Chapter 9: Securing the Cluster Using GKE Security Constructs

Kubernetes, or K8s, is an open source container orchestration system that runs containerized applications but requires significant effort to set up and maintain. Google Kubernetes Engine (GKE) is an enhanced version of K8s that is managed in nature, abstracts the master plane components from the user, provides the ability to auto-upgrade, and supports features such as DNS, logging, and monitoring dashboards as built-ins rather than maintaining them as external plugins. Kubernetes has a lot of critical concepts, jargon, and objects. The last two chapters (Chapter 7, Understanding Kubernetes Essentials to Deploy Containerized Applications, and Chapter 8, Understanding GKE Essentials to Deploy Containerized Applications) focused on native Kubernetes features such as cluster anatomy, elaborated on key Kubernetes objects, and discussed how applications are scheduled on a cluster. In addition, the focus was extended to learning...