book

50 Kubernetes Concepts Every DevOps Engineer Should Know

by Michael Levan

January 2023

Beginner to intermediate

278 pages

6h 1m

English

Packt Publishing

Read now

Unlock full access

ContributorsAbout the authorAbout the reviewer
Who this book is forWhat this book coversTo get the most out of this bookDownload the example code filesDownload the color imagesConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Technical requirementsThe shift to the cloudWhy organizations care about the cloudWhat the cloud did for engineersKubernetes, the new cloud OS and data centerKubernetes in the cloudWhy Kubernetes?Kubernetes as a data centerCloud-native apps and why they’re importantWhat cloud-native apps do for organizationsThe world is cloud-basedEngineering talent is toward the cloudAbstraction is easier, but with a twistWhat abstraction doesWhat abstraction doesn’t doStart slow and go fastUnderstanding the engineering need for KubernetesUnderstanding the business need for KubernetesPlanning is the hard partSummaryFurther reading
Technical requirementsAzure Kubernetes ServiceCreating an AKS cluster manuallyCreating an AKS cluster with automationScaling an AKS clusterAKS and Virtual KubeletManaging and maintaining AKS clustersAWS EKSCreating an EKS cluster manuallyCreating an EKS cluster with TerraformScaling an EKS clusterEKS Fargate profilesGKECreating a GKE cluster with TerraformGKE AutopilotA quick note on multi-cloudSummaryFurther reading
Technical requirementsUnderstanding Linode Kubernetes EngineWhy LKE?Setting up LKE manuallyAutomating LKE deploymentsExploring DigitalOcean Managed KubernetesWhy DigitalOcean Kubernetes Engine?Setting up DigitalOcean Managed Kubernetes manuallyAutomating DigitalOcean Managed KubernetesWhat is Kubernetes PaaS and how does it differ?OpenShiftOpenShift in the enterpriseGetting started with OpenShift SandboxOpenShift on AWSSummaryFurther reading
Technical requirementsUnderstanding operating systems and infrastructureKubeadm DeploymentSystem sizeSystem locationOperating systemTroubleshooting on-prem Kubernetes clustersServer logs and infrastructure troubleshootingNetwork observabilityKubernetes metricscrictlkubectlIntroducing hybrid servicesAzure Stack HCIGoogle AnthosA quick note about other infrastructure managersExploring networking and system componentskube-proxyCNIKubernetes resource communicationDNSService mesh and IngressGetting to know virtualized bare metalVirtualizing your environmentWhere to run KubernetesSummaryFurther reading
Technical requirementsUnderstanding cloud-native appsWhat’s a cloud-native app?Cloud-specific cloud nativeWhat are microservices?Learning about Kubernetes app deploymentsKubernetes manifestsControllers and operatorsDifferent ways to deploy with higher-level controllersScalingMulti-container PodsLiveness and readiness probesExploring segregation and namespacesNamespacesSingle tenancyMulti-tenancyInvestigating stateless and stateful appsStateful versus statelessContainer Storage InterfaceVolumesResource requests and limitsUpgrading Kubernetes appsTypes of upgradesWhat happens to an app being upgraded?Rolling updatesRollbacksSummaryFurther reading
Technical requirementsGetting to know Helm charts and KustomizeWhy think about deployment methods for manifests?Helm chartsKustomizeDeploying with CI/CD and GitOpsWhat is CI/CD?Using CI/CD for Kubernetes deploymentsWhat is GitOps?Using GitOps for automated deploymentsProduction use cases for CI/CD and GitOpsTroubleshooting application deploymentsTroubleshooting PodsTroubleshooting ServicesTroubleshooting DeploymentsService meshes and IngressesWhy Ingress?Why service meshes?SummaryFurther reading

Technical requirementsHow is monitoring different than observability?What’s monitoring?What’s observability?Monitoring versus observability examplesMonitoring and observability tools for KubernetesThe Kubernetes DashboardAzure MonitorAWS Container InsightsGrafana/PrometheusObservability practicesLoggingMetricsTracesMonitoring Kubernetes resourcesMonitoring PodsSummaryFurther reading
Technical requirementsOut-of-the-box Kubernetes securitySecurity breakdownKubernetes securityInvestigating cluster securityCluster hardening and benchmarksSystem scanningCluster network securityUpgrading the Kubernetes APIAudit logging and troubleshootingUnderstanding RBACWhat is RBAC?Roles and ClusterRolesRoleBindings and ClusterRoleBindingsKubernetes resource (object) securityPod securityPolicy enforcementScanning container imagesKubernetes SecretsCreating Kubernetes SecretsDon’t use Kubernetes SecretsSummaryFurther reading
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Content preview from 50 Kubernetes Concepts Every DevOps Engineer Should Know

Preface

The idea behind Kubernetes is to make engineers’ lives easier, right? Although true, there are pros and cons to every technology and platform. At the end of the day, Kubernetes does make handling containerization more efficient, but that doesn’t mean that it’s easy. Many organizations and engineers put in a lot of effort to truly get Kubernetes running the way it should run.

The goal of this book, and the overall 50 concepts, is to help mitigate some of these headaches. Although one book cannot mitigate every single issue that can occur, or make every single component work the way that it’s supposed to, the overall goal is to help you use Kubernetes in an easier fashion in production, with 50 key pieces ranging from cloud to on-prem ...