book

Kubernetes - A Complete DevOps Cookbook

Name: Kubernetes - A Complete DevOps Cookbook
Author: Murat Karslioglu
ISBN: 9781838828042

by Murat Karslioglu

March 2020

Intermediate to advanced

584 pages

10h 1m

English

Packt Publishing

Read now

Unlock full access

Title Page
Copyright and Credits
Kubernetes A Complete DevOps Cookbook
Dedication
About Packt
Why subscribe?
Contributors
About the authorAbout the reviewerPackt is searching for authors like you
Preface
Who this book is forWhat this book coversTo get the most out of this bookDownload the example code filesDownload the color imagesCode in ActionConventions usedSectionsGetting readyHow to do it…How it works…There's more…See alsoGet in touchReviews
Building Production-Ready Kubernetes Clusters
Technical requirementsConfiguring a Kubernetes cluster on Amazon Web Services Getting readyHow to do it…Installing the command-line tools to configure AWS servicesInstalling kops to provision a Kubernetes clusterProvisioning a Kubernetes cluster on Amazon EC2Provisioning a managed Kubernetes cluster on Amazon EKSHow it works...There's more…Using the AWS ShellUsing a gossip-based clusterUsing different regions for an S3 bucketEditing the cluster configurationDeleting your clusterProvisioning an EKS cluster using the Amazon EKS Management ConsoleDeploying Kubernetes DashboardSee alsoConfiguring a Kubernetes cluster on Google Cloud PlatformGetting readyHow to do it…Installing the command-line tools to configure GCP servicesProvisioning a managed Kubernetes cluster on GKEConnecting to Google Kubernetes Engine (GKE) clustersHow it works…There's more…Using Google Cloud ShellDeploying with a custom network configurationDeleting your clusterViewing the Workloads dashboardSee alsoConfiguring a Kubernetes cluster on Microsoft AzureGetting readyHow to do it…Installing the command-line tools to configure Azure servicesProvisioning a managed Kubernetes cluster on AKSConnecting to AKS clustersHow it works…There's more…Deleting your clusterViewing Kubernetes DashboardSee alsoConfiguring a Kubernetes cluster on Alibaba CloudGetting readyHow to do it…Installing the command-line tools to configure Alibaba Cloud servicesProvisioning a highly available Kubernetes cluster on Alibaba CloudConnecting to Alibaba Container Service clustersHow it works…There's more…Configuring and managing Kubernetes clusters with RancherGetting readyHow to do it…Installing Rancher ServerDeploying a Kubernetes clusterImporting an existing clusterEnabling cluster and node providersHow it works…There's more…Bind mounting a host volume to keep dataKeeping user volumes persistentRunning Rancher on the same Kubernetes nodesSee alsoConfiguring Red Hat OpenShift Getting readyHow to do it…Downloading OpenShift binariesProvisioning an OpenShift clusterConnecting to OpenShift clustersHow it works…There's more…Deleting your clusterSee alsoConfiguring a Kubernetes cluster using AnsibleGetting readyHow to do it…Installing AnsibleProvisioning a Kubernetes cluster using an Ansible playbookConnecting to the Kubernetes clusterSee alsoTroubleshooting installation issuesHow to do it…How it works…There's more…Setting log levelsSee also
Operating Applications on Kubernetes
Technical requirementsDeploying workloads using YAML filesGetting readyHow to do it…Creating a DeploymentVerifying a DeploymentEditing a DeploymentRolling back a deploymentDeleting a DeploymentHow it works...See alsoDeploying workloads using KustomizeGetting readyHow to do it…Validating the Kubernetes cluster versionGenerating Kubernetes resources from filesCreating a base for a development and production DeploymentHow it works...See alsoDeploying workloads using Helm chartsGetting readyHow to do it…Installing Helm 2.xInstalling an application using Helm chartsSearching for an application in Helm repositoriesUpgrading an application using HelmRolling back an application using HelmDeleting an application using HelmAdding new Helm repositoriesBuilding a Helm chartHow it works...See alsoDeploying and operating applications using Kubernetes operatorsGetting readyHow to do it…Installing KUDO and the KUDO kubectl pluginInstalling the Apache Kafka Operator using KUDOInstalling