Asset 1

Overview

Khoá học cung cấp kiến thức về việc triển khai, vận hành và theo dõi hiệu suất hoạt động của các ứng dụng đang sử dụng nền tảng Kubernetes (K8S)- bất kể hệ thống K8S đang được triển khai trên On-Premise hoặc Google Cloud. Khoá học này cũng cung cấp môi trường thực tế giúp người dùng có thể trãi nghiệm việc triển khai, vận hành một hệ thống Kubernetes Engine (GKE), GKE Connect, Istio Service Mesh và Anthos Config Management, tất cả những sản phẩm được Google Cloud cung cấp giúp người dùng có thể tối ưu khả năng vận hành, giám sát và vận hành ứng dụng Container cho dù đang được sử dụng trên đa môi trường Multi-cloud hoặc On-Premise.

Duration: 16h

 

Asset 2
Objective

After completing the course, students will have the following knowledge:

  • Triển khai thành công các thành phần của Istio Service Mesh như Control-plane và Proxy thông qua việc sử dụng Helm Package Manager hoặc sử dụng Istio trực tiếp từ GKE add-on.
  • Quản lý, theo dõi tập trung trạng thái các ứng dụng trong mô hình Microservices đang sử dụng trên các Kubernetes cluster bằng Istio service mesh adapter, bao gồm thêm các ứng dụng Prometheus, Grafana, Kiali hoặc Google Cloud Operation Suite.
  • Xác định và quản lý các dịch vụ đa cụm, có đầu vào, sử dụng Istio nguồn mở thông qua cấu trúc liên kết mặt phẳng chia sẻ và đa điều khiển.
  • Kết nối và quản lý các cụm trong môi trường on-premises và khối lượng công việc sử dụng GKE On-Premises
  • Cho phép thực thi chính sách nhất quán trên các môi trường nhiều cụm bằng cách sử dụng phương pháp cấu hình dưới dạng mã và kho lưu trữ Git an toàn của bạn.
Asset 4
Audience
  • Kỹ sư đang làm việc ở các vị trí Deploy engineer, Cloud Architect, Cloud Administrator, Systerm Engineer, SysOps/ DevOps Engineer đang có nhu cầu sử dụng Google Cloud
  • Bạn đang làm việc với Google Cloud để tạo, tích hợp, hiện đại hóa giải pháp sử dụng an toàn mạng, có thể mở rộng kiến trúc sử dụng môi trường hybrid cloud.
Asset 4
prerequisite
  • Hoàn thành khóa học Google Cloud Platform Fundamentals: Core Infrastructure hoặc có kinh nghiệm làm việc trên Google Cloud
  • Hoàn thành khóa học Architecting with Google Kubernetes Engine hoặc có kinh nghiệm triển khai và sử dụng Kubernetes Engine
Asset 6

OUTLINE

01

Anthos Overview

+
Describe challenges of hybrid cloud
+
Discuss modern solutions
+
Describe the Anthos Technology Stack

02

Managing Hybrid Clusters using Kubernetes Engine

+
Understand Anthos GKE hybrid environments, with Admin and User clusters
+
Register and authenticate remote Anthos GKE clusters in GKE Hub
+
View and manage registered clusters, in cloud and on-premises, using GKE Hub
+
View workloads in all clusters from GKE Hub
+
Lab: Managing Hybrid Clusters using Kubernetes Engine

03

Introduction to Service Mesh

+
Understand service mesh, and problems it solves
+
Understand Istio architecture and components
+
Explain Istio on GKE add on and it's lifecycle, vs OSS Istio
+
Understand request network traffic flow in a service mesh
+
Create a GKE cluster, with a service mesh
+
Configure a multi-service application with service mesh
+
Enable external access using an ingress gateway
+
Explain the multi-service example applications: Hipster Shop, and Bookinfo
+
Lab: Installing Open Source Istio on Kubernetes Engine
+
Lab: Installing the Istio on GKE Add-On with Kubernetes Engine

04

Observing Services using Service Mesh Adapters

+
Understand service mesh flexible adapter model
+
Understand service mesh telemetry processing
+
Explain Stackdriver configurations for logging and monitoring
+
Compare telemetry defaults for cloud and on-premises environments
+
Configure and view custom metrics using service mesh
+
View cluster and service metrics with pre-configured dashboards
+
Trace microservice calls with timing data using service mesh adapters
+
Visualize and discover service attributes with service mesh
+
Lab: Telemetry and Observability with Istio

