DO280 Red Hat OpenShift Administration II: Configuring a Production Cluster (E) VT

Configure and manage OpenShift clusters to maintain security and reliability across multiple applications and development teams. Red Hat OpenShift Administration II: Configuring a Production Cluster (DO280) prepares OpenShift Cluster Administrators to perform daily administration tasks on clusters that host applications provided by internal teams and external vendors, enable self-service for cluster users with different roles, and deploy applications that require special permissions such as such as CI/CD tooling, performance monitoring, and security scanners. This course focuses on configuring multi-tenancy and security features of OpenShift as well as managing OpenShift add-ons based on operators. The skills you learn in this course can be applied using all versions of OpenShift, including Red Hat OpenShift on AWS (ROSA), Azure Red Hat OpenShift, and OpenShift Container Platform. This course is based on OpenShift Container Platform 4.14.

Physisch oder virtuell?

Nehmen Sie an einem unserer Standorte Frankfurt, München und Wien oder virtuell an unseren Klassenraumtrainings teil. Unter „Termin buchen“ werden Ihnen alle Optionen angezeigt, zuerst sortiert nach Standort, dann nach Datum.

Dauer

Trainingssprache

Englisch

Trainingsart

brainyCLASS (offen)

Was werden Sie in diesem Training erlernen?

– Deploying packaged applications using manifests, templates, kustomize, and helm. – Configuring authentication and authorization for users and applications. – Protecting network traffic with network policies and exposing applications with proper network access. – Deploying and managing applications using resources manifests. – Enabling developer self-service of application projects. – Managing OpenShift cluster updates and Kubernetes operator updates.

Agenda

Declarative Resource Management

Deploy and update applications from resource manifests that are parameterized for different target environments.

Deploy Packaged Applications

Deploy and update applications from resource manifests that are packaged for sharing and distribution.

Authentication and Authorization

Configure authentication with the HTPasswd identity provider and assign roles to users and groups.

Network Security

Protect network traffic between applications inside and outside the cluster.

Expose non-HTTP/SNI Applications

Expose applications to external access without using an Ingress controller.

Enable Developer Self-Service

Configure clusters for safe self-service by developers from multiple teams and disallow self-service if projects have to be provisioned by the operations staff.

Manage Kubernetes Operators

Install and update Operators that are managed by the Operator Lifecycle Manager and by the Cluster Version Operator.

Application Security

Run applications that require elevated or special privileges from the host Operating System or Kubernetes.

OpenShift Updates

Update an OpenShift cluster and minimize disruption to deployed applications.

REVIEWING ARCHITECTING CONCEPTS

SINGLE TO MULTIPLE ACCOUNTS

Group Exercise: Review Architecting on AWS core best practices
AWS Organizations for multi-account access and permissions
AWS SSO to simplify access and authentication across AWS accounts and third-party services
AWS Control Tower
Permissions, access, and authentication

HYBRID CONNECTIVITY

SPECIALIZED INFRASTRUCTURE

Zielgruppe

– Platform Administrators, System Administrators, Cloud Administrators, and other infrastructure-related IT roles who are responsible for managing and maintaining infrastructure for applications – Enterprise Architects, Site Reliability Engineers, DevOps Engineers, and other application-related IT roles who are responsible for designing infrastructure for applications

Voraussetzung für den Kurs

Prerequisite: Red Hat OpenShift Administration I: Operating a Production Cluster (DO180v4.14), or equivalent skills deploying and managing Kubernetes applications using the OpenShift web console and command-line interfaces. Significant experience with Linux System Administration is not needed for this course. Basic skills operating a Bash shell, manipulating files and processes, and verifying system confirmations such as network addresses are necessary and sufficient. Students are encouraged to take Getting Started with Linux Fundamentals (RH104) before enrolling in DO280

Partner

RedHat