book

Acing the Certified Kubernetes Administrator Exam

by Chad Crowell

September 2023

Beginner to intermediate

312 pages

9h 1m

English

Manning Publications

Read now

Unlock full access

prefaceacknowledgmentsabout this bookWho should read this bookHow this book is organized: A road mapAbout the exercisesAbout the codeliveBook discussion forumOther online resourcesabout the authorabout the cover illustration
1.1 Introducing the CKA exam1.2 What’s in store1.2.1 What is a Kubernetes administrator?1.3 Meeting Kubernetes1.3.1 Cluster architecture, installation, and configuration1.3.2 Workloads and scheduling1.3.3 Services and networking1.3.4 Storage1.3.5 Troubleshooting1.4 Control plane node1.5 Worker nodes1.6 API model and PKI1.7 Linux system services1.8 Declarative syntax1.9 Exam exercisesSummary
2.1 Kubernetes cluster components2.1.1 Kubernetes version upgrade2.1.2 The control plane2.1.3 Taints and tolerations2.1.4 Nodes2.2 Datastore etcd2.2.1 Working with etcdctl2.2.2 Client and server certificates2.3 Exam exercisesSummary
3.1 Role-based access control3.1.1 Roles and Role bindings3.1.2 System Roles and groups3.2 Users and groups3.3 Service AccountsSummary
4.1 Scheduling applications4.1.1 Node selectors4.1.2 Node and Pod affinity4.2 Using Helm4.3 Pod metadata4.3.1 Resource requests and limits4.3.2 Multicontainer Pods4.3.3 ConfigMaps and SecretsSummary

5.1 Orchestrating applications5.1.1 Modifying running applications5.1.2 Application maintenance5.1.3 Application rollouts5.1.4 Exposing Deployments5.2 Application maintenance5.2.1 Cordoning and draining nodes5.2.2 Adding application resources (nodes)Summary
6.1 Configuring DNS6.2 CoreDNS6.2.1 Config files6.2.2 Replicating DNS6.2.3 Pod-to-Pod connectivity6.3 Ingress and Ingress controllers6.4 Services6.4.1 ClusterIP Service6.4.2 NodePort Service6.4.3 LoadBalancer Service6.5 Cluster node networking configurationSummary
7.1 Persistent volumes7.1.1 The problem with hostPath7.1.2 Volume modes7.1.3 Access modes7.1.4 Reclaim policies7.2 Persistent volume claim7.3 Storage class7.3.1 Inheriting from the storage class7.4 Nonpersistent volumesSummary
8.1 Understanding application logs8.1.1 Container log detail8.1.2 Troubleshooting from inside the container8.2 Cluster component failure8.2.1 Troubleshooting cluster events8.2.2 Worker node failure8.2.3 Did you specify the right host or port?8.2.4 Troubleshooting kubeconfig8.3 Network troubleshooting8.3.1 Troubleshooting the config8.3.2 Troubleshooting Services8.3.3 Troubleshooting cluster-wide communicationsSummary
9.1 Exam basics9.1.1 Competencies condensed9.1.2 Exam clusters9.2 Chapter reviews9.2.1 Quick review of chapter 29.2.2 Quick review of chapter 39.2.3 Quick review of chapter 49.2.4 Quick review of chapter 59.2.5 Quick review of chapter 69.2.6 Quick review of chapter 79.2.7 Quick review of chapter 89.3 Kubernetes documentation review9.4 Practice exam9.5 Additional tips for the examSummary
A.1 Installing the required packagesA.1.1 Install Docker DesktopA.1.2 Installing kindA.1.3 Creating a kind Kubernetes clusterA.1.4 Install kubectl (optional)A.2 Creating a multinode clusterA.3 Advanced configuration for kind
B.1 Setting the context with kubeconfigB.2 Setting an alias for kubectlB.3 Setting kubectl autocomplete
C.1 Creating a kind cluster without CNIC.2 Installing a bridge CNI pluginC.3 Installing Flannel CNIC.4 Creating a new kind clusterC.5 Installing the Calico CNI
D.1 Chapter 1 exam exercisesD.1.1 Listing API resourcesD.1.2 Listing servicesD.1.3 The status of the kubelet serviceD.1.4 Using declarative syntaxD.1.5 Listing Kubernetes servicesD.2 Chapter 2 exam exercisesD.2.1 Shortening the kubectl commandD.2.2 Listing running PodsD.2.3 Viewing the kubelet client certificateD.2.4 Backing up etcdD.2.5 Restoring etcdD.2.6 Upgrading the control planeD.3 Chapter 3 exam exercisesD.3.1 Creating a RoleD.3.2 Create a role bindingD.3.3 Creating a new userD.3.4 Adding Sandra to kubeconfigD.3.5 Creating a new Service AccountD.3.6 Creating a new cluster roleD.4 Chapter 4 exam exercisesD.4.1 Applying a label and creating a PodD.4.2 Editing a running PodD.4.3 Using node affinity for a new PodD.5 Chapter 5 exam exercisesD.5.1 Scaling replicas in a DeploymentD.5.2 Updating the imageD.5.3 Viewing ReplicaSet eventsD.5.4 Rolling back to a previous app versionD.5.5 Changing the rollout strategyD.5.6 Cordoning and uncordoning a nodeD.5.7 Removing a taint from a nodeD.6 Chapter 6 exam exercisesD.6.1 exec-ing into a PodD.6.2 Changing the DNS serviceD.6.3 Changing the kubelet configurationD.6.4 Editing the kubelet ConfigMapD.6.5 Scaling the CoreDNS DeploymentD.6.6 Verifying DNS changes from a PodD.6.7 Creating a Deployment and ServiceD.6.8 Changing the ClusterIP Service to NodePortD.6.9 Installing Ingress controller and Ingress resourceD.6.10 Installing a container network interface (CNI)D.7 Chapter 7 exam exercisesD.7.1 Creating a persistent volumeD.7.2 Creating a persistent volume claimD.7.3 Creating a Pod to use the claimD.7.4 Creating a storage classD.7.5 Creating a persistent volume claim for a storage classD.7.6 Creating a Pod from a storage classD.8 Chapter 8 exam exercisesD.8.1 Fixing the Pod YAMLD.8.2 Fixing the Pod imageD.8.3 Fixing a completed PodD.8.4 Fixing the Kubernetes schedulerD.8.5 Fixing the kubelet

Content preview from Acing the Certified Kubernetes Administrator Exam

front matter

preface

I started my Kubernetes journey in 2017 while working for a small fintech startup in Austin, Texas. I was asked to migrate servers from Amazon EC2 (Amazon Elastic Cloud Computing) to AKS (Azure Kubernetes Service). I had never heard of Kubernetes before, but the decision from management was firm, and so I was thrown into the fire. I feverishly scrolled through the documentation website, blogs, books, and anything I could find to try to absorb this new technology. I remember feeling afraid to attend standup, as I had only confused myself further and hadn’t made any substantial progress. I was stuck and needed some help. I needed someone who was just a little bit ahead of me—someone that knew enough about Kubernetes to get ...