Cloud & VirtualisationIntermediate
Cloud Ops: Production Ready
EKS hardening, network policies, observability, and IaC patterns for teams shipping to production.
6 steps~12h
Back to labs
- 1Read
EKS production checklist
Control plane, node groups, IRSA, and upgrade strategy before go-live.
Open chapter - 2Read
Kubernetes network policies
Default-deny posture, namespace isolation, and CNI interaction.
Open chapter - 3Lab
Lab — NetworkPolicy on kind
- ›Spin a local kind cluster with two namespaces
- ›Apply default-deny policies and verify blocked cross-namespace traffic
- ›Allow only required pod-to-pod flows and test with curl/netcat
- ›Rollback policies and document the diff
- 4Read
Prometheus & Grafana stack
RED/USE signals, scrape architecture, and SLO alerting without fatigue.
Open chapter - 5Read
Terraform multicloud patterns
Module structure, state backends, and environment promotion.
Open chapter - 6Self-check
Self-check — cloud ops
Answer all questions to validate this step