book

Managing Kubernetes

by Brendan Burns, Craig Tracey

November 2018

Intermediate to advanced

185 pages

4h 39m

English

O'Reilly Media, Inc.

Read now

Unlock full access

Who should read This BookWhy we wrote This BookNavigating This BookConventions Used in This BookUsing Code ExamplesO’Reilly SafariHow to Contact UsAcknowledgments
How the Cluster OperatesAdjust, Secure, and Tune the ClusterResponding When Things Go WrongExtending the System with New and Custom FunctionalitySummary
ContainersContainer OrchestrationThe Kubernetes APIBasic Objects: Pods, ReplicaSets, and ServicesOrganizing Your Cluster with Namespaces, Labels, and AnnotationsAdvanced Concepts: Deployments, Ingress, and StatefulSetsBatch Workloads: Job and ScheduledJobCluster Agents and Utilities: DaemonSetsSummary
ConceptsDeclarative ConfigurationReconciliation or ControllersImplicit or Dynamic GroupingStructureUnix Philosophy of Many ComponentsAPI-Driven InteractionsComponentsHead Node ComponentsComponents On All NodesScheduled ComponentsSummary
Basic Characteristics for ManageabilityPieces of the API ServerAPI ManagementAPI PathsAPI DiscoveryOpenAPI Spec ServingAPI TranslationRequest ManagementTypes of RequestsLife of a RequestAPI Server InternalsCRD Control LoopDebugging the API ServerBasic LogsAudit LogsActivating Additional LogsDebugging kubectl RequestsSummary
An Overview of SchedulingScheduling ProcessPredicatesPrioritiesHigh-Level AlgorithmConflictsControlling Scheduling with Labels, Affinity, Taints, and TolerationsNode SelectorsNode AffinityTaints and TolerationsSummary
kubeadmRequirementskubeletInstalling the Control Planekubeadm ConfigurationPreflight ChecksCertificatesetcdkubeconfigTaintsInstalling Worker NodesAdd-OnsPhasesHigh AvailabilityUpgradesSummary
UsersAuthenticationkubeconfigService AccountsSummary
RESTAuthorizationRole-Based Access ControlRole and ClusterRoleRoleBinding and ClusterRoleBindingTesting AuthorizationSummary
ConfigurationCommon ControllersPodSecurityPoliciesResourceQuotaLimitRangeDynamic Admission ControllersValidating Admission ControllersMutating Admission ControllersSummary

Container Network InterfaceChoosing a Plug-inkube-proxyService DiscoveryDNSEnvironment VariablesNetwork PolicyService MeshSummary
Goals for MonitoringDifferences Between Logging and MonitoringBuilding a Monitoring StackGetting Data from Your Cluster and ApplicationsAggregating Metrics and Logs from Multiple SourcesStoring Data for Retrieval and QueryingVisualizing and Interacting with Your DataWhat to Monitor?Monitoring MachinesMonitoring KubernetesMonitoring ApplicationsBlackbox MonitoringStreaming LogsAlertingSummary
High AvailabilityStateApplication DataPersistent VolumesLocal DataWorker NodesetcdArkSummary
Kubernetes Extension PointsCluster DaemonsUse Cases for Cluster DaemonsInstalling a Cluster DaemonOperational Considerations for Cluster DaemonsHands-On: Example of Creating a Cluster DaemonCluster AssistantsUse Cases for Cluster AssistantsInstalling a Cluster AssistantOperational Considerations for Cluster AssistantsHands-On: Example of Cluster AssistantsExtending the Life Cycle of the API ServerUse Cases for Extending the API Life CycleInstalling API Life Cycle ExtensionsOperational Considerations for Life Cycle ExtensionsHands-On: Example of Life Cycle ExtensionsAdding Custom APIs to KubernetesUse Cases for Adding New APIsCustom Resource Definitions and Aggregated API ServersArchitecture for Custom Resource DefinitionsInstalling Custom Resource DefinitionsOperational Considerations for Custom ResourcesSummary

Content preview from Managing Kubernetes

Chapter 2. An Overview of Kubernetes

Building, deploying, and managing applications on top of the Kubernetes API is a complex topic in its own right. It is beyond the scope of this book to give a complete understanding of the Kubernetes API in all of its detail. For those purposes, there are a number of books, such as Kubernetes: Up and Running (O’Reilly), and online resources that will give you the knowledge necessary to build an application on Kubernetes. If you are completely new to Kubernetes and interested in building applications on top of the system, we definitely recommend taking advantage of these resources to augment the information in this chapter.

On the other hand, if you are responsible for managing a Kubernetes cluster or you have a high-level understanding of the Kubernetes API, this chapter provides an introduction to the basic concepts of Kubernetes and their role in the development of an application. If after reading this chapter you still feel uncomfortable having a conversation with your users about their use of Kubernetes, we highly recommend that you avail yourself of these additional resources.

In this chapter, we first introduce the notion of containers and how they can be used to package and deploy your application. Then we introduce the core concepts behind the Kubernetes API, and finally, we conclude with some higher-level concepts that Kubernetes has added to make specific tasks easier.