29 is used in cka-mock 2
- k8s version 1.29 is used in ckad-mock 1
- k8s version 1.29 is used in cks-mock 1
- Cka mock exam 2 is added . List of questions updated as of December 2023
- Cka mock exam 2 solutions are added
- Video for CKA mock 2 solutions is added.
- ssh_password_enable is added to configuration in env.hcl (default true).
- access_cidrs is added to configuration in env.hcl (default ["0.0.0.0/0"] )
- debug_output is added to configuration in env.hcl ( default false )
- solutions_scripts is added to configuration in env.hcl .
- solutions_video is added to configuration in env.hcl .
- questions_list is added to configuration in env.hcl . It is url to mock questions (like https://github.com/ViktorUJ/cks/blob/master/tasks/cks/mock/01/README.MD)
- links is updated. killer shell cks free course is added. It is best course for cks exam.
- Support for simultaneous creation of independent environments is added.
- The ability to create independent environments for different users is added.
- The ability to create independent environments for each user is added.
- CMDB is added. Now all created resources are automatically added to CMDB. video instructions
- Commands for working with CMDB are added (The user can get the list of all resources, all user resources, detailed information on individual resources).
- K8s version 1.29 is added to k8s_self_management module.
- Docker runner is added. Now you can run make commands from docker container. more details
- Terraform code is updated to use terraform version v1.6.6
- Terragrunt is updated to use version v0.54.8
- cka mock 02 questions list is added.
- lfcs mock 01 questions list is added.
- Ckad mock exam 1 is added
- Ckad mock exam 1 solutions are added
- Video for CKAD mock solutions is added
- HR scenario 1 is added
- HR scenario 1 solutions are added
- Video for HR scenario 1 solutions is added
- Ping_pong server is added
- Spot ec2 is moved from spot request to spot fleet, which gives spot ec2 more stability
- Make commands is updated
- Terraform code is updated to use terraform version v1.5.6
- Terraform aws provider is updated to v5.17.0
- Ubuntu_version is added to k8s_self_management module, which is the way to get ami_id by default
- k8s version 1.28 is used in cka-mock and cks-mock exams
- The cks mock exam 01 uses version Graviton instances t4g.medium
- The cks labs use version 1.28 and Graviton instances t4g.medium
- Cks labs are actualized, list is added to them
- Cks mock solutions are added
- Video for run mock exam is added
- Video for cks mock solutions is added
- The ability to run the k8s_self_management module on EC2 Graviton is added
- Support for the new Kubernetes version 1.28 is introduced
- Version 1.27 and Graviton instance t4g.medium is used in cka mock exam 01
- Video for solutions to the cka mock exam 01 is added