Architecting with Google Kubernetes Engine
Learn how to deploy and manage containerized applications on Google Kubernetes Engine (GKE). Learn how to use other tools on Google Cloud that interact with GKE deployments. This course features a combination of lectures, demos, and hands-on labs to help you explore and deploy solution elements—including infrastructure components like pods, containers, deployments, and services—along with networks and application services. You'll also learn how to deploy practical solutions, including security and access management, resource management, and resource monitoring.

What you will learn
- Create and manage workloads in Google Kubernetes Engine.
- Explain how pod networking works in Google Kubernetes Engine.
- Define and work with different Kubernetes storage abstractions.
- Describe and manage authentication, authorization, and security in Google Kubernetes Engine.
- Monitor applications running in Google Kubernetes Engine.
- Explore Google Cloud managed storage services options.
- Configure CI/CD pipelines for Google Kubernetes Engine.
Prerequisites
- Completed "Getting Started with Google Kubernetes Engine" or have equivalent experience
Target audience
- Cloud architects, administrators, and SysOps/DevOps personnel., Individuals using Google Cloud to create new solutions or to integrate existing systems, application environments, and infrastructure with Google Cloud.
Training Program
9 modules to master the fundamentals
Objectives
- Introduce the course goals and preview each section of the course.
Topics covered
- →Course introduction
Objectives
- Define, configure, inspect, manage, and update Deployments.
- Define what Jobs and CronJobs are in GKE, and explore relevant use cases. Create and run Jobs.
- Explain how to scale clusters manually and automatically.
- Configure node and pod affinity.
Topics covered
- →Creating deployments.
- →Inspecting deployments.
- →Updating deployments.
- →Adopting other deployment strategies.
- →Using Jobs and Cronjobs
- →Cluster scaling.
- →Controlling Pod placement with labels and affinity rules.
- →Controlling Pod placement with taints and tolerations.
- →Getting software into your cluster.
Activities
Quiz
(Lab) Creating Google Kubernetes Engine Deployments
Objectives
- Explore Kubernetes networking, including Pod and cluster networking.
- Create services to expose to applications running within Pods.
- Configure load balancers to expose services to external clients. Explore container-native load balancing in GKE.
- Configure Google Kubernetes Engine networking.
Topics covered
- →Pod networking
- →Kubernetes Services
- →Service type and load balancers
- →Ingress
- →Container-native load balancing
- →Network policies
Activities
Quiz
(Lab) Configuring Google Kubernetes Engine (GKE) Networking
Objectives
- Define and work with Kubernetes storage abstractions.
- Run and maintain sets of pods using StatefulSets.
- Use ConfigMaps to decouple configuration from Pods.
- Manage and store sensitive access and authentication data.
- Configure persistent storage for Google Kubernetes Engine.
Topics covered
- →Volumes
- →Ephemeral volumes
- →Durable volumes
- →Statefulsets
- →Configmaps
- →Secrets
Activities
Quiz
(Lab) Configuring Persistent Storage for Google Kubernetes Engine
Objectives
- Authentication and authorization
- Kubernetes role-based access control
- Workload Identity
- Kubernetes control plane security
- Pod security
Topics covered
- →Explore Kubernetes authentication and authorization.
- →Define Kubernetes RBAC and how it works with IAM to secure GKE clusters.
- →Configure Workload Identity to access Google Cloud services from within GKE.
- →Secure GKE with Pod Security Standards and Pod Security Admission.
- →Implement Role-Based Access Control with GKE.
Activities
Quiz
(Lab) Securing Google Kubernetes Engine with Cloud IAM and Pod Security Admission
Objectives
- Identify the tools included in the Google Cloud Observability.
- Configure the Google Cloud operations suite to monitor and manage the availability and performance.
- Inspect logs using the kubectl command.
- Inspect Kubernetes logs using Google Cloud Observability.
- Configure GKE-native Monitoring and Logging.
Topics covered
- →Cloud Observability
- →Cloud Logging
- →Cloud Monitoring
- →Inspecting logs with the kubectl command
- →Inspecting logs with Cloud Logging and logging agents
Activities
Quiz
Lab: Configuring GKE-Native Monitoring and Logging
Objectives
- Contrast managed storage services with self-managed storage.
- Identify use cases for Cloud Storage for Kubernetes applications.
- Compare the range of Google Cloud managed database services.
- Explore Cloud SQL Auth Proxy and how it connects to Cloud SQL from within GKE.
- Use Cloud SQL with Google Kubernetes Engine.
Topics covered
- →Using Google Cloud services.
- →Using Cloud Storage.
- →Using Google Cloud databases
- →Using Cloud SQL and SQL Auth Proxy.
- →Comparing storage options.
Activities
Quiz
(Lab) Using Cloud SQL with Google Kubernetes Engine and Workload Identity
Objectives
- Define continuous integration and continuous delivery and identify why it is important.
- Examine CI/CD pipelines and how they can optimize app releases.
- Explore first-party and third-party CI/CD tools supported by Google Cloud.
- Explore Google's best practices for a GKE CI/CD pipeline.
Topics covered
- →What is CI/CD?
- →CI/CD pipeline construction
- →CI/CD tools available in Google Cloud
- →Best practices for using CI/CD on Google Cloud
Activities
Quiz
Objectives
- Review the main objectives from each section of the course.
Topics covered
- →Course Summary
Quality Process
SFEIR Institute's commitment: an excellence approach to ensure the quality and success of all our training programs. Learn more about our quality approach
- Lectures / Theoretical Slides — Presentation of concepts using visual aids (PowerPoint, PDF).
- Technical Demonstration (Demos) — The instructor performs a task or procedure while students observe.
- Guided Labs — Guided practical exercises on software, hardware, or technical environments.
- Quiz / MCQ — Quick knowledge check (paper-based or digital via tools like Kahoot/Klaxoon).
The achievement of training objectives is evaluated at multiple levels to ensure quality:
- Continuous Knowledge Assessment : Verification of knowledge throughout the training via participatory methods (quizzes, practical exercises, case studies) under instructor supervision.
- Progress Measurement : Comparative self-assessment system including an initial diagnostic to determine the starting level, followed by a final evaluation to validate skills development.
- Quality Evaluation : End-of-session satisfaction questionnaire to measure the relevance and effectiveness of the training as perceived by participants.
Upcoming sessions
Train multiple employees
- Volume discounts (multiple seats)
- Private or custom session
- On-site or remote