Service Mesh Academy

Hands-on, engineer-focused training from the creators of the service mesh

These monthly live workshops provide hands-on training on Linkerd and related CNCF projects. From setting up mTLS, to securing multi-cluster communication, to fine-grained network policy, you'll learn everything you need for successfully running a service mesh in production.

Get notified about the next workshop

Upcoming Workshops

Dec 15
A deep dive into Kubernetes mTLS with Linkerd

Mutual TLS (mTLS) is a hot topic in the Kubernetes world, especially for anyone tasked with getting “encryption in transit” for their applications. But what is it and how does it compare to alternatives such as encryption at the CNI level?


On-demand Workshops

What really happens at startup: a deep dive into Linkerd, init containers, CNI plugins, and more

Nov 17, 2022

Taught by:


Take a deep dive into what really happens when a pod starts running with Linkerd! Get all the details about init containers, Linkerd's interaction with the firewall and the CNI, and the complex business underlying Kubernetes' container and networking model. Learn everything you wanted to know about container startup ordering and how to deal with it.

A deep dive into route-based policy

Sep 16, 2022

Taught by:


Linkerd has been able to do workload-based policy for a very long time—for example, it has long been possible to allow workload A to talk to workload B but not workload C. However, it was still up to application developers to write extra code if, for example, workload A should be allowed to ask workload B to check a message but not to sign it.

Upgrading to Linkerd 2.12: Zero-trust-ready route-based policy, Gateway API, access logging

Sep 1, 2022

Taught by:

William Morgan & Jason Morgan

In this webinar, you'll hear all about the Linkerd 2.12 release and what you need to know to upgrade. This massive release introduces route-based policy to Linkerd, allowing users to define and enforce authorization policies based on HTTP paths or gRPC methods in a fully zero-trust way.

Seeing the invisible: Observability with Linkerd

Aug 18, 2022

Taught by:


During this workshop, attendees will learn how to use a service mesh to monitor their applications in a way that's transparent, uniform across services, and provides detailed information about important application information such as HTTP routes and gRPC methods.

Multi-cluster failover using Linkerd

Jul 14, 2022

Taught by:

Eliza Weisman

Failover across clusters is a great way to improve the overall uptime and reliability of Kubernetes applications. While whole-cluster failover can be accomplished at the global ingress layer, failing over individual services is a little more difficult.

Enterprise PKI in the cloud-native world with Linkerd and cert-manager

Jun 16, 2022

Taught by:

Richard Wall & Matei David

Migrating an existing enterprise PKI to Kubernetes can be daunting — there are so many moving parts to achieving trust across boundaries!

Secure Multi-cluster Kubernetes with Linkerd

May 5, 2022

Taught by:

Alejandro Pedraza & Jason Morgan

Whether for disaster recovery, multi-tenancy, or user-facing latency, deploying applications across multiple clusters is an increasingly common approach to Kubernetes. Unfortunately, while Kubernetes gives you many reasons to run multiple clusters, it provides you with very little help in doing so.

Certificate management with Linkerd

Mar 17, 2022

Taught by:

Charles Pretzer

In this workshop, we'll cover the basics of TLS certificate management in Linkerd. While Linkerd issues, rotates, and validates per-pod TLS certificates automatically, the treatment of per-cluster issuer credentials and global trust root credentials can differ based on security goals and organizational policies.

A guide to end-to-end encryption with Emissary-ingress and Linkerd

Feb 17, 2022

Taught by:

Daniel Bryant & Jason Morgan

In this hands-on workshop, we'll encrypt application calls end-to-end with Emissary-ingress, Linkerd, Kubernetes, and Envoy — four CNCF projects. Members of the Emissary-ingress and Linkerd teams will share best practices to get ingress TLS, in-cluster mTLS, advanced L7 routing, rate limiting, embedded authentication, and more.

Locking down your Kubernetes cluster with Linkerd

Jan 13, 2022

Taught by:

William Morgan

In this hands-on workshop, we cover the basics of locking down in-cluster network traffic using the new traffic policies introduced in Linkerd 2.11.

Linkerd in production 101: what you need to know

Dec 7, 2021

Taught by:

Jason Morgan & Charles Pretzer

In this hands-on session, we’ll walk you through the basics of what you need to know to successfully deploy and operate Linkerd in production environments — from operational monitoring to setting up TLS certificates, per-route metrics, fine-grained traffic policy, and more.

A deep dive into Kubernetes mTLS with Linkerd

Nov 16, 2021

Taught by:

Matei David

Mutual TLS (mTLS) is a hot topic in the Kubernetes world, especially for anyone tasked with getting “encryption in transit” for their applications. In this workshop, we give you a solid understanding of what mTLS is, how it works, and how it compares to alternatives.