MQTT and Mosquitto on Kubernetes

Module 1: MQTT and Kubernetes essentials

• Quick MQTT recap for IoT and app integration
• Pods, Deployments vs StatefulSets, Services, and persistent volumes in plain language
• Mosquitto image, configuration files, and container lifecycle basics

Module 2: Provisioning Mosquitto on Kubernetes

• Helm charts vs raw manifests and when to use each
• ConfigMaps, Secrets, listeners, persistence, and simple resource requests
• Readiness and liveness probes and basic validation steps

Module 3: Networking and access patterns

• ClusterIP, headless Service, LoadBalancer, and when NodePort is acceptable
• DNS names, advertised hostnames, and client connection strings
• External device access, Ingress for TCP, and egress considerations

Module 4: Topics and client behavior on Kubernetes

• Topic naming for devices, sites, and teams
• QoS levels, sessions, retained messages, and last will
• Client options for reconnects, backoff, and simple backpressure

Module 5: Security and multitenancy

• TLS in transit with server and client certificates
• Authentication options such as password files and plugins
• Authorization with ACLs and least privilege topic access across namespaces

Module 6: Observability and capacity basics

• Logs and useful metrics for connections, inflight, and retained storage
• Prometheus and Grafana at a glance and a simple dashboard checklist
• Capacity signals and safe resource adjustments

Module 7: Edge to cloud and bridging

• Broker bridges between sites and cloud and when to use them
• Routing and filtering patterns and bandwidth awareness
• Store and forward on constrained links and offline handling

Module 8: Troubleshooting and safe changes

• Common issues such as listener or certificate misconfiguration
• Rolling updates, config changes, and backup of configuration
• Lightweight readiness and rollback checklist