Learning Paths
Prerequisite chains compiled from “Before you begin” sections and the concept hierarchy. Each concept links to its static docs page, where the full prerequisite/unlock graph is rendered as crawlable links. This page itself is the server-rendered prerequisite tree — no JS required to read it.
- Add-ons — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- Admission Controller — understand first: CustomResourceDefinition, Cluster Operations · unlocks: Cluster Operations, Immutable Infrastructure, ConfigMap, Extensions, API server, Aggregation Layer, kube-controller-manager, Application Architect, kOps (Kubernetes Operations), Network Policy, Toleration, Operator pattern, Istio, Garbage Collection, Object, Finalizer, Init Container, Gateway API, Security Context, Cluster Architect, Job, Add-ons, Container Lifecycle Hooks, Mirror Pod, API Group, SIG (special interest group)
- Affinity — understand first: Label, Probe, CustomResourceDefinition
- Aggregation Layer — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- Annotation — understand first: Label, Probe
- API Group — understand first: CustomResourceDefinition, Cluster Operations, Admission Controller
- API resource — understand first: CustomResourceDefinition
- API server — understand first: CustomResourceDefinition, Admission Controller · unlocks: etcd
- API-initiated eviction — understand first: Label, Probe, LimitRange
- App Container — understand first: Label, Probe, LimitRange
- Application Architect — understand first: CustomResourceDefinition, Cluster Operations, Admission Controller
- Application Developer — understand first: Label, Probe, LimitRange
- Applications — understand first: Label, Probe, LimitRange
- Approver — understand first: Label, Probe, LimitRange
- cAdvisor — understand first: CustomResourceDefinition, CRI-O, Container network interface (CNI)
- Certificate — understand first: CustomResourceDefinition
- cgroup (control group)
- CIDR — understand first: Label, Network Policy
- CLA (Contributor License Agreement)
- Cloud Controller Manager — understand first: Label, Probe, LimitRange
- Cloud Native Computing Foundation (CNCF) — understand first: Label, LimitRange, CustomResourceDefinition
- Cloud Provider
- Cluster — understand first: Label, LimitRange · unlocks: PodGroup, etcd, Volume, UID, Cluster Operator, Cluster Infrastructure, Group Version Resource
- Cluster Architect — understand first: CustomResourceDefinition, Cluster Operations, Admission Controller
- Cluster Infrastructure — understand first: Cluster, Container network interface (CNI), CRI-O
- Cluster Operations — understand first: Admission Controller, ConfigMap · unlocks: LimitRange, Service Catalog, Admission Controller, Immutable Infrastructure, ConfigMap, Extensions, DeviceClass, Aggregation Layer, kube-controller-manager, CRI-O, Application Architect, kOps (Kubernetes Operations), Toleration, Kubernetes API, Cluster Operator, Kubectl, Operator pattern, Helm Chart, Istio, Garbage Collection, Object, Finalizer, Glossary, Init Container, Gateway API, Cluster Architect, Common Expression Language, ServiceAccount, Job, Add-ons, Container Lifecycle Hooks, Mirror Pod, API Group, SIG (special interest group)
- Cluster Operator — understand first: CustomResourceDefinition, Cluster Operations, Cluster · unlocks: JSON Web Token (JWT), Kubeadm
- Code Contributor — understand first: Label, Probe, LimitRange
- Common Expression Language — understand first: CustomResourceDefinition, Cluster Operations, Persistent Volume Claim
- Condition — understand first: Label, Probe, CustomResourceDefinition
- ConfigMap — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations · unlocks: Cluster Operations, Downward API, Container Environment Variables
- Container — understand first: Label, Probe, LimitRange · unlocks: containerd, Container Runtime, Container Runtime Interface (CRI)
- Container Device Interface (CDI) — understand first: Container network interface (CNI), CRI-O, DeviceClass
- Container Environment Variables — understand first: Label, ConfigMap
- Container Lifecycle Hooks — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- Container network interface (CNI) — understand first: CRI-O, Device Plugin · unlocks: HostAliases, Device Plugin, sysctl, cAdvisor, Cluster Infrastructure, Device, Container Runtime Interface (CRI), Container Device Interface (CDI)
