Book Image

The Kubernetes Workshop

By : Zachary Arnold, Sahil Dua, Wei Huang, Faisal Masood, Mélony Qin, Mohammed Abu Taleb
Book Image

The Kubernetes Workshop

By: Zachary Arnold, Sahil Dua, Wei Huang, Faisal Masood, Mélony Qin, Mohammed Abu Taleb

Overview of this book

Thanks to its extensive support for managing hundreds of containers that run cloud-native applications, Kubernetes is the most popular open source container orchestration platform that makes cluster management easy. This workshop adopts a practical approach to get you acquainted with the Kubernetes environment and its applications. Starting with an introduction to the fundamentals of Kubernetes, you’ll install and set up your Kubernetes environment. You’ll understand how to write YAML files and deploy your first simple web application container using Pod. You’ll then assign human-friendly names to Pods, explore various Kubernetes entities and functions, and discover when to use them. As you work through the chapters, this Kubernetes book will show you how you can make full-scale use of Kubernetes by applying a variety of techniques for designing components and deploying clusters. You’ll also get to grips with security policies for limiting access to certain functions inside the cluster. Toward the end of the book, you’ll get a rundown of Kubernetes advanced features for building your own controller and upgrading to a Kubernetes cluster without downtime. By the end of this workshop, you’ll be able to manage containers and run cloud-based applications efficiently using Kubernetes.
Table of Contents (20 chapters)
Preface

Cluster Security

One way to think about Kubernetes is as a gigantic self-orchestrating pool of compute, networking, and storage. As such, in many respects, Kubernetes is exactly like a cloud platform. It is important to understand this equivalence because this mental abstraction allows us to reason differently as a cluster operator versus a cluster developer. A cluster operator would want to ensure that all the components of the cluster were secure and hardened against any workload. A cluster developer would concern themselves with ensuring that the workload they are defining for Kubernetes is running securely inside the cluster.

Here is where your work becomes a bit easy – most cloud provider offerings from Kubernetes will ensure the security of the Kubernetes control plane for you. If, for whatever reason, you're not able to leverage a cloud provider offering, you'll want to read more in the documentation about securing your cluster at this link: https://kubernetes...