Scenario
You need to stand up a new compute cluster on a new cloud account/subscription (greenfield). The team wants a simplified, practical plan for the first-time deployment of Kubernetes and the surrounding platform components.
Requirements
-
New account: no existing network/IAM/registry.
-
Multi-environment support (at least dev + prod).
-
Secure by default (identity, secrets, least privilege).
-
Operational readiness: upgrades, observability, backups, disaster recovery.
Questions
-
What are the major steps to bootstrap the cloud account and network foundation?
-
How would you deploy Kubernetes the first time (managed service or self-managed), and why?
-
How do you set up node pools, autoscaling, ingress, storage, and DNS?
-
What are the key security controls (IAM, RBAC, network policies, secret management, image policy)?
-
What Day-2 operations do you put in place (monitoring, logging, alerting, upgrades, backup/restore)?
-
How do Kubernetes
CRDs and Operators
fit into the platform architecture and operations?