← All 186 courses
CL-306 Cloud & Platform

Managed Kubernetes: EKS · AKS · GKE

Run Kubernetes the managed way on all three clouds: provisioning patterns, IAM/identity integration for pods, load-balancer and ingress controllers, node management, upgrades — including cloud-specific traps like pod-level security groups and workload identity federation.

B4Professional
5modules
33skill atoms
3role journeys
Curriculum

What this course covers.

5 modules, 33 named skill atoms. Expand any module to see them.

1Provisioning Patterns6 skill atoms
EKS/AKS/GKE creationIaC modulesmanaged vs self-managed node groupsCNI choice & pod IP exhaustionprivate control plane endpointscluster version & channel selection
2Identity to Pods7 skill atoms
IRSAworkload identitypod-managed identityOIDC provider trust setupservice account annotation mappingprojected token expirydebugging AccessDenied from inside a pod
3Traffic Integration7 skill atoms
cloud LB controllersingress per cloudAWS LB Controller target-type ip vs instanceApplication Gateway ingress controllerGKE Gateway APIACM & Key Vault certificate integrationhealth check path alignment
4Node & Upgrade Ops7 skill atoms
node poolssurge upgradesdisruption budgetscontrol plane then node orderingcordon & drain sequencingPDB deadlock on single-replica appsdeprecated API detection before upgrade
5Cross-Cloud Comparison Lab6 skill atoms
same app on two managed clustersdeltas memoload balancer provisioning behaviour differencesidentity binding deltasdefault storage class differencescost per cluster-hour
Where it fits

CL-306 in the role journeys.

This course appears in 3 of our 45 role journeys. Here is what a learner takes immediately before and after it in each.

Platform / DevOps Engineer

Professional stage
CL-318CL-306CL-308

Multi-Cloud Engineer

Professional stage
CL-301CL-306CL-401

AI Infrastructure Engineer

Professional stage
CL-311CL-306CL-310

Roles this course serves

The capability ladder

This course is authored to band B4.

Every course we run is written to one rung of the CASI ladder, so a plan can be assembled to take a team from where they are to where they need to be.

What do B1–B6 mean?The CASI Capability Ladder — click to expand

Every course targets a band on the CASI Capability Ladder — our six-band proficiency scale, anchored to open standards (O*NET, ESCO, NICE, NIST AI RMF, Bloom's). A band tells you how deep a course goes, and what evidence proves it.

What the learner can doTypical evidence
B1
AwareUnderstands concepts and vocabulary; uses tools with guidance
Knowledge checks
B2
FoundationPerforms standard tasks correctly in familiar contexts
Guided labs, autograded exercises
B3
PractitionerDelivers complete pieces of work independently
Scenario labs, proctored hands-on exams
B4
ProfessionalHandles production-grade complexity, trade-offs and failure modes
Break-fix drills, design defenses
B5
AdvancedEngineers systems end-to-end under constraints; leads others
Rubric-scored capstones, vivas
B6
ExpertSets direction; recognised authority across teams
Portfolio + panel evaluation

A note on B6. Courses in this catalog target B1–B5. B6 is not taught — it is recognised, through a portfolio and a panel, once someone is setting direction for others. Every journey here is built to land a learner at B5.

Next step

Run CL-306 for your team.

This course runs at several lengths depending on how deep you need to go and how much of it your people already have. Tell us who is being trained and we will scope it.

Add it to a training plan Talk to our team Check your team’s level free