Anthos unifies the management of infrastructure and applications across on-premises, edge, and in multiple public clouds with a Google Cloud-backed control plane for consistent operation at scale.
Learn to create, integrate, or modernize solutions using secure, scalable microservices architectures in hybrid environments, whether you’re on-premises, on Google Cloud, or distributed across several cloud providers. You will learn about networking, service mesh, config management, and their underlying control-planes, so you can begin to understand the full scope of the platform’s capabilities.
Overview
Discover how to modernize, manage, and observe applications using Kubernetes—whether the application is deployed on-premises or on Google Cloud.
This course uses lectures and hands-on labs to help you explore and deploy using Kubernetes Engine (GKE), GKE Connect, Istio service mesh, and Anthos Config Management capabilities that will enable you to work with modern applications, even when they are split among multiple clusters hosted by multiple providers, or on-premises.
This is a continuation of Architecting with GKE, and you’ll need hands-on experience with the technologies covered in that course in order to benefit from this course.
Skills Covered
- Deploy Istio service mesh control-plane and proxies using the Helm Kubernetes package manager or using the Istio on GKE add-on.
- Centrally observe, discover, and monitor your microservices-based applications across clusters using Istio service mesh adapters, including Prometheus, Grafana, or Kiali, or Stackdriver.
- Define and manage multi-cluster services, with ingress, using open-source Istio via shared and multi-control plane topologies.
- Connect and manage on-premises clusters, and workloads using GKE On-Prem.
- Enable consistent policy enforcement across multi-cluster environments using a configuration-as-code approach and your secure Git repository.
Prerequisites
- Completed Google Cloud Platform Fundamentals: Core Infrastructure or have equivalent experience, and
- Completed Architecting with Google Kubernetes Engine or have equivalent experience
Target Audience
This class is primarily intended for the following participants:
- Technical employees using GCP, including customer companies, partners and system integrators: deployment engineers, cloud architects, cloud administrators, system engineers , and SysOps/DevOps engineers.
- Individuals using GCP to create, integrate, or modernize solutions using secure, scalable microservices architectures in hybrid environments.
Module 1: Anthos Overview
- Describe challenges of hybrid cloud
- Discuss modern solutions
- Describe the Anthos Technology Stack
Module 2: Managing Hybrid Clusters using Kubernetes Engine
- Understand Anthos GKE hybrid environments, with Admin and User clusters
- Register and authenticate remote Anthos GKE clusters in GKE Hub
- View and manage registered clusters, in cloud and on-premises, using GKE Hub
- View workloads in all clusters from GKE Hub
- Lab: Managing Hybrid Clusters using Kubernetes Engine
Module 3: Introduction to Service Mesh
- Understand service mesh, and problems it solves
- Understand Istio architecture and components
- Explain Istio on GKE add on and it’s lifecycle, vs OSS Istio
- Understand request network traffic flow in a service mesh
- Create a GKE cluster, with a service mesh
- Configure a multi-service application with service mesh
- Enable external access using an ingress gateway
- Explain the multi-service example applications: Hipster Shop, and Bookinfo
- Lab: Installing Open Source Istio on Kubernetes Engine
- Lab: Installing the Istio on GKE Add-On with Kubernetes Engine
Module 4: Observing Services using Service Mesh Adapters
- Understand service mesh flexible adapter model
- Understand service mesh telemetry processing
- Explain Stackdriver configurations for logging and monitoring
- Compare telemetry defaults for cloud and on-premises environments
- Configure and view custom metrics using service mesh
- View cluster and service metrics with pre-configured dashboards
- Trace microservice calls with timing data using service mesh adapters
- Visualize and discover service attributes with service mesh
- Lab: Telemetry and Observability with Istio
Module 5: Managing Traffic Routing with Service Mesh
- Understand the service mesh abstract model for traffic management
- Understand service mesh service discovery and load balancing
- Review and compare traffic management use cases and configurations
- Understand ingress configuration using service mesh
- Visualize traffic routing with live generated requests
- Configure a service mesh gateway to allow access to services from outside the mesh
- Apply virtual services and destination rules for version-specific routing
- Route traffic based on application-layer configuration
- Shift traffic from one service version to another, with fine-grained control, like a canary deployment
- Lab: Managing Traffic Routing with Istio and Envoy
Module 6: Managing Policies and Security with Service Mesh
- Understand authentication and authorization in service mesh
- Explain mTLS flow for service to service communication
- Adopt mutual TLS authentication across the service mesh incrementally
- Enable end-user authentication for the frontend service
- Use service mesh access control policies to secure access to the frontend service
- Lab: Managing Policies and Security with Service Mesh
Module 7: Managing Policies using Anthos Config Management
- Understand the challenge of managing resources across multiple clusters
- Understand how a Git repository is as a configuration source of truth
- Explain the Anthos Config Management components, and object lifecycle
- Install and configure Anthos Config Management, operators, tools, and related Git repository
- Verify cluster configuration compliance and drift management
- Update workload configuration using repo changes
- Lab: Managing Policies in Kubernetes Engine using Anthos Config
Module 8: Configuring Anthos GKE for Multi-Cluster Operation
- Understand how multiple clusters work together using DNS, root CA, and service discovery
- Explain service mesh control-plane architectures for multi-cluster
- Configure a multi-service application using service mesh across multiple clusters with multiple control-planes
- Configure a multi-service application using service mesh across multiple clusters with a shared control-plane
- Configure service naming/discovery between clusters
- Review ServiceEntries for cross-cluster service discovery
- Migrate workload from a remote cluster to an Anthos GKE cluster
- Lab: Configuring GKE for Multi-Cluster Operation with Istio
- Lab: Configuring GKE for Shared Control Plane Multi-Cluster Operation
Dates & Locations
September 14, 2026 - September 15, 2026
September 14, 2026 - September 15, 2026
December 1, 2026 - December 2, 2026
December 1, 2026 - December 2, 2026
Exam & Certification
Note:Â There is no exam directly associated with this course. However, Google Cloud offers an extensive portfolio of industry-recognized certifications that can help you stand out as a tech professional in 2025 and beyond. Obtaining a Google Cloud certified credential is one of the most effective ways to validate your skills and accelerate your career.
With our expert-led training, you’ll be prepared to:
- Master in-demand capabilities across Cloud, Data & AI, and Cybersecurity — areas driving global digital transformation.
- Prove your expertise with a globally respected credential recognized by employers worldwide.
- Advance your career by enhancing your credibility, increasing your earning potential, and opening doors to new opportunities.
Explore our full range of Google Cloud certifications and start building the skills that matter today.
Training & Certification Guide
Frequently Asked Questions
Speak to a Training Consultant
All courses are HRD Claimable.
Get in touch with our team via the form or WhatsApp us on +6011-5119 6631