- Container Runtime — understand first: Label, Container
- Container Runtime Interface (CRI) — understand first: CRI-O, Container network interface (CNI), Container
- Container Storage Interface (CSI) — understand first: CustomResourceDefinition
- containerd — understand first: Label, CRI-O, Container
- Contributor — understand first: Label, Probe, LimitRange
- Control Plane
- Controller — understand first: Label, Probe, LimitRange
- CRI-O — understand first: CustomResourceDefinition, Cluster Operations · unlocks: Container network interface (CNI), Device Plugin, sysctl, DaemonSet, containerd, cAdvisor, Cluster Infrastructure, Device, Container Runtime Interface (CRI), Container Device Interface (CDI)
- CronJob — understand first: CustomResourceDefinition
- CustomResourceDefinition · unlocks: LimitRange, Upstream (disambiguation), Service Catalog, PodGroup, Admission Controller, Endpoints, ConfigMap, Extensions, DeviceClass, API server, ResourceClaim, Aggregation Layer, kube-controller-manager, CRI-O, Cloud Native Computing Foundation (CNCF), Condition, Application Architect, kOps (Kubernetes Operations), Network Policy, Horizontal Pod Autoscaler, Kubernetes API, Cluster Operator, Kubectl, CronJob, Quantity, FlexVolume, DaemonSet, Operator pattern, EndpointSlice, ResourceSlice, Helm Chart, QoS Class, PodTemplate, Resource (infrastructure), Kubeadm, Istio, Garbage Collection, Dynamic Volume Provisioning, cAdvisor, Object, Volume Plugin, ResourceClaimTemplate, Subject Alternative Name, Manifest, Finalizer, Deployment, Certificate, Glossary, StatefulSet, ResourceQuota, user namespace, Init Container, Gateway API, Service, Security Context, Spec, Cluster Architect, RBAC (Role-Based Access Control), Affinity, Pod Security Policy, Pod Disruption Budget, ReplicaSet, API resource, Member, Common Expression Language, ServiceAccount, Job, Group Version Resource, Ingress, Add-ons, Container Lifecycle Hooks, Mirror Pod, API Group, Container Storage Interface (CSI), Storage Class, SIG (special interest group), Persistent Volume
- DaemonSet — understand first: CustomResourceDefinition, CRI-O
- Data Plane — understand first: Label, Probe, LimitRange
- Deployment — understand first: CustomResourceDefinition
- Developer (disambiguation) — understand first: Label, Probe, LimitRange
- Device — understand first: DeviceClass, Container network interface (CNI), CRI-O
- Device Plugin — understand first: DeviceClass, CRI-O, Container network interface (CNI) · unlocks: Container network interface (CNI)
- DeviceClass — understand first: CustomResourceDefinition, Cluster Operations · unlocks: Device Plugin, Device, Container Device Interface (CDI)
- Disruption — understand first: Toleration, Pod Disruption
- Docker — understand first: Label, Probe, LimitRange
- Dockershim — understand first: Label, Probe, LimitRange
- Downstream (disambiguation) — understand first: Label, Probe, LimitRange
- Downward API — understand first: ConfigMap, Secret
- Drain — understand first: Label, Probe, LimitRange
- Duration — understand first: Label, Probe, LimitRange
- Dynamic Resource Allocation — understand first: Label, Probe
- Dynamic Volume Provisioning — understand first: CustomResourceDefinition
- Endpoints — understand first: CustomResourceDefinition, Service Catalog, Persistent Volume Claim
- EndpointSlice — understand first: CustomResourceDefinition
- Ephemeral Container — understand first: Label, Probe, LimitRange
- etcd — understand first: Cluster, API server
- Event — understand first: Label, Probe, LimitRange
- Eviction — understand first: Node-pressure eviction, Preemption, Toleration
- Extensions — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- Feature gate — understand first: Label, Probe
- Finalizer — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- FlexVolume — understand first: CustomResourceDefinition
- Garbage Collection — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- Gateway API — understand first: CustomResourceDefinition, Cluster Operations, Admission Controller
- Glossary — understand first: CustomResourceDefinition, Cluster Operations, Persistent Volume Claim
- Group Version Resource — understand first: Label, CustomResourceDefinition, Cluster
- Helm Chart — understand first: CustomResourceDefinition, Service Catalog, Cluster Operations
- Horizontal Pod Autoscaler — understand first: CustomResourceDefinition · unlocks: Pod Disruption
