Kubernetes Deep Dive with Cozystack: Advanced Cluster & Cloud Platform Administration
This course is designed for engineers who want to deeply understand Kubernetes and learn how and why it works. We dissect containerization core concepts, networking, storage, security, and GitOps delivery using technologies powering Cozystack: Talos Linux, LINSTOR, Cilium, KubeVirt, Cluster API, Flux, etc.
Key Features
- Deep Dive – Each module uncovers internal mechanics and real-world operational scenarios, not just abstract examples.
- First-Hand Knowledge – Instructors are developers/contributors to the tools listed above. Learn from those who write the code.
- Practice + Code Review – Homework after each session: labs, Git MRs, or “break-fix” tasks. Mentors provide detailed feedback.
- Flexible Structure – Take individual topics, build a custom 5- or 10-module track, or complete all 15 to master Kubernetes.
- Optimal Workload – Weekly 3-hour sessions (lecture + lab). No context switching—balance learning with your actual job.
Course Program
Module 1: Containerization Under the Hood
Topics:
- Kernel namespaces (PID, NET, MNT, UTS, IPC)
- cgroups v1/v2 and resource limits
- veth pairs, bridges, overlay networks
- iproute2 (ip link|addr|route) and tc
- Manual containerization with nsenter (no Docker)
Outcome: Understand Linux process/traffic isolation, debug network/resource issues, and manually assemble a “container.”
Module 2: Image Building & Registry Workflows
Topics:
- OCI image/artifact specs
- Working with registries (Harbor, GHCR, ECR)
- Dockerfile best practices (multi-stage, layer caching)
Outcome: Build secure, optimized images and publish them to repositories.
Module 3: Kubernetes Fundamentals
Topics:
- API objects (Pod → Deployment → ReplicaSet)
- Reconciliation loop: kube-api, scheduler, controller-manager
- etcd and desired state
- CRDs, controller-runtime, operator pattern
Outcome: Describe resources via YAML, troubleshoot lifecycle issues, and write basic controllers.
Module 4: Kubernetes Networking (Core)
Topics:
- CNI plugins and pod network namespaces
- kube-proxy and service networking
- ClusterIP/NodePort/LoadBalancer services
- Service Discovery, DNS, headless services
- ingress-nginx: architecture, annotations, LB
Outcome: Design/debug cluster networking and configure public-facing ingress.
Module 5: Talos Linux Deep Dive
Topics:
- Talos architecture: immutability, secure boot
- Cluster deployment and control-plane upgrades
- talm for configuration management
- Debugging without SSH: talosctl, kubectl-node-shell
Outcome: Deploy/maintain Kubernetes clusters on Talos Linux and troubleshoot node issues.
Module 6: Storage in Kubernetes
Topics:
- CSI architecture, sidecars, VolumeLifecycle
- PV/PVC/StorageClass, reclaim policies, topology-aware volumes
- Snapshots and VolumePopulator
- In-tree vs. CSI drivers
Outcome: Master Kubernetes storage, select drivers, and manage volumes/backups in production.
Module 7: LINSTOR as Kubernetes-Native Storage
Topics:
- DRBD and block device replication
- linstor-controller, satellite, linstor-csi
- Volume/replica/snapshot management
- Quorum, fencing, replica balancing
Outcome: Deploy LINSTOR, ensure HA volumes, and recover from failures.
Module 8: Advanced Kubernetes Networking
Topics:
- Cilium/Kube-OVN: eBPF datapath
- CNI chaining
- MetalLB for external load balancing
- Ingress/egress traffic
- NetworkPolicy (L3/L4 + L7 HTTP)
- Debugging with cilium-dbg, tcpdump -i vxlan
Outcome: Confidently debug Kubernetes networking, enforce security policies, and fix complex issues.
Module 9: RBAC & OIDC
Topics:
- apiserver AuthN/AuthZ
- JWT tokens, certificates
- Keycloak integration
- ServiceAccount and RBAC policies
- oauth-proxy/oidc-proxy
Outcome: Implement SSO authentication and delegate secure access.
Module 10: Kubernetes-Native Virtualization (KubeVirt)
Topics:
- KubeVirt architecture: virt-operator, virt-launcher, libvirt-qemu
- VM lifecycle, hot-plug disks/networks
- Frontend/backend networking
- Storage and live migration
Outcome: Run/debug VMs inside Kubernetes.
Module 11: Kubernetes-in-Kubernetes (Cluster API)
Topics:
- Cluster API: CRDs, providers
- etcd, KubeVirt-CSI, CCM, cluster-autoscaler
- Kamaji, Konnectivity for multi-layer traffic
Outcome: Automate nested Kubernetes cluster lifecycle.
Module 12: GitOps & Application Delivery
Topics:
- CI: buildx, artifact publishing
- CD: ArgoCD vs. FluxCD
- Cozystack’s cozypkg for developer workflows
Outcome: Automate CI/CD and release cycles.
Module 13: Observability
Topics:
- Metrics/logs with VictoriaMetrics, Grafana
- Alerting pipeline (IRM via Alerta)
- Incident resolution best practices
Outcome: Master monitoring, logging, and alerting.
Module 14: Cozystack API & Aggregation Layer
Topics:
- Kubernetes API Aggregation Layer
- OpenAPI/Swagger
- Cozystack’s Core/System/Apps CRDs
Outcome: Extend Cozystack’s platform functionality.
Module 15: Writing Custom Operators
Topics:
- kubebuilder scaffolding, CRD v1
- controller-runtime: reconcile, watches, ownerRef
- Validating/Mutating webhooks
- ChatGPT as a pair-programmer
Outcome: Build operators to automate custom app lifecycles.
Module 16: SeaweedFS & COSI (Object Storage in Kubernetes)
Topics:
- SeaweedFS: master, volume-server, filer-server, S3 gateway
- Replication backends
- COSI (Container Object Storage Interface):
- S3 bucket provisioning via Kubernetes manifests
- Temporary credentials for apps
- Debugging with weed shell
Outcome: Deploy S3-compatible storage in-cluster and automate bucket lifecycle.
Package |
Includes |
Base Price |
Discount |
Final Price* |
|---|---|---|---|---|
Single Module |
1 topic (3h online + HW review) |
$400 |
— |
$400 |
Any 5 Modules |
Custom track |
$2000 |
-10% |
$2000 |
Any 10 Modules |
Full DevOps path |
$4000 |
-20% |
$4000 |
Full Course (15) |
Complete “Kubernetes Deep Dive” |
$6000 |
-25% |
$4500 |