book

50 Kubernetes Concepts Every DevOps Engineer Should Know

by Michael Levan

January 2023

Beginner to intermediate

278 pages

6h 1m

English

Packt Publishing

Read now

Unlock full access

ContributorsAbout the authorAbout the reviewer
Who this book is forWhat this book coversTo get the most out of this bookDownload the example code filesDownload the color imagesConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Technical requirementsThe shift to the cloudWhy organizations care about the cloudWhat the cloud did for engineersKubernetes, the new cloud OS and data centerKubernetes in the cloudWhy Kubernetes?Kubernetes as a data centerCloud-native apps and why they’re importantWhat cloud-native apps do for organizationsThe world is cloud-basedEngineering talent is toward the cloudAbstraction is easier, but with a twistWhat abstraction doesWhat abstraction doesn’t doStart slow and go fastUnderstanding the engineering need for KubernetesUnderstanding the business need for KubernetesPlanning is the hard partSummaryFurther reading
Technical requirementsAzure Kubernetes ServiceCreating an AKS cluster manuallyCreating an AKS cluster with automationScaling an AKS clusterAKS and Virtual KubeletManaging and maintaining AKS clustersAWS EKSCreating an EKS cluster manuallyCreating an EKS cluster with TerraformScaling an EKS clusterEKS Fargate profilesGKECreating a GKE cluster with TerraformGKE AutopilotA quick note on multi-cloudSummaryFurther reading
Technical requirementsUnderstanding Linode Kubernetes EngineWhy LKE?Setting up LKE manuallyAutomating LKE deploymentsExploring DigitalOcean Managed KubernetesWhy DigitalOcean Kubernetes Engine?Setting up DigitalOcean Managed Kubernetes manuallyAutomating DigitalOcean Managed KubernetesWhat is Kubernetes PaaS and how does it differ?OpenShiftOpenShift in the enterpriseGetting started with OpenShift SandboxOpenShift on AWSSummaryFurther reading
Technical requirementsUnderstanding operating systems and infrastructureKubeadm DeploymentSystem sizeSystem locationOperating systemTroubleshooting on-prem Kubernetes clustersServer logs and infrastructure troubleshootingNetwork observabilityKubernetes metricscrictlkubectlIntroducing hybrid servicesAzure Stack HCIGoogle AnthosA quick note about other infrastructure managersExploring networking and system componentskube-proxyCNIKubernetes resource communicationDNSService mesh and IngressGetting to know virtualized bare metalVirtualizing your environmentWhere to run KubernetesSummaryFurther reading
Technical requirementsUnderstanding cloud-native appsWhat’s a cloud-native app?Cloud-specific cloud nativeWhat are microservices?Learning about Kubernetes app deploymentsKubernetes manifestsControllers and operatorsDifferent ways to deploy with higher-level controllersScalingMulti-container PodsLiveness and readiness probesExploring segregation and namespacesNamespacesSingle tenancyMulti-tenancyInvestigating stateless and stateful appsStateful versus statelessContainer Storage InterfaceVolumesResource requests and limitsUpgrading Kubernetes appsTypes of upgradesWhat happens to an app being upgraded?Rolling updatesRollbacksSummaryFurther reading
Technical requirementsGetting to know Helm charts and KustomizeWhy think about deployment methods for manifests?Helm chartsKustomizeDeploying with CI/CD and GitOpsWhat is CI/CD?Using CI/CD for Kubernetes deploymentsWhat is GitOps?Using GitOps for automated deploymentsProduction use cases for CI/CD and GitOpsTroubleshooting application deploymentsTroubleshooting PodsTroubleshooting ServicesTroubleshooting DeploymentsService meshes and IngressesWhy Ingress?Why service meshes?SummaryFurther reading

Technical requirementsHow is monitoring different than observability?What’s monitoring?What’s observability?Monitoring versus observability examplesMonitoring and observability tools for KubernetesThe Kubernetes DashboardAzure MonitorAWS Container InsightsGrafana/PrometheusObservability practicesLoggingMetricsTracesMonitoring Kubernetes resourcesMonitoring PodsSummaryFurther reading
Technical requirementsOut-of-the-box Kubernetes securitySecurity breakdownKubernetes securityInvestigating cluster securityCluster hardening and benchmarksSystem scanningCluster network securityUpgrading the Kubernetes APIAudit logging and troubleshootingUnderstanding RBACWhat is RBAC?Roles and ClusterRolesRoleBindings and ClusterRoleBindingsKubernetes resource (object) securityPod securityPolicy enforcementScanning container imagesKubernetes SecretsCreating Kubernetes SecretsDon’t use Kubernetes SecretsSummaryFurther reading
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Content preview from 50 Kubernetes Concepts Every DevOps Engineer Should Know

2 Getting the Ball Rolling with Kubernetes and the Top Three Cloud Platforms

When starting your Kubernetes journey, the typical first step is to create a Kubernetes cluster to work with. The reason why is that if you, for example, start by creating a Kubernetes Manifest (more on this in later chapters), you’ll have nowhere to deploy the Manifest to because you don’t have a Kubernetes cluster. The other reality when it comes to Kubernetes is there’s a ton of cloud-native operations management – things such as monitoring a cluster, automating the deployment of a cluster, and scaling a cluster. Because of that, understanding cluster creation is a crucial step in your Kubernetes journey.

In the previous chapter, you learned not only about why Kubernetes ...