Connect, manage, and observe microservices-based applications with security-focused Istio and Red Hat® OpenShift.

As applications evolve into collections of decentralized services, managing communications and security between those services becomes more difficult. Red Hat OpenShift Service Mesh provides a uniform way to connect, manage, and observe microservices-based applications.

The Building Resilient Microservices with Istio and Red Hat OpenShift Service Mesh (DO328) teaches you how to control, manage, trace, monitor, and test your microservices.

Overview

Control, manage, trace, monitor, and test your microservices with Red Hat OpenShift Service Mesh

Building Resilient Microservices with Istio and Red Hat OpenShift Service Mesh (DO328) teaches students installation, service monitoring, service management, and service resilience of Red Hat OpenShift® Service Mesh.

Openshift created an enterprise-ready, multi-tenant platform that made deploying and scaling microservice applications efficient and easily repeatable. But as these architectures become larger and more complex, defining how these services interact with each other becomes increasingly difficult. Red Hat OpenShift Service Mesh comprises 3 products—Istio, Jaeger, and Kiali—that facilitate service interaction management, provide service tracing, and create a visual representation of communication pathways.

This course is based on Red Hat OpenShift® Container Platform 4.4 and Red Hat OpenShift Service Mesh 1.1.

Skills Covered

  • Install Red Hat OpenShift Service Mesh on an OpenShift cluster.
  • Apply release strategies by controlling service traffic.
  • Build service resilience with load balancing and failovers.
  • Test service resilience with chaos testing.
  • Enforce service security.
  • Observe, measure, and trace network traffic with OpenShift Service Mesh.

Prerequisites

Target Audience

This course is designed for developers who want to deploy and scale microservices applications.

Course Curriculum

Module 1: Introduce Red Hat OpenShift Service Mesh

  • Describe the basic concepts of microservice architecture and OpenShift Service Mesh.

Module 2: Observe a Service Mesh

  • Trace and visualize an OpenShift Service Mesh with Jaeger and Kiali.

Module 3: Control Service Traffic

  • Manage and route traffic with OpenShift Service Mesh.

Module 4: Release Applications with OpenShift Service Mesh

  • Release applications with canary and mirroring release strategies.

Module 5: Test Service Resilience with Chaos Testing

  • Gauge the resiliency of an OpenShift Service Mesh with chaos testing.

Module 6: Build Resilient Services

  • Use OpenShift Service Mesh strategies to create resilient services.

Module 7: Secure an OpenShift Service Mesh

  • Encrypt and secure services in your application with OpenShift Service Mesh.

Dates & Locations

Let’s make it work for you

Can’t find a date that fits? Need to train your whole team? Looking for a discount?
Speak to one of our learning experts today.

There’s no intakes scheduled for this course at the moment!

For enquiries, please contact our reps.

Exam & Certification

Red Hat Certified Specialist in Building Resilient Microservices.

A Red Hat Certified Specialist in Building Resilient Microservices has demonstrated the ability to manage and configure a service mesh of microservices using Red Hat OpenShift Service Mesh in the Red Hat OpenShift Platform environment.

A Red Hat Certified Specialist in Building Resilient Microservices is able to:

  • Understand and work with Red Hat Openshift Service Mesh Custom Resources
  • Deploy and configure applications on Service Mesh
  • Work with request routing and traffic management.
  • Understand the deployment/release pattern strategies that Red Hat OpenShift Service Mesh® can help with, providing more complex operational functionality, including A/B testing and canary releases
  • Configure and manage advanced routing techniques to control the flow and API calls between services
  • Send the inbound and outbound traffic from and to the mesh, managing the ingress and egress traffic control policies
  • Be able to configure the network resilience and the fault tolerance dynamically at runtime to ensure the failing nodes and prevent localized failures from cascading
  • Work and configure Service Mesh policy checks
  • Understand and configure the workload-to-workload communication using the implemented architecture for authentication and authorization security in Service Mesh
  • Understand and work with the fault injection mechanisms to introduce errors and chaos testing into the system to test the failure recovery capacity of the applications

Training & Certification Guide

The Red Hat Certified Specialist in Building Resilient Microservices exam (EX328) tests your skills and knowledge with regard to creating and managing a resilient mesh of microservices, using Red Hat OpenShift Container Platform and Red Hat OpenShift Service Mesh. The exam focuses on the basic skills required to use Red Hat Service Mesh to configure and manage the resilient operation of an application composed of several microservices with a persistent data store.

By passing this exam, you become a Red Hat Certified Specialist in Building Resilient Microservices, which also counts toward earning a Red Hat Certified Architect (RHCA®) certification.