- HostAliases — understand first: Label, Container network interface (CNI)
- Image — understand first: Label, Probe, LimitRange
- Immutable Infrastructure — understand first: Cluster Operations, Admission Controller
- Ingress — understand first: CustomResourceDefinition
- Init Container — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- Istio — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- Job — understand first: CustomResourceDefinition, Cluster Operations, Admission Controller
- JSON Web Token (JWT) — understand first: Kubernetes API, Cluster Operator
- kOps (Kubernetes Operations) — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- kube-controller-manager — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- kube-proxy — understand first: Label, Probe, LimitRange
- kube-scheduler — understand first: Label, Probe, LimitRange
- Kubeadm — understand first: CustomResourceDefinition, Kubernetes API, Cluster Operator
- Kubectl — understand first: CustomResourceDefinition, Cluster Operations
- Kubelet — understand first: Label, Probe, LimitRange
- Kubernetes API — understand first: CustomResourceDefinition, Cluster Operations, Persistent Volume Claim · unlocks: JSON Web Token (JWT), Kubeadm
- Label — understand first: LimitRange · unlocks: Probe, Dynamic Resource Allocation, Platform Developer, Reviewer, Upstream (disambiguation), PodGroup, Persistent Volume Claim, Contributor, HostAliases, Sidecar Container, Volume, Preemption, Container, Cluster, Master, Code Contributor, Cloud Native Computing Foundation (CNCF), Condition, Container Environment Variables, Downstream (disambiguation), Pod Priority, Mixed Version Proxy (MVP), Image, Shuffle-sharding, UID, kube-proxy, Pod Lifecycle, Quantity, Application Developer, Dockershim, Node, Watch, ReplicationController, PriorityClass, Developer (disambiguation), Feature gate, Drain, Name, QoS Class, Controller, Resource (infrastructure), containerd, Kubelet, Ephemeral Container, Subject Alternative Name, WG (working group), Logging, Managed Service, Static Pod, user namespace, Event, Annotation, API-initiated eviction, Minikube, Spec, Container Runtime, Affinity, ReplicaSet, Pod, Replica, Member, Cloud Controller Manager, Docker, Workload, Data Plane, Group Version Resource, Proxy, kube-scheduler, Approver, App Container, Duration, Selector, CIDR, Applications
- LimitRange — understand first: CustomResourceDefinition, Cluster Operations · unlocks: Label, Probe, Reviewer, Persistent Volume Claim, Contributor, Container, Cluster, Master, Code Contributor, Cloud Native Computing Foundation (CNCF), Downstream (disambiguation), Pod Priority, Mixed Version Proxy (MVP), Image, kube-proxy, Pod Lifecycle, Quantity, Application Developer, Dockershim, Node, Watch, ReplicationController, PriorityClass, Developer (disambiguation), Drain, Name, QoS Class, Controller, Resource (infrastructure), Kubelet, Ephemeral Container, Logging, Managed Service, Static Pod, Event, API-initiated eviction, Minikube, Spec, Replica, Cloud Controller Manager, Docker, Workload, Data Plane, Proxy, kube-scheduler, Approver, App Container, Duration, Selector, Applications, Persistent Volume
- Logging — understand first: Label, Probe, LimitRange
- Managed Service — understand first: Label, Probe, LimitRange
- Manifest — understand first: CustomResourceDefinition, Service Catalog, Persistent Volume Claim
- Master — understand first: Label, Probe, LimitRange
- Member — understand first: Label, Probe, CustomResourceDefinition
- Minikube — understand first: Label, Probe, LimitRange
- Mirror Pod — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- Mixed Version Proxy (MVP) — understand first: Label, Probe, LimitRange
- Name — understand first: Label, Probe, LimitRange
- Namespace
- Network Policy — understand first: CustomResourceDefinition, Admission Controller · unlocks: CIDR
- Node — understand first: Label, Probe, LimitRange
- Node-pressure eviction — understand first: Preemption, Toleration · unlocks: Taint, Eviction
- Object — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- Operator pattern — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- Persistent Volume — understand first: Persistent Volume Claim, LimitRange, CustomResourceDefinition
