book

Kubernetes: Up and Running, 3rd Edition

by Brendan Burns, Joe Beda, Kelsey Hightower, Lachlan Evenson

August 2022

Intermediate to advanced

328 pages

8h 22m

English

O'Reilly Media, Inc.

Book available

Read now

Unlock full access

Includes

Includes Quizzes

Has Sandbox

Who Should Read This BookWhy We Wrote This BookWhy We Updated This BookA Word on Cloud Native Applications TodayNavigating This BookOnline ResourcesConventions Used in This BookUsing Code ExamplesO’Reilly Online LearningHow to Contact UsAcknowledgments
VelocityThe Value of ImmutabilityDeclarative ConfigurationSelf-Healing SystemsScaling Your Service and Your TeamsDecouplingEasy Scaling for Applications and ClustersScaling Development Teams with MicroservicesSeparation of Concerns for Consistency and ScalingAbstracting Your InfrastructureEfficiencyCloud Native EcosystemSummary
Container ImagesBuilding Application Images with DockerDockerfilesOptimizing Image SizesImage SecurityMultistage Image BuildsStoring Images in a Remote RegistryThe Container Runtime InterfaceRunning Containers with DockerExploring the kuard ApplicationLimiting Resource UsageCleanupSummary
Installing Kubernetes on a Public Cloud ProviderInstalling Kubernetes with Google Kubernetes EngineInstalling Kubernetes with Azure Kubernetes ServiceInstalling Kubernetes on Amazon Web ServicesInstalling Kubernetes Locally Using minikubeRunning Kubernetes in DockerThe Kubernetes ClientChecking Cluster StatusListing Kubernetes NodesCluster ComponentsKubernetes ProxyKubernetes DNSKubernetes UISummary
NamespacesContextsViewing Kubernetes API ObjectsCreating, Updating, and Destroying Kubernetes ObjectsLabeling and Annotating ObjectsDebugging CommandsCluster ManagementCommand AutocompletionAlternative Ways of Viewing Your ClusterSummary
Pods in KubernetesThinking with PodsThe Pod ManifestCreating a PodCreating a Pod ManifestRunning PodsListing PodsPod DetailsDeleting a PodAccessing Your PodGetting More Information with LogsRunning Commands in Your Container with execCopying Files to and from ContainersHealth ChecksLiveness ProbeReadiness ProbeStartup ProbeAdvanced Probe ConfigurationOther Types of Health ChecksResource ManagementResource Requests: Minimum Required ResourcesCapping Resource Usage with LimitsPersisting Data with VolumesUsing Volumes with PodsDifferent Ways of Using Volumes with PodsPutting It All TogetherSummary
LabelsApplying LabelsModifying LabelsLabel SelectorsLabel Selectors in API ObjectsLabels in the Kubernetes ArchitectureAnnotationsCleanupSummary
What Is Service Discovery?The Service ObjectService DNSReadiness ChecksLooking Beyond the ClusterLoad Balancer IntegrationAdvanced DetailsEndpointsManual Service Discoverykube-proxy and Cluster IPsCluster IP Environment VariablesConnecting with Other EnvironmentsConnecting to Resources Outside of a ClusterConnecting External Resources to Services Inside a ClusterCleanupSummary
Ingress Spec Versus Ingress ControllersInstalling ContourConfiguring DNSConfiguring a Local hosts FileUsing IngressSimplest UsageUsing HostnamesUsing PathsCleanupAdvanced Ingress Topics and GotchasRunning Multiple Ingress ControllersMultiple Ingress ObjectsIngress and NamespacesPath RewritingServing TLSAlternate Ingress ImplementationsThe Future of IngressSummary
Reconciliation LoopsRelating Pods and ReplicaSetsAdopting Existing ContainersQuarantining ContainersDesigning with ReplicaSetsReplicaSet SpecPod TemplatesLabelsCreating a ReplicaSetInspecting a ReplicaSetFinding a ReplicaSet from a PodFinding a Set of Pods for a ReplicaSetScaling ReplicaSetsImperative Scaling with kubectl scaleDeclaratively Scaling with kubectl applyAutoscaling a ReplicaSetDeleting ReplicaSetsSummary