Operator Lifecycle ManagerInstalling the Zalando PostgreSQL OperatorSee alsoDeploying and managing the life cycle of Jenkins XGetting readyHow to do it...Installing the Jenkins X CLICreating a Jenkins X Kubernetes clusterVerifying Jenkins X componentsSwitching Kubernetes clustersValidating cluster conformanceHow it works...There's more…Importing an applicationUpgrading a Jenkins X applicationDeleting a Jenkins X Kubernetes clusterSee alsoDeploying and managing the life cycle of GitLabGetting readyHow to do it...Installing GitLab using HelmConnecting to the GitLab dashboardCreating the first GitLab userUpgrading GitLabHow it works...There's more…Using your own wildcard certificateUsing autogenerated self-signed certificatesEnabling the GitLab OperatorDeleting GitLabSee also
Building CI/CD Pipelines
Technical requirementsCreating a CI/CD pipeline in Jenkins XGetting readyHow to do it…Connecting to Jenkins Pipeline ConsoleImporting an application as a pipelineChecking application statusPromoting an application to productionCreating a pipeline using a QuickStart applicationHow it works...Creating a CI/CD pipeline in GitLabGetting readyHow to do it…Creating a project using templatesImporting an existing project from GitHubEnabling Auto DevOpsEnabling Kubernetes cluster integrationCreating a pipeline using Auto DevOpsIncrementally rolling out applications to productionHow it works...There's more...GitLab Web IDEMonitoring environmentsSee alsoCreating a CI/CD pipeline in CircleCIGetting readyHow to do it...Getting started with CircleCIDeploying changes to a Kubernetes cluster on EKSHow it works...See alsoSetting up a CI/CD pipeline using GitHub ActionsGetting readyHow to do it...Creating a workflow fileCreating a basic Docker build workflowBuilding and publishing images to Docker RegistryAdding a workflow status badgeSee alsoSetting up a CI/CD pipeline on Amazon Web ServicesGetting readyHow to do it...Creating an AWS CodeCommit code repositoryBuilding projects with AWS CodeBuildCreating an AWS CodeDeploy deploymentBuilding a pipeline with AWS CodePipelineHow it works...See alsoSetting up a CI/CD pipeline with Spinnaker on Google Cloud BuildGetting readyHow to do it...Installing and configuring the Spin CLIConfiguring a service account for the CI/CDConfiguring events to trigger a pipelineDeploying Spinnaker using HelmCreating a Google Cloud Source code repositoryBuilding projects with Google Cloud BuildConfiguring a Spinnaker pipelineRolling out an application to productionSee alsoSetting up a CI/CD pipeline on Azure DevOpsGetting readyHow to do it...Getting started with Azure DevOpsConfiguring Azure PipelinesDeploying changes to an AKS clusterHow it works...See also
Automating Tests in DevOps
Technical requirementsBuilding event-driven automation with StackStormGetting readyHow to do it…Installing StackStormAccessing the StackStorm UIUsing the st2 CLIDefining a ruleDeploying a ruleSee alsoAutomating tests with the Litmus frameworkGetting readyHow to do it…Installing the Litmus OperatorUsing Chaos Charts for KubernetesCreating a pod deletion chaos experimentReviewing chaos experiment resultsViewing chaos experiment logsHow it works...See alsoAutomating Chaos Engineering with GremlinGetting readyHow to do it…Setting up Gremlin credentialsInstalling Gremlin on KubernetesCreating a CPU attack against a Kubernetes workerCreating a node shutdown attack against a Kubernetes workerRunning predefined scenario-based attacksDeleting Gremlin from your clusterHow it works...See alsoAutomating your code review with CodacyGetting readyHow to do it…Accessing the Project DashboardReviewing commits and PRsViewing issues by categoryAdding a Codacy badge to your repositorySee alsoDetecting bugs and anti-patterns with SonarQubeGetting readyHow to do it…Installing SonarQube using HelmAccessing the SonarQube DashboardCreating a new user and tokensEnabling quality profilesAdding a projectReviewing a project's qualityAdding marketplace pluginsDeleting SonarQube from your clusterHow it works...See alsoDetecting license compliance issues with FOSSAGetting readyHow to do it…Adding projects to FOSSATriaging licensing issuesAdding a FOSSA badge to your project

