September 2024
Intermediate to advanced
508 pages
16h 4m
Spanish
Content preview from Kubernetes de producción
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Capítulo 8. Control de admisión
Este trabajo se ha traducido utilizando IA. Agradecemos tus opiniones y comentarios: translation-feedback@oreilly.com
Hemos escrito muchas veces en este libro que el diseño flexible y modular de Kubernetes es uno de sus grandes puntos fuertes. Los valores predeterminados sensibles pueden sustituirse, aumentarse o ampliarse para proporcionar experiencias alternativas o más completas a los consumidores de la plataforma. El control de admisión es un área que se beneficia especialmente de este objetivo de diseño flexible. El control de admisión se ocupa de validar y mutar las solicitudes al servidor API de Kubernetes antes de que se almacenen en etcd. Esta capacidad de interceptar objetos con granularidad y control finos abre una serie de casos de uso interesantes, por ejemplo:
-
Garantizar que no se puedan crear nuevos objetos en un Espacio de Nombres que se esté eliminando en ese momento (en estado de terminación).
-
Imponer que los nuevos Pods no se ejecuten como usuario root
-
Asegurarse de que la suma total de memoria utilizada por todos los Pods de un Namespace no supera un límite definido por el usuario
-
Garantizar que las reglas de entrada no puedan sobrescribirse accidentalmente
-
Añadir un contenedor sidecar a cada Pod (por ejemplo, Istio)
Primero echaremos un vistazo de alto nivel a la cadena de admisión, que es el proceso por el que pasan todas las solicitudes al servidor API. Luego pasaremos a cubrir los controladores dentro del árbol. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.