This exam is based on Red Hat® OpenShift® Service Mesh 2.1 on Red Hat® OpenShift® Container Platform 4.6.

The following audiences may be interested in earning the Red Hat Certified Specialist in Building Resilient Microservices credential:

  • Administrators or architects in a DevOps role who are responsible for managing a Red Hat OpenShift Container Platform environment
  • Administrators or architects in a DevOps role who are responsible for implementing a Red Hat OpenShift Container Platform environment
  • Application developers who are responsible for managing multiple microservices or supporting an existing group of microservices on the Red Hat OpenShift Container Platform

The prerequisites for this exam are a working knowledge of Red Hat OpenShift applications such as that provided by the Red Hat OpenShift Development II: Containerizing Applications (DO288) and Building Resilient Microservices with Istio and Red Hat OpenShift Service Mesh (DO328) courses. Specifically, candidates for this exam should able to use Red Hat OpenShift Container Platform to:

  • Create and work with multiple Red Hat OpenShift projects
  • Deploy applications
  • Work with container images
  • Work with Kubernetes resources written in either JSON or YAML format
  • Understand the Kubernetes Custom Resource Definitions (CRD)

As part of this exam, you should be able to perform these tasks:

  • Understand and work with Red Hat Openshift Service Mesh Custom Resources
  • Deploy and configure applications on Service Mesh:
    • Install sidecar manually in pod applications
    • Automatic sidecar injection using annotations
    • Understand the configuration of network policies (Mesh members, external services, etc.)
  • Work with request routing and traffic management.
    • Be able to configure static and dynamic request routing to different versions of an application
  • Understand the deployment/release pattern strategies that Red Hat OpenShift Service Mesh® can help with, providing more complex operational functionality, including A/B testing and canary releases
  • Configure and manage advanced routing techniques to control the flow and API calls between services
    • Traffic shifting migration within the mesh producing between different services A/B testing, canary rollouts, and staged rollouts with percentage-based traffic splits, and dark launches for a selective group of users
    • Take profit of the traffic mirroring capabilities to bring changes to the microservices. Be able to produce shadowing launches copying the live traffic
  • Send the inbound and outbound traffic from and to the mesh, managing the ingress and egress traffic control policies
    • Define and control gateway entry points into the mess for the incoming traffic allowing pass requests through the services
    • Enable controlled access to external publicly accessible services from within the istio cluster
  • Be able to configure the network resilience and the fault tolerance dynamically at runtime to ensure the failing nodes and prevent localized failures from cascading
    • Control the waiting time for replies defining timeouts
    • Enhance service availability specifying the number of request attempts with retry strategies
    • Limit for calls within a service and prevent access to an overloaded or failing host applying a circuit breaker mechanism
    • Specify the connection and ejection pool policies configuring the load balancing destination rules
  • Work and configure Service Mesh policy checks
    • Define enforcement features through policies, configure local and global rate limiting, and define access quotas
    • Enable and configure the authorization for denial and allow policies applied to a workload
  • Understand and configure the workload-to-workload communication using the implemented architecture for authentication and authorization security in Service Mesh
    • Provide service-to-service communication with secure naming authorization
    • Tunnel the service-to-service communication using mutual TLS communication.
    • Map the identity of the service name with secure naming
    • Define peer authentication policies to enforce the mutual TLS mode
    • Define the required end-user authentication policy check.  Define and configure access authorization rules for service and end-user to workload communications
  • Understand and work with the fault injection mechanisms to introduce errors and chaos testing into the system to test the failure recovery capacity of the applications
    • Inject timing failures producing delays to mimic increased network latency or overloaded services
    • Produce crash failures with error response injections and TCP connection failures

Microservice architectures with Red Hat OpenShift Service Mesh enable organizations to improve application security, resilience, and scalability, while decreasing developer overhead. Red Hat OpenShift Service Mesh adds an additional level of security for data in transit with mutual TLS encryption and a zero-trust network. This leads organizations to improved time to market, as well as improved insight into their microservice architecture, by being able to visualize and trace data flow throughout their applications. These insights can dictate better resource allocation for applications as well as more quickly identifying defects in specific microservices.

You will be able to use the concepts in this course to simplify and more efficiently manage their service interactions. You will learn how to install and configure Red Hat OpenShift Service Mesh to define, monitor, manage, and secure service interaction within their microservice architecture. This course is intended to illustrate the ease of Red Hat OpenShift Service Mesh’s “sidecar” approach and to highlight the benefits of service resilience and monitoring that the product provides.

Why train with Trainocate

Speak to a Training Consultant

All courses are HRD Claimable.
Get in touch with our team via the form or WhatsApp us on +6011-5119 6631

Preferred mode of training
Checkboxes