book

50 Kubernetes Concepts Every DevOps Engineer Should Know

by Michael Levan

January 2023

Beginner to intermediate

278 pages

6h 1m

English

Packt Publishing

Read now

Unlock full access

ContributorsAbout the authorAbout the reviewer
Who this book is forWhat this book coversTo get the most out of this bookDownload the example code filesDownload the color imagesConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Technical requirementsThe shift to the cloudWhy organizations care about the cloudWhat the cloud did for engineersKubernetes, the new cloud OS and data centerKubernetes in the cloudWhy Kubernetes?Kubernetes as a data centerCloud-native apps and why they’re importantWhat cloud-native apps do for organizationsThe world is cloud-basedEngineering talent is toward the cloudAbstraction is easier, but with a twistWhat abstraction doesWhat abstraction doesn’t doStart slow and go fastUnderstanding the engineering need for KubernetesUnderstanding the business need for KubernetesPlanning is the hard partSummaryFurther reading
Technical requirementsAzure Kubernetes ServiceCreating an AKS cluster manuallyCreating an AKS cluster with automationScaling an AKS clusterAKS and Virtual KubeletManaging and maintaining AKS clustersAWS EKSCreating an EKS cluster manuallyCreating an EKS cluster with TerraformScaling an EKS clusterEKS Fargate profilesGKECreating a GKE cluster with TerraformGKE AutopilotA quick note on multi-cloudSummaryFurther reading
Technical requirementsUnderstanding Linode Kubernetes EngineWhy LKE?Setting up LKE manuallyAutomating LKE deploymentsExploring DigitalOcean Managed KubernetesWhy DigitalOcean Kubernetes Engine?Setting up DigitalOcean Managed Kubernetes manuallyAutomating DigitalOcean Managed KubernetesWhat is Kubernetes PaaS and how does it differ?OpenShiftOpenShift in the enterpriseGetting started with OpenShift SandboxOpenShift on AWSSummaryFurther reading
Technical requirementsUnderstanding operating systems and infrastructureKubeadm DeploymentSystem sizeSystem locationOperating systemTroubleshooting on-prem Kubernetes clustersServer logs and infrastructure troubleshootingNetwork observabilityKubernetes metricscrictlkubectlIntroducing hybrid servicesAzure Stack HCIGoogle AnthosA quick note about other infrastructure managersExploring networking and system componentskube-proxyCNIKubernetes resource communicationDNSService mesh and IngressGetting to know virtualized bare metalVirtualizing your environmentWhere to run KubernetesSummaryFurther reading
Technical requirementsUnderstanding cloud-native appsWhat’s a cloud-native app?Cloud-specific cloud nativeWhat are microservices?Learning about Kubernetes app deploymentsKubernetes manifestsControllers and operatorsDifferent ways to deploy with higher-level controllersScalingMulti-container PodsLiveness and readiness probesExploring segregation and namespacesNamespacesSingle tenancyMulti-tenancyInvestigating stateless and stateful appsStateful versus statelessContainer Storage InterfaceVolumesResource requests and limitsUpgrading Kubernetes appsTypes of upgradesWhat happens to an app being upgraded?Rolling updatesRollbacksSummaryFurther reading
Technical requirementsGetting to know Helm charts and KustomizeWhy think about deployment methods for manifests?Helm chartsKustomizeDeploying with CI/CD and GitOpsWhat is CI/CD?Using CI/CD for Kubernetes deploymentsWhat is GitOps?Using GitOps for automated deploymentsProduction use cases for CI/CD and GitOpsTroubleshooting application deploymentsTroubleshooting PodsTroubleshooting ServicesTroubleshooting DeploymentsService meshes and IngressesWhy Ingress?Why service meshes?SummaryFurther reading

Technical requirementsHow is monitoring different than observability?What’s monitoring?What’s observability?Monitoring versus observability examplesMonitoring and observability tools for KubernetesThe Kubernetes DashboardAzure MonitorAWS Container InsightsGrafana/PrometheusObservability practicesLoggingMetricsTracesMonitoring Kubernetes resourcesMonitoring PodsSummaryFurther reading
Technical requirementsOut-of-the-box Kubernetes securitySecurity breakdownKubernetes securityInvestigating cluster securityCluster hardening and benchmarksSystem scanningCluster network securityUpgrading the Kubernetes APIAudit logging and troubleshootingUnderstanding RBACWhat is RBAC?Roles and ClusterRolesRoleBindings and ClusterRoleBindingsKubernetes resource (object) securityPod securityPolicy enforcementScanning container imagesKubernetes SecretsCreating Kubernetes SecretsDon’t use Kubernetes SecretsSummaryFurther reading
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Content preview from 50 Kubernetes Concepts Every DevOps Engineer Should Know

6 Kubernetes Deployment– Same Game, Next Level

In the previous chapter, you dove into different deployment scenarios and how you should think not only about controllers, but also about upgrading apps, different types of apps to deploy, and different methods for getting an app up and running. In this chapter, you’re going to dive a bit deeper into the different styles of deploying and troubleshooting versus just doing the deployment.

The first step in any type of deployment is figuring out what you’re doing – what type of application it is, what type of Kubernetes resource you want to use, and the different plugins that you may want to use, such as a CSI. After you figure out the logistics of what you want to deploy, the next step is to think ...