Shared Kubernetes practices for engineering teams working together

We offer private, instructor-led Kubernetes training for developers, SREs, data engineers, architects, and security staff who work with the same application platform.

The groups need a common interpretation of workload state, release health, and access. Understanding the same behavior does not require everyone to administer the cluster.

LearnKube follows one reference service through deployment and review. Participants connect Kubernetes mechanisms to the observations, decisions, and actions that belong to their roles.

Hands-on learning and the skills engineers take back to work.

Preview: course-wide figures are not yet available.

  • Hands-on learning
    Of instruction time spent on labs and challenges.
  • Troubleshooting confidence
    Of respondents report greater confidence diagnosing Kubernetes problems.
  • Relevant to your work
    Of respondents say the course addressed their engineering responsibilities.
  • Skills put into practice
    Of respondents applied their new skills at work within 90 days.
  • Use a shared workload model by tracing desired state, controllers, and observed status, so each role can explain the same deployment consistently.
  • Apply common review questions by examining release health and required access against supplied criteria, so workload-specific choices remain explicit.
  • Clarify the ownership boundary by tracing an application change through platform and security controls, so each group knows its action and handoff.
  • Review a service together by comparing configuration and observed behavior, so the groups can identify gaps using the same technical evidence.

Engineering roles inspect the same workload through different tools and responsibilities. Kubernetes distinguishes desired state from observed status, while readiness answers a narrower traffic question. A shared release discussion needs those distinctions. The course follows one service so participants can compare what each signal establishes and which decision still requires application or platform knowledge.

I ask each role what it means when they say the application is ready. If one person means a running process and another means acceptable user behavior, the group needs evidence before it needs another checklist.

— Daniele Polencic, LearnKube founder and Kubernetes instructor

Decision to alignCommon basisShared exercise
Meaning of readyProbes and endpointsCompare observed signals
Version under reviewImage and Pod templateInspect the same release
Permitted changeResources and access scopeSeparate role actions
Release handoffStatus and required evidenceCompare review summaries

Phreesia brought software, SRE, data-engineering, and architecture roles into private Kubernetes training. The organization then explored broader familiarity for developers, security, and data-center operations.

LearnKube delivered the initial training. Dan, Phreesia's CTO, reported positive feedback while identifying an efficiency consideration for developer groups:

The feedback I got was positive! I think we could make the time more efficient with prebuilt images rather than a build-your own approach for devs, but I understand the logic behind it.

— Dan, CTO at Phreesia.

This proposed agenda carries a reference service through the technical modules. Tasks and depth vary by responsibility, with comparison points that connect the groups.

Day 1

We connect images, Pods, Deployments, Services, and probes to the reference service. Familiar packaging steps can be shortened so participants can compare what their health and release checks establish.

  • Inspect the same deployment from application, operations, and security perspectives.
  • Compare the evidence each role needs before it considers a release usable.

Day 2

We use Helm and compare Kustomize to expose defaults and overrides. The group connects these resources to control-plane components, controllers, and nodes without assuming identical administrative access.

  • Review a shared template and identify workload choices and platform-supplied settings.
  • Map a resource change to its controller and responsible engineering group.

Day 3

We trace DNS, Services, ingress, network policy, and placement through the same service. The group considers where a service mesh changes the responsibility or evidence required.

  • Have application and platform roles explain the same request path.
  • Compare a blocked connection with an unsuitable placement and agree which evidence separates them.

Day 4

We connect persistent data, secrets, autoscaling signals, and RBAC to the reference workload. Participants review its requirements using shared questions while retaining role-specific actions.

  • Compare the application's data and resource requirements with the platform controls.
  • Review the complete example together and record the decisions that require different owners.

Your teams, shared review practices, and responsibility boundaries can shape the agenda. Get in touch to tailor the workshop to how your teams work together.

When several roles describe the same deployment differently, the instructor can ask them to point to the supporting state or request. A shared example separates differences in terminology from genuine differences in responsibility.

Tell us which teams use the platform, which deployment decisions need a common interpretation, and how their responsibilities differ. We will recommend a shared course focus and role-specific exercises.