January 2026
Intermediate to advanced
392 pages
9h 33m
French
book
Guide d'étude de l'administrateur Kubernetes certifié (CKA) (French Edition), 2nd Edition
by Benjamin Muschko
Content preview from Guide d'étude de l'administrateur Kubernetes certifié (CKA) (French Edition), 2nd Edition
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Chapitre 20. Politiquesréseau
Cet ouvrage a été traduit à l'aide de l'IA. Tes réactions et tes commentaires sont les bienvenus : translation-feedback@oreilly.com
L'unicité de l'adresse IP attribuée à un pod est maintenue sur tous les nœuds et espaces de noms. Pour ça, un sous-réseau dédié est attribué à chaque nœud enregistré lors de sa création. Le plug-in CNI (Container Network Interface) gère la location des adresses IP à partir du sous-réseau attribué lorsqu'un nouveau pod est créé sur un nœud. Du coup, les pods d'un nœud peuvent communiquer sans problème avec tous les autres pods qui tournent sur n'importe quel nœud du cluster.
Par défaut, Kubernetes autorise la communication illimitée entre pods dans tous les espaces de noms, ce qui pose un risque important d', car un pod compromis dans un espace de noms pourrait potentiellement accéder à des services sensibles dans un autre espace de noms.
Les politiques réseau dans Kubernetes fonctionnent de manière similaire aux règles de pare-feu, spécialement conçues pour régir les communications entre pods. Ces politiques comprennent des règles spécifiant la direction du trafic réseau (entrant et/ou sortant) pour un ou plusieurs pods au sein d'un espace de noms ou entre différents espaces de noms. En plus, ces règles définissent les ports ciblés pour la communication. Ce contrôle précis renforce la sécurité et régit le flux de trafic au sein du cluster Kubernetes.
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.