#kubernetes

Static image scanning will not catch abnormal behavior at runtime. Combine admission policies (Kyverno) to block non-compliant workloads with runtime monitors (Falco) to detect shell-in-container and lateral movement.

Duy TranMay 8, 20269 min

Detailed instructions for installing Harbor - private Docker registry on Ubuntu 24.04, including HTTPS, security, backup and best practices.

Duy TranDecember 2, 202510 min

A comprehensive study guide for the CKA (Certified Kubernetes Administrator) exam. Covers all 5 hands-on domains: Troubleshooting (30%), Cluster Architecture (25%), Services & Networking (20%), Workloads & Scheduling (15%), Storage (10%). 12 lessons with hands-on terminal exercises.

A comprehensive study roadmap for the CKAD (Certified Kubernetes Application Developer) exam. Fully covers all 5 hands-on domains: App Environment & Security (25%), App Design & Build (20%), App Deployment (20%), Services & Networking (20%), App Observability (15%). 10 lessons with hands-on terminal exercises.

A comprehensive study path for the KCNA (Kubernetes and Cloud Native Associate) exam. Covers all 5 domains: Kubernetes Fundamentals (46%), Container Orchestration (22%), Cloud Native Architecture (16%), Observability (8%), Application Delivery (8%). 9 in-depth lessons with English practice quizzes.

A hands-on series on building a complete Microservices system with Quarkus 3.x — the "Supersonic Subatomic" Java framework designed specifically for Cloud Native and Kubernetes. Using PostgreSQL as main database, Keycloak for Authentication & Authorization (OIDC), Apache Kafka for Event-Driven Communication, gRPC for high-performance inter-service. From creating your first project with Dev Services, building a REST API with Panache, to deploying production on Kubernetes with GraalVM Native Image. Includes Fault Tolerance, OpenTelemetry Observability, Contract Testing, CI/CD Pipeline and Production Readiness Checklist. Actual project: E-Commerce Platform system includes 5 microservices.

Step-by-step instructions for building a medical information system (HIS/EMR/LIS) with Microservices architecture using Quarkus, PostgreSQL and Keycloak. Compliant with HIPAA, HL7 FHIR, Zero Trust security standards. From architectural design, building services, decentralization, data encryption, audit logging to production deployment on Kubernetes. Each article has practical code, ready to be applied to hospitals and medical facilities.

Comprehensive practical course on deploying Microservices on-premises systems using Kubernetes HA (High Availability), PostgreSQL HA with Patroni, Ceph/Rook storage, Istio Service Mesh, ArgoCD GitOps, Prometheus Observability Stack, HashiCorp Vault, RabbitMQ HA, Redis Cluster and many other production-grade technologies. From infrastructure design, cluster installation, microservices deployment to operations, DR and enterprise standard security. 50 lessons + practice labs on bare-metal/VM.

Comprehensive series on Cloud Native Microservices architecture — from container platforms, Kubernetes, microservices design principles (DDD, Bounded Context), communication models (REST, gRPC, Event-Driven), to Data Management (CQRS, Saga, Event Sourcing), Service Mesh, Observability, Resiliency Patterns, CI/CD GitOps and Security. Combine solid theory with practical architecture for production systems.

In-depth series on Enterprise AI Chatbot Platform system architecture: multi-model gateway, RAG pipeline, agentic architecture (multi-agent orchestration, tool calling, planning & reflection), conversation memory, streaming & voice, guardrails & safety, multi-channel deployment, multi-tenant architecture, analytics & observability, evaluation & optimization, GPU infrastructure & model serving. Build an enterprise-level chatbot platform from A-Z, ready for production.

Comprehensive course on Multi-tenant SaaS Platform architecture from basic to production-ready. Includes Tenant Isolation Strategies, Subscription & Billing Engine, Plugin/Extension Architecture, White-labeling, Onboarding Automation, Feature Flags, Usage Metering, and Self-service Admin Portal. Design a SaaS system that meets thousands of tenants at optimal costs. Case studies from Slack, Notion, Atlassian and leading SaaS platforms. Updated 2026.

