Service Mesh Academy

Hands-on, engineer-focused training from the creators of the service mesh

These monthly live workshops provide hands-on training on Linkerd and related CNCF projects. From setting up mTLS, to securing multi-cluster communication, to fine-grained network policy, you'll learn everything you need for successfully running a service mesh in production.

Get notified about the next workshop

Upcoming Workshops

Aug 18
Service mesh observability with Linkerd

During this workshop, attendees will learn how to use a service mesh to monitor their applications in a way that's transparent, uniform across services, and provides detailed information about important application information such as HTTP routes and gRPC methods.


On-demand Workshops

Multi-cluster failover using Linkerd

Failover across clusters is a great way to improve the overall uptime and reliability of Kubernetes applications. While whole-cluster failover can be accomplished at the global ingress layer, failing over individual services is a little more difficult.

Enterprise PKI in the cloud-native world with Linkerd and cert-manager

Migrating an existing enterprise PKI to Kubernetes can be daunting — there are so many moving parts to achieving trust across boundaries!

Secure Multi-cluster Kubernetes with Linkerd

Whether for disaster recovery, multi-tenancy, or user-facing latency, deploying applications across multiple clusters is an increasingly common approach to Kubernetes. Unfortunately, while Kubernetes gives you many reasons to run multiple clusters, it provides you with very little help in doing so.

Certificate management with Linkerd

In this workshop, we'll cover the basics of TLS certificate management in Linkerd. While Linkerd issues, rotates, and validates per-pod TLS certificates automatically, the treatment of per-cluster issuer credentials and global trust root credentials can differ based on security goals and organizational policies.

A guide to end-to-end encryption with Emissary-ingress and Linkerd

In this hands-on workshop, we'll encrypt application calls end-to-end with Emissary-ingress, Linkerd, Kubernetes, and Envoy — four CNCF projects. Members of the Emissary-ingress and Linkerd teams will share best practices to get ingress TLS, in-cluster mTLS, advanced L7 routing, rate limiting, embedded authentication, and more.

Locking down your Kubernetes cluster with Linkerd

In this hands-on workshop, we cover the basics of locking down in-cluster network traffic using the new traffic policies introduced in Linkerd 2.11.

Linkerd in production 101: what you need to know

In this hands-on session, we’ll walk you through the basics of what you need to know to successfully deploy and operate Linkerd in production environments — from operational monitoring to setting up TLS certificates, per-route metrics, fine-grained traffic policy, and more.

A deep dive into Kubernetes mTLS with Linkerd

Mutual TLS (mTLS) is a hot topic in the Kubernetes world, especially for anyone tasked with getting “encryption in transit” for their applications. In this workshop, we give you a solid understanding of what mTLS is, how it works, and how it compares to alternatives.