book

50 Kubernetes Concepts Every DevOps Engineer Should Know

by Michael Levan

January 2023

Beginner to intermediate

278 pages

6h 1m

English

Packt Publishing

Read now

Unlock full access

ContributorsAbout the authorAbout the reviewer
Who this book is forWhat this book coversTo get the most out of this bookDownload the example code filesDownload the color imagesConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Technical requirementsThe shift to the cloudWhy organizations care about the cloudWhat the cloud did for engineersKubernetes, the new cloud OS and data centerKubernetes in the cloudWhy Kubernetes?Kubernetes as a data centerCloud-native apps and why they’re importantWhat cloud-native apps do for organizationsThe world is cloud-basedEngineering talent is toward the cloudAbstraction is easier, but with a twistWhat abstraction doesWhat abstraction doesn’t doStart slow and go fastUnderstanding the engineering need for KubernetesUnderstanding the business need for KubernetesPlanning is the hard partSummaryFurther reading
Technical requirementsAzure Kubernetes ServiceCreating an AKS cluster manuallyCreating an AKS cluster with automationScaling an AKS clusterAKS and Virtual KubeletManaging and maintaining AKS clustersAWS EKSCreating an EKS cluster manuallyCreating an EKS cluster with TerraformScaling an EKS clusterEKS Fargate profilesGKECreating a GKE cluster with TerraformGKE AutopilotA quick note on multi-cloudSummaryFurther reading
Technical requirementsUnderstanding Linode Kubernetes EngineWhy LKE?Setting up LKE manuallyAutomating LKE deploymentsExploring DigitalOcean Managed KubernetesWhy DigitalOcean Kubernetes Engine?Setting up DigitalOcean Managed Kubernetes manuallyAutomating DigitalOcean Managed KubernetesWhat is Kubernetes PaaS and how does it differ?OpenShiftOpenShift in the enterpriseGetting started with OpenShift SandboxOpenShift on AWSSummaryFurther reading
Technical requirementsUnderstanding operating systems and infrastructureKubeadm DeploymentSystem sizeSystem locationOperating systemTroubleshooting on-prem Kubernetes clustersServer logs and infrastructure troubleshootingNetwork observabilityKubernetes metricscrictlkubectlIntroducing hybrid servicesAzure Stack HCIGoogle AnthosA quick note about other infrastructure managersExploring networking and system componentskube-proxyCNIKubernetes resource communicationDNSService mesh and IngressGetting to know virtualized bare metalVirtualizing your environmentWhere to run KubernetesSummaryFurther reading
Technical requirementsUnderstanding cloud-native appsWhat’s a cloud-native app?Cloud-specific cloud nativeWhat are microservices?Learning about Kubernetes app deploymentsKubernetes manifestsControllers and operatorsDifferent ways to deploy with higher-level controllersScalingMulti-container PodsLiveness and readiness probesExploring segregation and namespacesNamespacesSingle tenancyMulti-tenancyInvestigating stateless and stateful appsStateful versus statelessContainer Storage InterfaceVolumesResource requests and limitsUpgrading Kubernetes appsTypes of upgradesWhat happens to an app being upgraded?Rolling updatesRollbacksSummaryFurther reading
Technical requirementsGetting to know Helm charts and KustomizeWhy think about deployment methods for manifests?Helm chartsKustomizeDeploying with CI/CD and GitOpsWhat is CI/CD?Using CI/CD for Kubernetes deploymentsWhat is GitOps?Using GitOps for automated deploymentsProduction use cases for CI/CD and GitOpsTroubleshooting application deploymentsTroubleshooting PodsTroubleshooting ServicesTroubleshooting DeploymentsService meshes and IngressesWhy Ingress?Why service meshes?SummaryFurther reading

Technical requirementsHow is monitoring different than observability?What’s monitoring?What’s observability?Monitoring versus observability examplesMonitoring and observability tools for KubernetesThe Kubernetes DashboardAzure MonitorAWS Container InsightsGrafana/PrometheusObservability practicesLoggingMetricsTracesMonitoring Kubernetes resourcesMonitoring PodsSummaryFurther reading
Technical requirementsOut-of-the-box Kubernetes securitySecurity breakdownKubernetes securityInvestigating cluster securityCluster hardening and benchmarksSystem scanningCluster network securityUpgrading the Kubernetes APIAudit logging and troubleshootingUnderstanding RBACWhat is RBAC?Roles and ClusterRolesRoleBindings and ClusterRoleBindingsKubernetes resource (object) securityPod securityPolicy enforcementScanning container imagesKubernetes SecretsCreating Kubernetes SecretsDon’t use Kubernetes SecretsSummaryFurther reading
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Content preview from 50 Kubernetes Concepts Every DevOps Engineer Should Know

3 Running Kubernetes with Other Cloud Pals

Chances are that throughout this book, and perhaps even so far, you’re going to get whiplash by finding out about the number of places and different ways you can deploy Kubernetes. The reality is, you’re going to get even more whiplash in the real world. Whether you’re a full-time Kubernetes engineer or a consultant, every company that you go to is going to feel a bit different in the ways you’re deploying Kubernetes and where you’re deploying it.

In the previous chapter, you learned about the three major Kubernetes cloud services – AKS, EKS, and GKE. However, there are a ton of other great options in the wild that are on private clouds and Platform-as-a-Service (PaaS) solutions. Although you’ll see ...