Curriculum Syllabus
Kubelings features 29 chapters covering 126 real-world exercises with bidirectional reference guides and WebAssembly playground integration:
Chapter 01: Kubernetes Core Workloads & Pods
pods01: First Pod Manifest & Specpods02: Multi-Container Pods & Sidecar Patternpods03: Init Containers for Initializationpods04: Resource Requests, Limits & QoSpods05: Downward API & Env Variablespods06: Pod Disruption Budgets & Static Pods
Chapter 02: Controllers & Replication
ctrl01: ReplicaSets & Label Selectorsctrl02: Deployments & Rolling Updatesctrl03: Deployment Rollbacks & Revision Historyctrl04: StatefulSets & Stable Network IDsctrl05: DaemonSets for Node-Level Daemonsctrl06: Jobs & CronJobs
Chapter 03: Configuration & Secret Management
config01: ConfigMaps as Environment Variablesconfig02: ConfigMaps Mounted as Volumesconfig03: Secrets & Base64 Encodingconfig04: Secret Volume Mounts & Permissionsconfig05: Immutable ConfigMaps and Secrets
Chapter 04: Storage & Persistent Volumes
storage01: Volume Types (emptyDir & hostPath)storage02: PersistentVolumes & PersistentVolumeClaimsstorage03: Access Modes & Reclaim Policiesstorage04: StorageClasses & Dynamic Provisioningstorage05: Volume Snapshots & Volume Expansion
Chapter 05: Services & Networking
net01: ClusterIP Services & Port Mappingnet02: Headless Services & Stateful Addressingnet03: NodePort & LoadBalancer Service Typesnet04: CoreDNS Internal Service Resolutionnet05: ExternalName Services & Manual Endpoints
Chapter 06: Ingress & Gateway API
ingress01: Ingress Host & Path Routingingress02: Ingress TLS Terminationingress03: Ingress Annotations & Rewritesingress04: Gateway API Fundamentals
Chapter 07: Scheduling, Affinity & Advanced Placement
sched01: Node Placement (nodeName & nodeSelector)sched02: Node Affinity & Constraintssched03: Pod Affinity & Pod Anti-Affinitysched04: Taints and Tolerationssched05: Topology Spread Constraints
Chapter 08: Security, RBAC & Service Accounts
rbac01: ServiceAccounts & Token Managementrbac02: Roles & RoleBindingsrbac03: ClusterRoles & ClusterRoleBindingsrbac04: Pod & Container SecurityContextrbac05: Pod Security Standards (PSS/PSA)
Chapter 09: Network Policies & Traffic Segmentation
netpol01: Default Deny Network Policynetpol02: Ingress Traffic Filteringnetpol03: Egress Traffic & DNS Accessnetpol04: Named Ports & IPBlock CIDR Exceptions
Chapter 10: Health Checking, Probes & Lifecycle
health01: Liveness Probeshealth02: Readiness Probeshealth03: Startup Probeshealth04: Lifecycle Hooks & Graceful Shutdown
Chapter 11: Autoscaling (HPA, VPA, KEDA)
autoscale01: Horizontal Pod Autoscaler (HPA v2)autoscale02: HPA Custom Scaling Behaviorautoscale03: Vertical Pod Autoscaler (VPA)autoscale04: Event-Driven Autoscaling (KEDA)
Chapter 12: Custom Resources, CRDs & Operators
crd01: CustomResourceDefinition (CRD) Schemacrd02: CRD Subresources & Printer Columnscrd03: Python Kubernetes Operator Loopcrd04: Dynamic Admission Webhooks
Chapter 13: Observability, Debugging & Production Troubleshooting
troubleshoot01: Debugging CrashLoopBackOff & Exit Codestroubleshoot02: Debugging ImagePullBackOfftroubleshoot03: Debugging Pending Pods & Scheduling Failurestroubleshoot04: ResourceQuotas & LimitRangestroubleshoot05: Ephemeral Debug Containers & Event Triage
Chapter 14: GitOps Continuous Delivery with ArgoCD
gitops01: ArgoCD Application CRD & Sync Policiesgitops02: ArgoCD ApplicationSet Matrix Generatorgitops03: Sync Windows, ServerSideApply & Retry Backoffgitops04: Progressive Delivery with Argo Rollouts
Chapter 15: Service Mesh, eBPF & Cilium