Preparing for Stateful Workloads
Technical requirementsManaging Amazon EBS volumes in KubernetesGetting readyHow to do it…Creating an EBS storage classChanging the default storage classUsing EBS volumes for persistent storageUsing EBS storage classes to dynamically create persistent volumesDeleting EBS persistent volumesInstalling the EBS CSI driver to manage EBS volumesSee alsoManaging GCE PD volumes in KubernetesGetting readyHow to do it…Creating a GCE persistent disk storage classChanging the default storage classUsing GCE PD volumes for persistent storageUsing GCE PD storage classes to create dynamic persistent volumesDeleting GCE PD persistent volumesInstalling the GCP Compute PD CSI driver to manage PD volumesHow it works...See alsoManaging Azure Disk volumes in KubernetesGetting readyHow to do it…Creating an Azure Disk storage classChanging the default storage class to ZRSUsing Azure Disk storage classes to create dynamic PVsDeleting Azure Disk persistent volumesInstalling the Azure Disk CSI driverSee alsoConfiguring and managing persistent storage using RookGetting readyHow to do it…Installing a Ceph provider using RookCreating a Ceph clusterVerifying a Ceph cluster's healthCreate a Ceph block storage classUsing a Ceph block storage class to create dynamic PVsSee alsoConfiguring and managing persistent storage using OpenEBSGetting readyHow to do it…Installing iSCSI client prerequisitesInstalling OpenEBSUsing ephemeral storage to create persistent volumesCreating storage poolsCreating OpenEBS storage classesUsing an OpenEBS storage class to create dynamic PVsHow it works...See alsoSetting up NFS for shared storage on KubernetesGetting readyHow to do it…Installing NFS prerequisitesInstalling an NFS provider using a Rook NFS operatorUsing a Rook NFS operator storage class to create dynamic NFS PVsInstalling an NFS provisioner using OpenEBSUsing the OpenEBS NFS provisioner storage class to create dynamic NFS PVsSee alsoTroubleshooting storage issuesGetting readyHow to do it…Persistent volumes in the pending stateA PV is stuck once a PVC has been deleted
Disaster Recovery and Backup
Technical requirementsConfiguring and managing S3 object storage using MinIOGetting readyHow to do it…Creating a deployment YAML manifestCreating a MinIO S3 serviceAccessing the MinIO web user interfaceHow it works...See alsoManaging Kubernetes Volume Snapshots and restoreGetting readyHow to do it…Enabling feature gatesCreating a volume snapshot via CSIRestoring a volume from a snapshot via CSICloning a volume via CSIHow it works...See alsoApplication backup and recovery using VeleroGetting readyHow to do it…Installing VeleroBacking up an applicationRestoring an applicationCreating a scheduled backupTaking a backup of an entire namespaceViewing backups with MinIODeleting backups and schedulesHow it works...See alsoApplication backup and recovery using KastenGetting readyHow to do it…Installing KastenAccessing the Kasten DashboardBacking up an applicationRestoring an applicationHow it works...See alsoCross-cloud application migrationGetting readyHow to do it…Creating an export profile in KastenExporting a restore point in KastenCreating an import profile in KastenMigrating an application in KastenImporting clusters into OpenEBS DirectorMigrating an application in OpenEBS DirectorSee also
Scaling and Upgrading Applications
Technical requirementsScaling applications on KubernetesGetting readyHow to do it…Validating the installation of Metrics ServerManually scaling an applicationAutoscaling applications using a Horizontal Pod AutoscalerHow it works...See alsoAssigning applications to nodesGetting readyHow to do it…Labeling nodesAssigning pods to nodes using nodeSelectorAssigning pods to nodes using node and inter-pod AffinityHow it works...See alsoCreating an external load balancerGetting readyHow to do it…Creating an external cloud load balancerFinding the external address of the serviceHow it works...See alsoCreating an ingress service and service mesh using IstioGetting readyHow to do it…Installing Istio using HelmVerifying the installationCreating an ingress gatewayHow it works...There's more…Deleting IstioSee alsoCreating an ingress service and service mesh using LinkerdGetting readyHow to do it…Installing the Linkerd CLIInstalling LinkerdVerifying a Linkerd deploymentAdding Linkerd to a serviceThere's more…Accessing the dashboardDeleting LinkerdSee alsoAuto-healing pods in KubernetesGetting readyHow to do it…Testing self-healing podsAdding liveness probes to podsHow it works...See alsoManaging upgrades through blue/green deploymentsGetting readyHow to do it…Creating the blue deploymentCreating the green deploymentSwitching traffic from blue to greenSee also
Observability and Monitoring on Kubernetes
