Skip to content

Architecting Hybrid Cloud Infrastructure with Anthos

This two-day course prepares participants to modernise, manage and monitor their applications using Kubernetes, whether the application is deployed on-premises or on Google Cloud Platform (GCP).

Through a series of presentations and hands-on exercises, participants explore and deploy using Google Kubernetes Engine (GKE), GKE Connect, Istio service mesh and Anthos Config Management, enabling operators to work with modern applications even when distributed across multiple vendor-hosted or on-premises clusters.

  • Duration: 2 days
  • Format: Face-to-face or distance learning
  • Prerequisites: Completion of the course Architecting with Google Kubernetes Engine and its prerequisites, or equivalent experience. Basic skills with command line tools and the Linux environment, experience in system administration, deployment and management of
    applications in a cloud or on-premises environment
  • Audience: Cloud architects, cloud engineers, SysOps/DevOps Administrators and engineers, site reliability engineers
  • Price: Please contact us
  • More information in our training catalogue

The course in detail

Module 1: Introduction to Anthos

  • Understand connected hybrid environments with Anthos.
  • Explain the issues addressed by Anthos.
  • Describe the components of the Anthos technology stack.

Module 2: Hybrid cluster management with Kubernetes Engine

  • Learn about Anthos deployed on VMware cluster architecture and VMware components.
  • Analyse initial networking considerations.
  • Workshop: Discover hybrid cluster management with Kubernetes Engine
  • Explore the mesh service: understanding the evolution/transition from monoliths to microservices and the benefits of service meshing.
  • Discover how Istio addresses the complexity challenges of a microservices architecture using key components of the control plane: Pilot, Mixer and Citadel.
  • Understand the routing of queries, service to service or inbound when using the Istio mesh service and the Envoy proxy.

Module 3: Observation of services using the service mesh adapters

  • Understand how Mixer, one of the components of the control plane, enables telemetry collection in both local and GCP environments, with the Istio adapter architecture.
  • Observe telemetry with dashboards using
  • Prometheus and Grafana.
  • Monitor the timing of applications via services with Jaeger.
  • Observe service topologies, relationships and live traffic using Kiali.

Module 4: Traffic routing management with the mesh service

 

  • Understand the Pilot component of the Istio control plan.
  • Review traffic management use cases, including inbound and serviceto-service flows.
  • Configure and observe several methods of traffic management, including version-specific routing, and the gradual transfer of traffic from one version of a microservice to another.

 

Module 5: Policy and security management with the mesh service

  • Explore incremental adoption of Istio security between services using mTLS.
  • Configure incoming authentication from outside the mesh service.

Module 6: Policy management with Anthos Config Management

  • Explore the configuration challenges introduced when using multicluster topologies.
  • Install Anthos Config Management and connect your Git repository.
  • Check that manual configuration changes (drift) are reversed, ensuring a consistent policy.
  • Update the configuration using the Git repository and check that the changes are applied.

 

Module 7: Configuration of Anthos GKE for multi-cluster operation

  • Deploy shared control plane and multiple control plane architectures for multi-cluster deployments.
  • Understand and configure DNS when locating external services.
  • Understand and configure Citadel and certificates when enabling multi-cluster applications.

Contact us Any questions? Or are you interested in our other Google Cloud services?
Our experts would be happy to help!

Contact us