mesh01: Cilium L7 HTTP Filtering & Routingmesh02: Strict Mutual TLS & PeerAuthenticationmesh03: CiliumClusterwideNetworkPolicy with DNS FQDN Egressmesh04: Hubble Observability & OpenTelemetry Tracing
Chapter 16: Policy as Code (Kyverno & Gatekeeper)
policy01: Kyverno ClusterPolicy for Required Labelspolicy02: Kyverno Mutating Policy for Security Defaultspolicy03: Kyverno Generate Policy for Default Deny NetworkPolicypolicy04: OPA Gatekeeper ConstraintTemplate & Constraint
Chapter 17: Multi-Tenancy & Virtual Clusters
tenant01: HNC Hierarchical Subnamespace Anchortenant02: Tenant ResourceQuotas and LimitRangestenant03: Virtual Cluster (vcluster) Control Planetenant04: Multi-Tenant Network Isolation & Egress Filtering
Chapter 18: Advanced Admission Webhooks
webhook01: MutatingWebhookConfiguration Manifestwebhook02: ValidatingWebhookConfiguration Manifestwebhook03: Dynamic Sidecar Injection AdmissionReview Responsewebhook04: CRD Webhook Conversion Strategy
Chapter 19: Package Management with Helm
helm01: Helm Chart.yaml Metadata & Dependencieshelm02: Helm Go Templating & Named Helpers (_helpers.tpl)helm03: Helm values.schema.json Validation Schemahelm04: Helm Subcharts & Global Values
Chapter 20: Declarative Customization with Kustomize
kustomize01: Kustomize Base Manifests & Metadata Transformationskustomize02: Kustomize ConfigMap & Secret Generatorskustomize03: Kustomize Strategic Merge & JSON6902 Target Patcheskustomize04: Kustomize Multi-Environment Overlays & Image Transforms
Chapter 21: Next-Gen Traffic Routing with Kubernetes Gateway API
gateway01: GatewayClass and Gateway Declarationgateway02: HTTPRoute Path & Header-Based Routinggateway03: Canary Traffic Splitting & URL Rewritinggateway04: Cross-Namespace Security with ReferenceGrant
Chapter 22: Infrastructure as Data with Crossplane
crossplane01: CompositeResourceDefinition (XRD) Schemacrossplane02: Composition and Field Path Transformscrossplane03: ProviderConfig and Resource Deletion Policiescrossplane04: Developer Self-Service Claims & Connection Secrets
Chapter 23: Kernel-Level Security & Observability with eBPF Tetragon
tetragon01: Process Execution Tracing with sys_execvetetragon02: Sensitive File & Credential Access Auditingtetragon03: Real-Time Kernel Sigkill Enforcementtetragon04: eBPF TCP Socket & Network Egress Observability
Chapter 24: Distributed AI & ML Orchestration with KubeRay
ray01: RayCluster Core Architecture & Head Noderay02: Heterogeneous Worker Pools & Autoscalingray03: RayJob for Distributed Batch Fine-Tuningray04: RayService for Production LLM Serving
Chapter 25: AI Batch Scheduling & Queuing with Kueue and Volcano
kueue01: Kueue ResourceFlavor & ClusterQueue Cohort Borrowingkueue02: Kueue LocalQueue & Suspended Workload Gatingvolcano01: Volcano Gang Scheduling & Deadlock Preventionvolcano02: Volcano Queue & Fair-Share Scheduling
Chapter 26: Hardware Acceleration: NVIDIA MIG, Apple Silicon GPU & DRA
accel01: NVIDIA MIG Slicing & Partitioningaccel02: Apple Silicon GPU & Metal MPS Accelerationaccel03: Dynamic Resource Allocation (DRA) Standardaccel04: Production vLLM LLM Inference Server
Chapter 27: AWS EKS & Cloud Architecture
eks01: EKS Pod Identity & IRSA ServiceAccountseks02: AWS Load Balancer Controller & ALB Ingresseks03: AWS VPC CNI Security Groups for Podseks04: Karpenter NodePool & EC2NodeClass
Chapter 28: Google Cloud GKE & Ecosystem
gke01: GKE Workload Identity Federationgke02: GKE Autopilot Workload Sizing & Compute Classesgke03: GKE Gateway API & Cloud Armor Policiesgke04: Google Config Connector Cloud Resources