About the course
The Kubernetes Ingress API served us well, but modern microservices demand more flexibility, better role separation, and improved cross-namespace support. This intensive two-day course introduces the Kubernetes Gateway API, the successor to Ingress designed for expressive, extensible, and role-oriented networking.
This workshop is highly practical, guiding you through the deployment and configuration of the Gateway API. We explore advanced routing patterns, automate security with Cert-Manager for HTTPS, and dive into the Azure-specific implementation: Application Gateway for Containers. You will leave with a clear understanding of how to architect a single, secure entry point into your cluster that satisfies the needs of both infrastructure operators and application developers.
Instructor-led online and in-house face-to-face options are available - as part of a wider customised training programme, or as a standalone workshop, on-site at your offices or at one of many flexible meeting spaces in the UK and around the World.
-
- Compare Architectures: Articulate the limitations of the legacy Ingress API and the advantages of the Gateway API’s role-based model.
- Deploy Gateway Infrastructure: Install and configure Gateway Controllers and define GatewayClass and Gateway resources.
- Master Complex Routing: Implement HTTPRoute logic, including header-based routing, weighted traffic splitting (canary releases), and cross-namespace routing.
- Automate Security: Integrate Cert-Manager to automate the issuance and renewal of TLS certificates for secure HTTPS endpoints.
- Leverage Azure Managed Services: Configure and manage Azure Application Gateway for Containers as a high-performance Gateway API implementation.
-
This course is designed for DevOps Engineers, Site Reliability Engineers (SREs), and Cloud Architects who are responsible for managing traffic, security, and connectivity in Kubernetes environments.
-
Attendees should have a strong working knowledge of Kubernetes fundamentals (Pods, Services, Namespaces). Familiarity with standard Kubernetes Ingress and basic networking concepts (DNS, TLS/SSL) is highly recommended.
-
This Gateway API course is available for private / custom delivery for your team - face-to-face, on-site at your location of choice, or remotely via MS Teams or your own platform of choice - get in touch to find out how we can deliver tailored training which focuses on your project requirements and learning goals.
-
Evolution of Kubernetes Networking
Ingress vs. Gateway API: Identifying the pain points of Ingress (lack of portability, "god-object" configuration, and poor role separation).
The Role-Oriented Model: Understanding the three layers of the Gateway API:
GatewayClass (Infrastructure Provider)
Gateway (Cluster Operator)
HTTPRoute (Application Developer)
Core Resources: Introduction to HTTPRoute, TLSRoute, and TCPRoute.
Hands-on Lab: Deploying a Gateway Controller and exploring the Resource Hierarchy.
Advanced Routing and Traffic Control
Defining Routes: Deep dive into HTTPRoute matching rules (Path, Header, Query Parameters).
Traffic Splitting: Implementing weighted routing for blue/green deployments and canary releases.
Cross-Namespace Routing: How the Gateway API allows a single Gateway to securely serve routes defined across different namespaces.
Request Manipulation: Using filters for header transformation (Add/Remove/Replace) and URL redirection.
Hands-on Lab: Building a complex routing architecture with weighted traffic and cross-namespace support.
Securing the Gateway with HTTPS
TLS in the Gateway API: Understanding how to terminate TLS at the Gateway level.
Introduction to Cert-Manager: Architecture and installation of the industry-standard certificate controller.
Automating Certificates: Configuring Issuers and ClusterIssuers (Let's Encrypt).
Integration: Linking Cert-Manager with Gateway resources to automate SSL/TLS certificate lifecycle management.
Hands-on Lab: Securing a public Gateway endpoint with automated Let's Encrypt certificates.
Optional module for Microsoft Azure cloud deployments
Azure Application Gateway for Containers
Introduction and Architecture of the Azure Application Gateway for Containers
Setup of the Azure Application Gateway for Containers using a managed ALB (Application Load Balancer) controller
Application Gateway for Containers vs. in-cluster Gateway API
Web Application Firewall (WAF) setup to keep resources behind the Gateway API secure.
Hands-on Lab: Deploying Azure Application Gateway for Containers to manage AKS traffic.
Trusted by