Comprehensive course on Platform Engineering and Internal Developer Portal (IDP). Includes Backstage, Service Catalog, Golden Paths, Self-service Infrastructure, Developer Experience (DX), CI/CD Platform, Environment Management, and Internal Tools. Platform design helps developers self-serve infrastructure, increase developer productivity, and reduce cognitive load. Case studies: Spotify (Backstage), Netflix, Airbnb. Updated 2026.

Comprehensive course on Real-time architecture and IoT Platform. Includes MQTT Protocol, Edge Computing, Digital Twin, Time-Series Database (TimescaleDB, InfluxDB), Stream Processing, Device Management, OTA Updates, Real-time Monitoring Dashboard. Applications in Smart Factory, Smart Building, Connected Vehicles, and Agriculture IoT. Practical case studies from AWS IoT, Azure IoT, and Industrial IoT systems. Updated 2026.

In-depth series on Fashion Design & Print-on-Demand (POD) system architecture: domain analysis, AI-powered design studio (Stable Diffusion, ControlNet, CLIP), product catalog & multi-channel e-commerce, order orchestration & fulfillment, supplier network routing, print production pipeline, AI recommendation & trend forecasting, data platform & ML pipeline, Kubernetes infrastructure, security & IP protection, Printful/Printify/Gelato case studies. From design ideas to products in customers' hands.

The HashiCorp Vault course is comprehensive from basic to advanced, helping you master Secret Management, Encryption as a Service, Dynamic Credentials and Identity-based Security. From installing and configuring Secrets Engines (KV, PKI, Transit, Database, AWS, SSH), Auth Methods (Token, Userpass, AppRole, LDAP, OIDC, Kubernetes), Policies, to advanced topics such as Integrated Storage (Raft), High Availability, Auto-unseal, Vault Agent, Vault Secrets Operator, Enterprise features (Namespaces, Sentinel, Replication, DR), monitoring and production operations. Updated to Vault 1.21.x (latest version 2026), including SPIFFE auth, MFA TOTP self-enrollment, KV v2 version attribution and enterprise security best practices.

The Keycloak course is comprehensive from basic to advanced, helping you master Identity and Access Management (IAM) from installing and configuring Realms, Users, Roles, Clients, to advanced modules such as Identity Brokering, User Federation (LDAP/AD), Authentication Flows, Authorization Services, Multi-Factor Authentication, Organizations, Workflows, Passkeys, and integrating with real applications. Updated to Keycloak 26.x (latest version 2026) running on Quarkus, including production operations, High Availability, Kubernetes Operators and enterprise security best practices.

Comprehensive course on Performance Testing and Penetration Testing according to enterprise standards 2026. From processes, tools, implementation to professional reports. Includes k6, Gatling, Artillery, Burp Suite, Nuclei, OWASP ZAP, Metasploit, Cloud/Kubernetes security testing, AI-powered testing, CVSS v4.0, PTES, OWASP Top 10, Chaos Engineering, SRE practices and compliance frameworks. Practical combat instructions with lab exercises and real-world scenarios.

Comprehensive Docker course from fundamentals to advanced level, helping you master container technology from the first concepts to real-world production deployment. Covers Dockerfile, Docker Compose, Networking, Storage, Security, CI/CD, Docker Swarm, Microservices and best practices for enterprise environments. Updated with Docker Engine 27+ and modern container technologies as of 2026.

In-depth course on MLOps and LLMOps — the art of bringing AI models from prototype to production safely and effectively. From experiment tracking, CI/CD for ML, to LLM observability, cost optimization, guardrails, and compliance. Highest paying skills in AI.

Comprehensive basic to advanced Kubernetes course for 2026, helping you master container orchestration, deploy production-ready applications, and prepare for CKA/CKAD certification. Updated to Kubernetes 1.32+ with Gateway API, Cilium, OpenTelemetry, Helm 4, Sidecar containers GA, ValidatingAdmissionPolicy, and AI/ML workloads.