Architecting Google Cloud Training Overview
This Architecting Hybrid Cloud Infrastructure with Anthos training course teaches students how to manage their applications using Kubernetes whether the application is deployed on-premises or on Google Cloud. Attendees learn how to leverage Kubernetes Engine (GKE), GKE Connect, Istio service mesh, and Anthos Config Management.
Location and Pricing
This course is taught as a private, live online class for teams of 3 or more. All our courses are hands-on, instructor-led, and tailored to fit your group’s goals and needs. Most Accelebrate classes can be flexibly scheduled for your group, including delivery in half-day segments across a week or set of weeks. To receive a customized proposal and price quote for online corporate training, please contact us.
In addition, we offer some courses as live, instructor-led online classes for individuals.
Objectives
- Deploy Istio service mesh control-plane and proxies using the Helm Kubernetes package manager or using the Istio on GKE add-on
- Centrally observe, discover, and monitor your microservices-based applications across clusters using Istio service mesh adapters, including Prometheus, Grafana, or Kiali, or Stackdriver
- Define and manage multi-cluster services, with ingress, using open-source Istio via shared and multi-control plane topologies
- Connect and manage on-premises clusters, and workloads using GKE On-Prem
- Enable consistent policy enforcement across multi-cluster environments using a configuration-as-code approach and your secure Git repository
Prerequisites
All students must have completed:
Outline
Expand All | Collapse All
Introduction
Anthos Overview
- Describe challenges of hybrid cloud
- Discuss modern solutions
- Describe the Anthos Technology Stack
Managing Hybrid Clusters using Kubernetes Engine
- Understand Anthos GKE hybrid environments, with Admin and User clusters
- Register and authenticate remote Anthos GKE clusters in GKE Hub
- View and manage registered clusters, in cloud and on-premises, using GKE Hub
- View workloads in all clusters from GKE Hub
Introduction to Service Mesh
- Understand service mesh, and problems it solves
- Understand Istio architecture and components
- Explain Istio on GKE add on and it's lifecycle, vs OSS Istio
- Understand request network traffic flow in a service mesh
- Create a GKE cluster, with a service mesh
- Configure a multi-service application with service mesh
- Enable external access using an ingress gateway
- Explain the multi-service example applications: Hipster Shop, and Bookinfo
Observing Services using Service Mesh Adapters
- Understand service mesh flexible adapter model
- Understand service mesh telemetry processing
- Explain Stackdriver configurations for logging and monitoring
- Compare telemetry defaults for cloud and on-premises environments
- Configure and view custom metrics using service mesh
- View cluster and service metrics with pre-configured dashboards
- Trace microservice calls with timing data using service mesh adapters
- Visualize and discover service attributes with service mesh
Managing Traffic Routing with Service Mesh
- Understand the service mesh abstract model for traffic management
- Understand service mesh service discovery and load balancing
- Review and compare traffic management use cases and configurations
- Understand ingress configuration using service mesh
- Visualize traffic routing with live generated requests
- Configure a service mesh gateway to allow access to services from outside the mesh
- Apply virtual services and destination rules for version-specific routing
- Route traffic based on application-layer configuration
- Shift traffic from one service version to another, with fine-grained control, like a canary deployment
Managing Policies and Security with Service Mesh
- Understand authentication and authorization in service mesh
- Explain mTLS flow for service to service communication
- Adopt mutual TLS authentication across the service mesh incrementally
- Enable end-user authentication for the frontend service
- Use service mesh access control policies to secure access to the frontend service
Managing Policies using Anthos Config Management
- Understand the challenge of managing resources across multiple clusters
- Understand how a Git repository is as a configuration source of truth
- Explain the Anthos Config Management components, and object lifecycle
- Install and configure Anthos Config Management, operators, tools, and related Git repository
- Verify cluster configuration compliance and drift management
- Update workload configuration using repo changes
Configuring Anthos GKE for Multi-Cluster Operation
- Understand how multiple clusters work together using DNS, root CA, and service discovery
- Explain service mesh control-plane architectures for multi-cluster
- Configure a multi-service application using service mesh across multiple clusters with multiple control-planes
- Configure a multi-service application using service mesh across multiple clusters with a shared control-plane
- Configure service naming/discovery between clusters
- Review ServiceEntries for cross-cluster service discovery
- Migrate workload from a remote cluster to an Anthos GKE cluster
Conclusion
Training Materials
All GCP training students receive comprehensive courseware.
Software Requirements
Students must have a modern web browser (ideally Chrome) and Internet access.