Your First DeploymentCreating DeploymentsManaging DeploymentsUpdating DeploymentsScaling a DeploymentUpdating a Container ImageRollout HistoryDeployment StrategiesRecreate StrategyRollingUpdate StrategySlowing Rollouts to Ensure Service HealthDeleting a DeploymentMonitoring a DeploymentSummary
DaemonSet SchedulerCreating DaemonSetsLimiting DaemonSets to Specific NodesAdding Labels to NodesNode SelectorsUpdating a DaemonSetDeleting a DaemonSetSummary
The Job ObjectJob PatternsOne ShotParallelismWork QueuesCronJobsSummary
ConfigMapsCreating ConfigMapsUsing a ConfigMapSecretsCreating SecretsConsuming SecretsPrivate Container RegistriesNaming ConstraintsManaging ConfigMaps and SecretsListingCreatingUpdatingSummary
Role-Based Access ControlIdentity in KubernetesUnderstanding Roles and Role BindingsRoles and Role Bindings in KubernetesTechniques for Managing RBACTesting Authorization with can-iManaging RBAC in Source ControlAdvanced TopicsAggregating ClusterRolesUsing Groups for BindingsSummary
Encryption and Authentication with Mutal TLSTraffic ShapingIntrospectionDo You Really Need a Service Mesh?Introspecting a Service Mesh ImplementationService Mesh LandscapeSummary
Importing External ServicesServices Without SelectorsLimitations of External Services: Health CheckingRunning Reliable SingletonsRunning a MySQL SingletonDynamic Volume ProvisioningKubernetes-Native Storage with StatefulSetsProperties of StatefulSetsManually Replicated MongoDB with StatefulSetsAutomating MongoDB Cluster CreationPersistent Volumes and StatefulSetsOne Final Thing: Readiness ProbesSummary
What It Means to Extend KubernetesPoints of ExtensibilityPatterns for Custom ResourcesJust DataCompilersOperatorsGetting StartedSummary
The Kubernetes API: A Client’s PerspectiveOpenAPI and Generated Client LibrariesBut What About kubectl x?Programming the Kubernetes APIInstalling the Client LibrariesAuthenticating to the Kubernetes APIAccessing the Kubernetes APIPutting It All Together: Listing and Creating Pods in Python, Java, and .NETCreating and Patching ObjectsWatching Kubernetes APIs for ChangesInteracting with PodsSummary
Understanding SecurityContextSecurityContext ChallengesPod SecurityWhat Is Pod Security?Applying Pod Security StandardsService Account ManagementRole-Based Access ControlRuntimeClassNetwork PolicyService MeshSecurity Benchmark ToolsImage SecuritySummary
Why Policy and Governance MatterAdmission FlowPolicy and Governance with GatekeeperWhat Is Open Policy Agent?Installing GatekeeperConfiguring PoliciesUnderstanding Constraint TemplatesCreating ConstraintsAuditMutationData ReplicationMetricsPolicy LibrarySummary
Before You Even BeginStarting at the Top with a Load-Balancing ApproachBuilding Applications for Multiple ClustersReplicated Silos: The Simplest Cross-Regional ModelSharding: Regional DataBetter Flexibility: Microservice RoutingSummary
Principles to Guide UsFilesystems as the Source of TruthThe Role of Code ReviewFeature GatesManaging Your Application in Source ControlFilesystem LayoutManaging Periodic VersionsStructuring Your Application for Development, Testing, and DeploymentGoalsProgression of a ReleaseParameterizing Your Application with TemplatesParameterizing with Helm and TemplatesFilesystem Layout for ParameterizationDeploying Your Application Around the WorldArchitectures for Worldwide DeploymentImplementing Worldwide DeploymentDashboards and Monitoring for Worldwide DeploymentsSummary
Parts ListFlashing ImagesFirst BootSetting Up NetworkingInstalling a Container RuntimeInstalling KubernetesSetting Up the ClusterSetting Up Cluster NetworkingSummary

Content preview from Kubernetes: Up and Running, 3rd Edition

About the Authors

Brendan Burns began his career with a brief stint in the software industry followed by a PhD in robotics focused on motion planning for human-like robot arms. This was followed by a brief stint as a professor of computer science. Eventually, he returned to Seattle and joined Google, where he worked on web search infrastructure with a special focus on low-latency indexing. While at Google, he created the Kubernetes project with Joe Beda and Craig McLuckie. Brendan is currently a director of engineering at Microsoft Azure.

Joe Beda started his career at Microsoft working on Internet Explorer (he was young and naive). Throughout 7 years at Microsoft and 10 at Google, Joe has worked on GUI frameworks, real-time voice and chat, telephony, machine learning for ads, and cloud computing. Most notably, while at Google, Joe started the Google Compute Engine and, along with Brendan Burns and Craig McLuckie, created Kubernetes. Along with Craig, Joe founded and sold a startup (Heptio) to VMware, where he is now a principal engineer. Joe proudly calls Seattle home.

Kelsey Hightower is a principal developer advocate at Google working on Google’s Cloud Platform. He has helped develop and refine many Google Cloud products including Google’s Kubernetes Engine, Cloud Functions, and Apigee’s API Gateway. Kelsey spends most of his time with executives and developers spanning the global Fortune 1000, helping them understand and leverage Google technologies and platforms to grow their ...