This course explores modern and secure operations of Kubernetes clusters on the edge. The learning outcomes include understanding novel ways to operate and secure edge deployments of Kubernetes, securing the boot process on ARM, securely downloading OS images, using TPM for Remote Attestation, managing Kubernetes clusters on the edge, deployment alternatives, GitOps for cluster lifecycle management, and keeping edge data in sync with the cloud. The course teaches skills such as using coreboot, LinuxBoot, Trusted Firmware-A, The Update Framework, ORAS, Cluster API, kubeadm, k3s, GitOps tools like Flux v2 and libgitops, and projects like KubeEdge and Akri. The teaching method involves a deep dive into cloud-native and open-source firmware projects, combining them creatively. The intended audience includes individuals interested in cloud-native technologies, Kubernetes operations, edge computing, and open-source firmware projects.
Exploring Modern and Secure Operations of Kubernetes Clusters on the Edge
Overview
Syllabus
Introduction
Agenda
Hardware
Bootloaders
Example
Netboot
Trusted Execution Environment
TFA
Linux Boot
Linux Boot vs UEFI
You Root
LinuxBoot
Update Framework
Open Containers Initiative
Linux boot in ociboot
Linux boot in toughboot
Advanced trust delegation
Trusted Platform Module
Static Root of Trust Measurements
Remote Verification
Remote attestation
Edge automation
Kubernetes Cluster Lifecycle
Cubed M vs Kubernetes
K3S vs Kubernetes
Cluster API
Cluster Controllers
Cluster APIs
Principles of GitOps
Flux
Kspan
Visualization
Cube Edge
Architecture diagrams
Cube use case
What now
Taught by
Open Data Science