Technical requirementsMonitoring in KubernetesGetting readyHow to do it…Adding metrics using Kubernetes Metrics ServerMonitoring metrics using the CLIMonitoring metrics using Kubernetes DashboardMonitoring node healthSee alsoInspecting containersGetting readyHow to do it…Inspecting pods in Pending statusInspecting pods in ImagePullBackOff statusInspecting pods in CrashLoopBackOff statusSee alsoMonitoring using Amazon CloudWatchGetting readyHow to do it…Enabling Webhook authorization modeInstalling Container Insights Agents for Amazon EKSViewing Container Insights metricsSee alsoMonitoring using Google StackdriverGetting readyHow to do it…Installing Stackdriver Kubernetes Engine Monitoring support for GKEConfiguring a workspace on StackdriverMonitoring GKE metrics using StackdriverSee alsoMonitoring using Azure MonitorGetting readyHow to do it…Enabling Azure Monitor support for AKS using the CLIMonitoring AKS performance metrics using Azure MonitorViewing live logs using Azure MonitorSee alsoMonitoring Kubernetes using Prometheus and GrafanaGetting readyHow to do it…Deploying Prometheus using Helm chartsMonitoring metrics using Grafana dashboardsAdding a Grafana dashboard to monitor applicationsSee alsoMonitoring and performance analysis using SysdigGetting readyHow to do it…Installing the Sysdig agentAnalyzing application performanceSee alsoManaging the cost of resources using KubecostGetting readyHow to do it…Installing KubecostAccessing the Kubecost dashboardMonitoring Kubernetes resource cost allocationSee also
Securing Applications and Clusters
Technical requirementsUsing RBAC to harden cluster securityGetting readyHow to do it…Viewing the default RolesCreating user accountsCreating Roles and RoleBindingsTesting the RBAC rulesHow it works...See alsoConfiguring Pod Security PoliciesGetting readyHow to do it…Enabling PSPs on EKSEnabling PSPs on GKEEnabling PodSecurityPolicy on AKSCreating a restricted PSPsThere's more…Restricting pods to access certain volume typesUsing Kubernetes PodSecurityPolicy advisorSee alsoUsing Kubernetes CIS Benchmark for security auditingGetting readyHow to do it…Running kube-bench on KubernetesRunning kube-bench on managed Kubernetes servicesRunning kube-bench on OpenShiftHow it works...See alsoBuilding DevSecOps into the pipeline using Aqua SecurityGetting readyHow to do it…Scanning images using TrivyBuilding vulnerability scanning into GitLabBuilding vulnerability scanning into CircleCISee alsoMonitoring suspicious application activities using FalcoGetting readyHow to do it…Installing Falco on KubernetesDetecting anomalies using FalcoDefining custom rulesHow it works...See alsoSecuring credentials using HashiCorp VaultGetting readyHow to do it…Installing Vault on KubernetesAccessing the Vault UIStoring credentials on VaultSee also
Logging with Kubernetes
Technical requirementsAccessing Kubernetes logs locallyGetting readyHow to do it…Accessing logs through KubernetesDebugging services locally using TelepresenceHow it works...See alsoAccessing application-specific logsGetting readyHow to do it…Getting shell access in a containerAccessing PostgreSQL logs inside a containerBuilding centralized logging in Kubernetes using the EFK stackGetting readyHow to do it…Deploying Elasticsearch OperatorRequesting the Elasticsearch endpointDeploying KibanaAggregating logs with Fluent BitAccessing Kubernetes logs on KibanaSee alsoLogging Kubernetes using Google StackdriverGetting readyHow to do it…Installing Stackdriver Kubernetes Engine Monitoring support for GKEViewing GKE logs using StackdriverSee alsoUsing a managed Kubernetes logging serviceGetting readyHow to do it…Connecting clusters to Director OnlineAccessing logs using Director OnlineLogging for your Jenkins CI/CD environmentGetting readyHow to do it…Installing the Fluentd pluginStreaming Jenkins logs to Elasticsearch using FluentdThere's more…Installing the Logstash pluginStreaming Jenkins logs to Elasticsearch using LogstashSee also
Other Books You May Enjoy
Leave a review - let other readers know what you think

Content preview from Kubernetes - A Complete DevOps Cookbook

Preparing for Stateful Workloads

In this chapter, we will discuss using popular open source storage solutions on Kubernetes and how to protect the state of applications from node or application failures and share the same data, or how to handle reattaching volumes when the pod is rescheduled on a different node. After following the recipes in this chapter, you will have acquired the skills to use both block and file storage options in self-managed infrastructure or private clouds.

In this chapter, we will be covering the following recipes:

Managing Amazon EBS volumes in Kubernetes
Managing GCE PD volumes in Kubernetes
Managing Azure Disk volumes in Kubernetes
Configuring and managing persistent storage using Rook
Configuring and managing ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781838828042

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Kubernetes - A Complete DevOps Cookbook

by Murat Karslioglu

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.