- Persistent Volume Claim — understand first: Label, LimitRange · unlocks: Endpoints, Volume, Kubernetes API, Manifest, Glossary, user namespace, Common Expression Language, Persistent Volume
- Platform Developer — understand first: Label, Probe
- Pod — understand first: Label, Probe
- Pod Disruption — understand first: Pod Lifecycle, Toleration, Horizontal Pod Autoscaler · unlocks: Disruption
- Pod Disruption Budget — understand first: CustomResourceDefinition
- Pod Lifecycle — understand first: Label, Probe, LimitRange · unlocks: Pod Disruption
- Pod Priority — understand first: Label, Probe, LimitRange
- Pod Security Policy — understand first: CustomResourceDefinition
- PodGroup — understand first: Label, CustomResourceDefinition, Cluster
- PodTemplate — understand first: CustomResourceDefinition
- Preemption — understand first: Label, Probe · unlocks: Node-pressure eviction, Taint, Eviction
- PriorityClass — understand first: Label, LimitRange
- Probe — understand first: Label, LimitRange · unlocks: Dynamic Resource Allocation, Platform Developer, Reviewer, Contributor, Sidecar Container, Preemption, Container, Master, Code Contributor, Condition, Downstream (disambiguation), Pod Priority, Mixed Version Proxy (MVP), Image, Shuffle-sharding, kube-proxy, Pod Lifecycle, Application Developer, Dockershim, Node, Watch, ReplicationController, Developer (disambiguation), Feature gate, Drain, Name, Controller, Kubelet, Ephemeral Container, Subject Alternative Name, WG (working group), Logging, Managed Service, Static Pod, Event, Annotation, API-initiated eviction, Minikube, Affinity, ReplicaSet, Pod, Replica, Member, Cloud Controller Manager, Docker, Workload, Data Plane, Proxy, kube-scheduler, Approver, App Container, Duration, Selector, Applications
- Proxy — understand first: Label, Probe, LimitRange
- QoS Class — understand first: Label, LimitRange, CustomResourceDefinition
- Quantity — understand first: Label, LimitRange, CustomResourceDefinition
- RBAC (Role-Based Access Control) — understand first: CustomResourceDefinition
- Replica — understand first: Label, Probe, LimitRange
- ReplicaSet — understand first: Label, Probe, CustomResourceDefinition
- ReplicationController — understand first: Label, Probe, LimitRange
- Resource (infrastructure) — understand first: Label, LimitRange, CustomResourceDefinition
- ResourceClaim — understand first: CustomResourceDefinition
- ResourceClaimTemplate — understand first: CustomResourceDefinition
- ResourceQuota — understand first: CustomResourceDefinition
- ResourceSlice — understand first: CustomResourceDefinition
- Reviewer — understand first: Label, Probe, LimitRange
- Secret · unlocks: Downward API
- Security Context — understand first: CustomResourceDefinition, Admission Controller
- Selector — understand first: Label, Probe, LimitRange
- Service — understand first: CustomResourceDefinition
- Service Catalog — understand first: CustomResourceDefinition, Cluster Operations · unlocks: Endpoints, Helm Chart, Manifest
- ServiceAccount — understand first: CustomResourceDefinition, Cluster Operations
- Shuffle-sharding — understand first: Label, Probe
- Sidecar Container — understand first: Label, Probe
- SIG (special interest group) — understand first: CustomResourceDefinition, Admission Controller, Cluster Operations
- Spec — understand first: CustomResourceDefinition, Label, LimitRange
- StatefulSet — understand first: CustomResourceDefinition
- Static Pod — understand first: Label, Probe, LimitRange
- Storage Class — understand first: CustomResourceDefinition
- Subject Alternative Name — understand first: Label, Probe, CustomResourceDefinition
- sysctl — understand first: Container network interface (CNI), CRI-O
- Taint — understand first: Toleration, Node-pressure eviction, Preemption
- Toleration — understand first: Admission Controller, Cluster Operations · unlocks: Node-pressure eviction, Disruption, Pod Disruption, Taint, Eviction
- UID — understand first: Label, Cluster
- Upstream (disambiguation) — understand first: Label, CustomResourceDefinition
- user namespace — understand first: CustomResourceDefinition, Label, Persistent Volume Claim
- Volume — understand first: Label, Persistent Volume Claim, Cluster
- Volume Plugin — understand first: CustomResourceDefinition
- Watch — understand first: Label, Probe, LimitRange
- WG (working group) — understand first: Label, Probe
- Workload — understand first: Label, Probe, LimitRange