Ah, Kubernetes.

The eventual winner of the standard way of running large container fleets.

Also infamously complex.

However, while complexity cannot really be ignored, there are a few manageable learning approaches.

The structured way or the Hard Way

Nothing can really replace the satisfaction of hands-on labs and building things.

To maximise overall understanding of how things work then, Kubernetes The Hard Way is clearly a very good approach.

However, that's not always optimal.

From a security perspective, spending a few hours on understanding just enough theory and then K8S networking and RBAC model is far more immediately useful - e.g. when analysing a security incident.

In that, the training paths from Cloud Native Computing Foundation (CNCF) (namely, Kubestronaut) provide a structured approach.

A bit of Kubestronaut

CNCF's Kubestronaut is pretty full on, comprising 2 theory exam and 3 lab exams.

These are the Kubernetes and Cloud Native / Security Associate (KCNA/KCSA), and the Certified Kubernetes Administrator / Application Developer / Security Specialist (CKA/CKAD/CKS).

The overall program may be quite substantial, but even a little bit goes a long way.

KCNA

Candidates who prefer to dive into hands-on may prefer starting with the Certified Kubernetes Administrator.

A general overview can be obtained from pursuing the Kubernetes and Cloud Native Associate (KCNA).

If desired, more complex learning can then build upon the fundamentals.

The learning path is a good introduction to all things K8S and I've found it to be quite useful, if a bit broad.

The KCNA exam is unlike other "associate" certifications with multiple choice exams.

Having taken 20+ Microsoft multiple choice exams, most at professional and higher level, KCNA is another thing altogether.

While generally logical, the questions do test your knowledge quite extensively, and the exam feels quite challenging.

Though the exam's not required if all that's desired is some fundamentals knowledge, it's a very worthwhile experience and a good test of candidate abilities.

Next Steps

Having completed the KCNA, the common suggested next paths are either focusing more on K8S administration or developer-centric concepts - so, either of the hands-on approaches (CKA/CKAD), or, completing the security associate path (KCSA) first.

Given that my focus is usually on security review, KCSA is the more logical next step.