From legacy Azure infrastructure to a Kubernetes platform

Private, instructor-led training for DevOps and integration engineers who need to move Azure-hosted services onto a shared Kubernetes platform.

Your team already knows how each service runs. A shared platform needs consistent release processes, clear access rules, and resource controls for services with different needs.

LearnKube connects those requirements to Kubernetes through a sample integration service. Your engineers will practice repeatable releases, dependency access, and diagnosis within a shared cluster.

Hands-on learning and the skills engineers take back to work.

Preview: course-wide figures are not yet available.

  • Hands-on learning
    Of instruction time spent on labs and challenges.
  • Troubleshooting confidence
    Of respondents report greater confidence diagnosing Kubernetes problems.
  • Relevant to your work
    Of respondents say the course addressed their engineering responsibilities.
  • Skills put into practice
    Of respondents applied their new skills at work within 90 days.
  • Deploy an integration service by defining workloads, configuration, and release templates, so another engineer can repeat the deployment.
  • Preserve service boundaries by applying access rules, network policies, and resource controls, so shared infrastructure supports each service's requirements.
  • Diagnose failed integrations by tracing DNS, endpoints, and credentials, so engineers distinguish application problems from platform restrictions.
  • Define the self-service boundary by documenting permitted changes and escalation paths, so service teams know what they can operate independently.

Azure-hosted services can depend on different deployment scripts, identities, and infrastructure configuration. A shared Kubernetes platform uses common APIs for workloads, but each service keeps its own dependencies. Engineers need to separate application configuration from the platform tools that handle traffic, access, and capacity.

A namespace groups resources, but it does not automatically isolate their traffic. I want teams to prove permitted connections and API actions before they treat shared infrastructure as a secure replacement for their existing service boundaries.

— Daniele Polencic, LearnKube founder and Kubernetes instructor

Current task or requirementNew concept or decisionPractice
Release a custom serviceDeployments and Helm releasesRepeat a service release
Separate integration workloadsNamespaces and network policiesDiagnose a blocked dependency
Supply service credentialsSecrets and workload identityTrace credential delivery
Share infrastructure capacityResource requests and limitsInspect resource pressure

Parloa's platform initiative includes a transition from legacy Azure infrastructure to a standardized Kubernetes-based platform. Its integration services need security, isolation, resource management, reusable pipelines, and self-service capabilities.

For a transition like this, engineers need shared deployment patterns that retain service-specific requirements. We recommend a four-day workshop with particular attention to release configuration, service boundaries, and dependency diagnosis.

This proposed agenda focuses on one integration service. Each day introduces a platform responsibility for the service team to learn.

Day 1

We show how container configuration relates to Pods, Deployments, Services, and probes. You will compare release behavior and see how readiness affects traffic during updates.

  • Deploy a sample integration service with its runtime configuration.
  • Introduce a release that fails readiness and restore the previous version.

Day 2

You will compare Helm and Kustomize for shared deployment patterns. We explain cluster architecture, reconciliation, and where service configuration ends and platform components begin.

  • Create a reusable Helm chart with environment-specific values.
  • Simulate a node failure and inspect how the service recovers.

Day 3

We explain DNS, Services, ingress, and network policies along the application's traffic path. You will discuss service mesh use cases and placement controls for shared nodes.

  • Trace a request from ingress through the integration service to a dependency.
  • Diagnose a network policy that blocks required communication.

Day 4

You will connect secrets, persistent storage, and autoscaling to service requirements. We explain authentication and RBAC as the basis for application-team access.

  • Configure credentials and persistent data for the integration service.
  • Apply load and inspect autoscaling behavior alongside resource limits.

Your integration services, Azure dependencies, and platform-support responsibilities can shape the agenda. Get in touch to tailor the workshop to your shared Kubernetes platform adoption.

If an engineer thinks a namespace blocks all cross-team traffic, the instructor can show how connections between namespaces behave. The team can then apply a network policy and discuss the separate role of RBAC.

The instructor Salman was very knowledgable and engaged, and made sure to cover specific topics that were relevant to our expectations from what we would learn from the course.

— Isaac, GIS Developer at EIFER.

Tell us how your Azure services run, which capabilities the Kubernetes platform will provide, and who will support each layer. We will recommend exercises around your release and access requirements.