Docker Enterprise Bootcamp

This course is targeted at students with the following:

- Motivations: Quickly learn the foundations of containerization and orchestration with Docker Swarm, and become familiar with all the features of Docker Enterprise.

- Roles: System Operators & Administrators

Not available. Please contact.

Familiarity with the bash shell

• Filesystem navigation and manipulation
• Command line text editors like vim or nano
• Common tooling like curl, wget and ping

CN100

Containerization motivations and implementation

• Usecases
• Comparison to virtual machines

Creating, managing and auditing containers

• Container implementation from the Linux kernel
• Container lifecycle details
• Core container creation, auditing and management CLI

Best practices in container image design

• Layered filesystem implementation and performance implications
• Creating images with Dockerfiles
• Optimising image builds with multi-stage builds and image design best practices

Single-host container networking

• Docker native networking model
• Software defined networks for containers
• Docker-native single-host service discovery and routing

Provisioning external storage

• Docker volume creation and management
• Best practices and usecases for container-external storage.

 

CN110

Setting up and configuring a Swarm

• Operational priorities of container orchestration
• Containerized application architecture
• Swarm scheduling workflow & task model
• Automatic failure mitigation
• Swarm installation & advanced customization

Deploying workloads on Swarm

• Defining workloads as services
• Scaling workloads
• Container scheduling control
• Rolling application updates and rollback
• Application healthchecks
• Application troubleshooting
• Deploying applications as Stacks

Networking Swarm workloads

• Swarm service discovery and routing implementation
• Routing strategies for stateful and stateless workloads
• Swarm ingress traffic

Provisioning dynamic configuration

• Application configuration design
• Environment variable management
• Configuration file management
• Provisioning sensitive information

Provisioning persistent storage

• Storage backend architecture patterns
• NFS backed Swarms

Monitoring Swarm

• What to monitor in production-grade Swarms
• Potential Swarm failure modes & mitigations
• Swarm workload monitoring

CN210

Docker Enterprise architecture

• DE usage patterns
• Containerized components of DE
• Networking & System requirements for DE
• Installing UCP & DTR
• UCP & DTR high availability

Access control in Docker Enterprise

• UCP and DTR RBAC systems
• PKI, client bundle and API authentication
• Swarm and Kubernetes access control comparison

Deploying Swarm and Kubernetes applications on UCP

• Orchestrator architecture
• Swarm and Kubernetes networking and architecture comparison
• Application deployment on UCP

Container networking patterns

• Routing and service discovery for stateful and stateless applications on Swarm and Kubernetes
• Ingress vs. cluster internal routing
• L7 routing featuring sticky sessions and path based routing in Swarm and Kubernetes
• Introduction to Istio service mesh
• Canary and Blue-Green deployment patterns in UCP

Cluster-wide logging patterns

• Engine log management
• UCP audit logging
• Log aggregation and management

Enhancing platform security

• Options for improving host-level container security
• Kubernetes admission controllers and pod security policies
• Container network encryption
• Kubernetes network policies

Content Trust in DTR

• Man-in-setup
• Interpretingthe-middle mitigation per the Update Framework
• Setting up content trust keys

Signing images with content trust

• Security Scanning in DTR
• Security scanning  and filtering scanner reuslts

Building image pipelines with webhooks and image promotion

• Continuous integration pipeline tools
• Triggering webhooks
• Automatic and manual image promotion through pipeline stages

DTR Image Management

• Tag pruning and garbage collection
• DTR sizing for development and production clusters
• DTR content caching