Module 3: Container Orchestration: Guided Labs

Lab 1: Local Cluster Baseline

Deploy API, worker, and database dependency to kind/minikube/k3d with namespaces, requests/limits, service accounts, config, secrets, and network policies.

Lab 2: Scheduling Clinic

Create Pending, CrashLoopBackOff, ImagePullBackOff, and unbound-PVC failures. Diagnose from events, status, logs, and resource constraints before repairing.

Lab 3: Availability and Rollout

Configure probes, replicas, disruption budget, autoscaling signals, and rolling update. Inject a bad image and perform verified rollback.

Lab 4: Cluster Security Review

Reduce RBAC, run as non-root, constrain capabilities, scan images, and demonstrate blocked unauthorized traffic.

Evidence: manifests, diagnosis transcript, rollout history, policy tests, and teardown command.