Skip to Content
Kubernetes 认证管理员 (CKA) 学习指南 (Chinese Edition), 2nd Edition
book

Kubernetes 认证管理员 (CKA) 学习指南 (Chinese Edition), 2nd Edition

by Benjamin Muschko
January 2026
Intermediate to advanced
392 pages
4h 44m
Chinese
O'Reilly Media, Inc.
Content preview from Kubernetes 认证管理员 (CKA) 学习指南 (Chinese Edition), 2nd Edition

第五部分 服务 与网络

服务与网络领域涵盖了建立和限制集群内运行微服务之间或外部消费者通信的重要Kubernetes基础组件。更具体地说,该领域涵盖服务(Services)、入口(Ingresses)以及网络策略等基础组件。

后续章节将阐述这些概念:

  • 第17章介绍Service资源类型。您将学习如何将集群内部的微服务暴露给系统其他部分,同时使应用程序可被集群外的终端用户访问。

  • 第18章首先阐释为何Service常不足以满足应用对外暴露需求。Ingress原语可通过HTTP(S)协议向消费者暴露负载均衡的端点。

  • 第19章探讨了传统Ingress原语的替代API。本章阐述Ingress的局限性,同时概述网关API CRD及迁移策略。

  • 第20章从安全角度阐释网络策略的必要性。默认情况下Kubernetes的Pod间通信不受限制,但需实施最小权限原则,确保仅允许架构需求所必需的Pod进行通信。限制Pod间网络交互可有效缩小潜在攻击面。

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Kubernetes 上的生成式人工智能 (Chinese Edition)

Kubernetes 上的生成式人工智能 (Chinese Edition)

Roland Huß, Daniele Zonca
游戏化头脑风暴

游戏化头脑风暴

Dave Gray, Sunni Brown, James Macanufo

Publisher Resources

ISBN: 0642572314712