Welcome to the Kubernetes Compute Fundamentals Lab. This is the first lab that is part of a series of labs presented through the Kubernetes Fundamentals Learning Path. This lab will focus on the compute fundamentals of Kubernetes as it relates to engineers deploying workloads onto an existing Kubernetes cluster.

The VMware Tanzu Experience Lab provides the lab user with a high-level overview of VMware Tanzu suite of administrative and monitoring tools that consist of Tanzu Mission Control(TMC), Tanzu Service Mesh (TSM) and Tanzu Observability.

This lab shows developers how to deploy their applications to Red Hat OpenShift Container Platform 4 (OpenShift), the premier Enterprise-level container platform based on Kubernetes. Leveraging the Source-to-Image feature, the lab provides hands-on instructions on migrating non-containerized, and various levels of containerized applications to OpenShift.

In this hands-on lab, you will take on an exciting journey into the world of Kubernetes. Whether you are a beginner or have some experience with Kubernetes, this lab will provide you with the opportunity to learn and practice deploying a basic Kubernetes cluster from scratch on a Linux operating system.

This lab is an experience of an organization who aspires for digital transformation but fails to realize the technical quality and performance required to fulfill an innovative business objective. We'll walk through a scenario of a time-sensitive business strategy, common issues encountered during development and operations of a custom technology platform, then apply procedural adaptations which increase efficiency, security, and reliability for the technical foundation of the business solution.

The purpose of this lab is to demo how NGINX Controller API Management Module and NGINX App Protect can secure the OAuth Authorization Code flow, which is core to Open Banking specifications. The NGINX App Protect will be deployed as an Ingress Controller for Kubernetes and will provide both negative and positive security by ingesting the OpenAPI declaration file. The NGINX API Gateway will be controlled by NGINX Controller, will publish the application API based on the same OpenAPI declaration file, will provide JWT authentication and authorization and enforce rate limiting. The deployment and configuration of these elements will be performed automatically through a CI/CD pipeline. ELK dashboards will be used for visualization purposes and, lastly, a DAST tool will also be run as part of the CI/CD pipeline. BIG-IP APM is deployed as both Authorization Server with OpenID Connect support and as OAuth Client, in separate instances.

Use Docker, Ansible and Terraform to create a Certificate Authority with Hashicorp Vault and F5 BIGIP. Ephemeral certificates are rotated every 2 minutes.

Systems are at higher risk without a concerted, repeatable application security configuration process. In this lab, you will learn how to build a declarative AWAF policy and achieve OWASP Top Ten (2021) compliance with the BIG-IP OWASP Compliance Dashboard. A complete CI/CD pipeline is used to deploy our AWAF policy to the BIG-IP system using Application Services 3 Extension (AS3) and Ansible.