Hands-on, engineer-focused training from the creators of the service mesh

The Linkerd team has been hard at work, as always, and soon enough all their hard work will be released for you to enjoy! In this Service Mesh Academy, we're going to cover the highlights of what's coming in Linkerd 2.13.

"GitOps" and "service mesh" may not be things you immediately think of together – but maybe they should be! These two wildly different technologies are each enormously capable independently, and combined they deliver far more than the sum of their parts.

The first problem that any cloud-native application has to solve is how to communicate with the world outside the cluster. This is “the ingress problem”, and while Linkerd doesn’t have to solve it directly, it is absolutely a major part of successfully getting your application working with Linkerd!

Mutual TLS (mTLS) is a hot topic in the Kubernetes world, especially for anyone tasked with getting “encryption in transit” for their applications. But what is it and how does it compare to alternatives such as encryption at the CNI level?

Take a deep dive into what really happens when a pod starts running with Linkerd! Get all the details about init containers, Linkerd's interaction with the firewall and the CNI, and the complex business underlying Kubernetes' container and networking model. Learn everything you wanted to know about container startup ordering and how to deal with it.

Linkerd has been able to do workload-based policy for a very long time—for example, it has long been possible to allow workload A to talk to workload B but not workload C. However, it was still up to application developers to write extra code if, for example, workload A should be allowed to ask workload B to check a message but not to sign it.

In this webinar, you'll hear all about the Linkerd 2.12 release and what you need to know to upgrade. This massive release introduces route-based policy to Linkerd, allowing users to define and enforce authorization policies based on HTTP paths or gRPC methods in a fully zero-trust way.

During this workshop, attendees will learn how to use a service mesh to monitor their applications in a way that's transparent, uniform across services, and provides detailed information about important application information such as HTTP routes and gRPC methods.

Failover across clusters is a great way to improve the overall uptime and reliability of Kubernetes applications. While whole-cluster failover can be accomplished at the global ingress layer, failing over individual services is a little more difficult.

Migrating an existing enterprise PKI to Kubernetes can be daunting — there are so many moving parts to achieving trust across boundaries!

Whether for disaster recovery, multi-tenancy, or user-facing latency, deploying applications across multiple clusters is an increasingly common approach to Kubernetes. Unfortunately, while Kubernetes gives you many reasons to run multiple clusters, it provides you with very little help in doing so.

In this workshop, we'll cover the basics of TLS certificate management in Linkerd. While Linkerd issues, rotates, and validates per-pod TLS certificates automatically, the treatment of per-cluster issuer credentials and global trust root credentials can differ based on security goals and organizational policies.

In this hands-on workshop, we'll encrypt application calls end-to-end with Emissary-ingress, Linkerd, Kubernetes, and Envoy — four CNCF projects. Members of the Emissary-ingress and Linkerd teams will share best practices to get ingress TLS, in-cluster mTLS, advanced L7 routing, rate limiting, embedded authentication, and more.

In this hands-on workshop, we cover the basics of locking down in-cluster network traffic using the new traffic policies introduced in Linkerd 2.11.

In this hands-on session, we’ll walk you through the basics of what you need to know to successfully deploy and operate Linkerd in production environments — from operational monitoring to setting up TLS certificates, per-route metrics, fine-grained traffic policy, and more.

Mutual TLS (mTLS) is a hot topic in the Kubernetes world, especially for anyone tasked with getting “encryption in transit” for their applications. In this workshop, we give you a solid understanding of what mTLS is, how it works, and how it compares to alternatives.