05

Managing Traffic Routing with Service Mesh

+
Understand the service mesh abstract model for traffic management
+
Understand service mesh service discovery and load balancing
+
Review and compare traffic management use cases and configurations
+
Understand ingress configuration using service mesh
+
Visualize traffic routing with live generated requests
+
Configure a service mesh gateway to allow access to services from outside the mesh
+
Apply virtual services and destination rules for version-specific routing
+
Route traffic based on application-layer configuration
+
Shift traffic from one service version to another, with fine-grained control, like a canary deployment
+
Lab: Managing Traffic Routing with Istio and Envoy

06

Managing Policies and Security with Service Mesh

+
Understand authentication and authorization in service mesh
+
Explain mTLS flow for service to service communication
+
Adopt mutual TLS authentication across the service mesh incrementally
+
Enable end-user authentication for the frontend service
+
Use service mesh access control policies to secure access to the frontend service
+
Lab: Managing Policies and Security with Service Mesh

07

Managing Policies using Anthos Config Management

+
Understand the challenge of managing resources across multiple clusters
+
Understand how a Git repository is as a configuration source of truth
+
Explain the Anthos Config Management components, and object lifecycle
+
Install and configure Anthos Config Management, operators, tools, and related Git repository
+
Verify cluster configuration compliance and drift management
+
Update workload configuration using repo changes
+
Lab: Managing Policies in Kubernetes Engine using Anthos Config

08

Configuring Anthos GKE for Multi-Cluster Operation

+
Understand how multiple clusters work together using DNS, root CA, and service discovery
+
Explain service mesh control-plane architectures for multi-cluster
+
Configure a multi-service application using service mesh across multiple clusters with multiple control-planes
+
Configure a multi-service application using service mesh across multiple clusters with a shared control-plane
+
Configure service naming/discovery between clusters
+
Review ServiceEntries for cross-cluster service discovery
+
Migrate workload from a remote cluster to an Anthos GKE cluster
+
Lab: Configuring GKE for Multi-Cluster Operation with Istio
+
Lab: Configuring GKE for Shared Control Plane Multi-Cluster Operation
Study with
Google Cloud expert

Asset 2@2x
Asset 32@2x
Asset 2

Student feedback

Cloud Ace Training
Bringing great experiences to students

Asset 4

Trần Tuấn Anh

IT

After completing the Associate Cloud Engineer course, I knew how to operate and deploy projects on Google Cloud and confidently took the Google Cloud certification exam.

Nguyễn Ngọc Minh Thy

Data Engineer

After completing the Professional Data Engineer course, I have enough knowledge and confidence to take the Google Cloud certification exam to prepare for my upcoming job.

Trương Quốc Thắng

Data Engineer

I learned how to choose tools and apply them to businesses to process data effectively through the Professional Data Engineer course.

Phạm Văn Hùng

IT

Khóa học rất chi tiết và đầy đủ, sau khi học xong khóa học Associate Cloud Engineer, mình rất muốn có cơ hội học thêm các khóa học khác để hiểu rõ hơn về Google Cloud

Dương Minh Phương

Engineer

Sau khi học xong khóa học Associate Cloud Engineer, mình đã hiểu rõ về Google Cloud và có thể đưa ra các giải pháp cho doanh nghiệp triển khai các dự án trên GCP
Asset 5

REGISTER NOW

TO BECOME " GOOGLE CLOUD EXPERT"

Asset 8@2x

    câu hỏi thường gặp

    Cloud Ace is a Google Cloud training unit, so it does not organize exams and provide Google Cloud certifications. Cloud Ace only supports providing certificates of course completion for students while waiting for the Google Cloud certification exam

    In addition, if you want to take the Google Cloud certification exam, Cloud Ace will guide you to register for the Online or Offline exam at the authorized Google Cloud test centers in Vietnam.

    Of course, during the learning process, you will constantly be solving quizzes, simulated mock tests that are similar to Google Cloud's actual exam questions. In addition, Cloud Ace also provides Dump questions that are constantly updated with question types, exam questions from Google Cloud to help you have the best preparation for the exam.

    Of course. You will be supported by Cloud Ace during the learning process and even at the end of the course. You can interact with the Trainer via Slack, email hoặc qua Group Google Cloud Plartform User HCM để được các Trainer hỗ trợ nhé.

    After completing the course, if you have any questions about the knowledge or have difficulties in implementing the project on Google Cloud, you can contact the Trainer for answers.

    The Google Cloud course is not only suitable for software engineers or system development engineers, but also suitable for data processing engineers such as Data Analytics, Data Engineer, Data Scientist.

    In addition, if you are a Marketer or working in the field of finance, banking, e-commerce, logistics .... constantly faced with big data to solve, then you can refer to the courses Big Data Machine Learning Fundamental or From Data to Insight on Google Cloud Platform courses to refer to simple data processing and create professional reports on Google Cloud.