book

50 Kubernetes Concepts Every DevOps Engineer Should Know

by Michael Levan

January 2023

Beginner to intermediate

278 pages

6h 1m

English

Packt Publishing

Read now

Unlock full access

ContributorsAbout the authorAbout the reviewer
Who this book is forWhat this book coversTo get the most out of this bookDownload the example code filesDownload the color imagesConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Technical requirementsThe shift to the cloudWhy organizations care about the cloudWhat the cloud did for engineersKubernetes, the new cloud OS and data centerKubernetes in the cloudWhy Kubernetes?Kubernetes as a data centerCloud-native apps and why they’re importantWhat cloud-native apps do for organizationsThe world is cloud-basedEngineering talent is toward the cloudAbstraction is easier, but with a twistWhat abstraction doesWhat abstraction doesn’t doStart slow and go fastUnderstanding the engineering need for KubernetesUnderstanding the business need for KubernetesPlanning is the hard partSummaryFurther reading
Technical requirementsAzure Kubernetes ServiceCreating an AKS cluster manuallyCreating an AKS cluster with automationScaling an AKS clusterAKS and Virtual KubeletManaging and maintaining AKS clustersAWS EKSCreating an EKS cluster manuallyCreating an EKS cluster with TerraformScaling an EKS clusterEKS Fargate profilesGKECreating a GKE cluster with TerraformGKE AutopilotA quick note on multi-cloudSummaryFurther reading
Technical requirementsUnderstanding Linode Kubernetes EngineWhy LKE?Setting up LKE manuallyAutomating LKE deploymentsExploring DigitalOcean Managed KubernetesWhy DigitalOcean Kubernetes Engine?Setting up DigitalOcean Managed Kubernetes manuallyAutomating DigitalOcean Managed KubernetesWhat is Kubernetes PaaS and how does it differ?OpenShiftOpenShift in the enterpriseGetting started with OpenShift SandboxOpenShift on AWSSummaryFurther reading
Technical requirementsUnderstanding operating systems and infrastructureKubeadm DeploymentSystem sizeSystem locationOperating systemTroubleshooting on-prem Kubernetes clustersServer logs and infrastructure troubleshootingNetwork observabilityKubernetes metricscrictlkubectlIntroducing hybrid servicesAzure Stack HCIGoogle AnthosA quick note about other infrastructure managersExploring networking and system componentskube-proxyCNIKubernetes resource communicationDNSService mesh and IngressGetting to know virtualized bare metalVirtualizing your environmentWhere to run KubernetesSummaryFurther reading
Technical requirementsUnderstanding cloud-native appsWhat’s a cloud-native app?Cloud-specific cloud nativeWhat are microservices?Learning about Kubernetes app deploymentsKubernetes manifestsControllers and operatorsDifferent ways to deploy with higher-level controllersScalingMulti-container PodsLiveness and readiness probesExploring segregation and namespacesNamespacesSingle tenancyMulti-tenancyInvestigating stateless and stateful appsStateful versus statelessContainer Storage InterfaceVolumesResource requests and limitsUpgrading Kubernetes appsTypes of upgradesWhat happens to an app being upgraded?Rolling updatesRollbacksSummaryFurther reading
Technical requirementsGetting to know Helm charts and KustomizeWhy think about deployment methods for manifests?Helm chartsKustomizeDeploying with CI/CD and GitOpsWhat is CI/CD?Using CI/CD for Kubernetes deploymentsWhat is GitOps?Using GitOps for automated deploymentsProduction use cases for CI/CD and GitOpsTroubleshooting application deploymentsTroubleshooting PodsTroubleshooting ServicesTroubleshooting DeploymentsService meshes and IngressesWhy Ingress?Why service meshes?SummaryFurther reading

Technical requirementsHow is monitoring different than observability?What’s monitoring?What’s observability?Monitoring versus observability examplesMonitoring and observability tools for KubernetesThe Kubernetes DashboardAzure MonitorAWS Container InsightsGrafana/PrometheusObservability practicesLoggingMetricsTracesMonitoring Kubernetes resourcesMonitoring PodsSummaryFurther reading
Technical requirementsOut-of-the-box Kubernetes securitySecurity breakdownKubernetes securityInvestigating cluster securityCluster hardening and benchmarksSystem scanningCluster network securityUpgrading the Kubernetes APIAudit logging and troubleshootingUnderstanding RBACWhat is RBAC?Roles and ClusterRolesRoleBindings and ClusterRoleBindingsKubernetes resource (object) securityPod securityPolicy enforcementScanning container imagesKubernetes SecretsCreating Kubernetes SecretsDon’t use Kubernetes SecretsSummaryFurther reading
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Content preview from 50 Kubernetes Concepts Every DevOps Engineer Should Know

Part 3: Final 15 Kubernetes Concepts – Security and Monitoring

Throughout this book so far, you’ve learned about key critical pieces of Kubernetes. First, you learned about various cluster methods. You learned about on-premises, how to deploy various managed Kubernetes services, and the different options that are available when deploying.

After that, you learned about different deployment methods, both from a basic perspective and an advanced perspective.

The only things that are missing, which are arguably the most important pieces to a proper Kubernetes environment, are monitoring, observability, and security. The third and final piece of the 50 concepts will go over what monitoring and observability look like in today’s world.

In the last ...