Book Image

Cloud Native with Kubernetes

By : Alexander Raul
Book Image

Cloud Native with Kubernetes

By: Alexander Raul

Overview of this book

Kubernetes is a modern cloud native container orchestration tool and one of the most popular open source projects worldwide. In addition to the technology being powerful and highly flexible, Kubernetes engineers are in high demand across the industry. This book is a comprehensive guide to deploying, securing, and operating modern cloud native applications on Kubernetes. From the fundamentals to Kubernetes best practices, the book covers essential aspects of configuring applications. You’ll even explore real-world techniques for running clusters in production, tips for setting up observability for cluster resources, and valuable troubleshooting techniques. Finally, you’ll learn how to extend and customize Kubernetes, as well as gaining tips for deploying service meshes, serverless tooling, and more on your cluster. By the end of this Kubernetes book, you’ll be equipped with the tools you need to confidently run and extend modern applications on Kubernetes.
Table of Contents (22 chapters)
1
Section 1: Setting Up Kubernetes
5
Section 2: Configuring and Deploying Applications on Kubernetes
11
Section 3: Running Kubernetes in Production
16
Section 4: Extending Kubernetes

Chapter 12 – Kubernetes Security and Compliance

  1. MutatingAdmissionWebhook and ValidatingAdmissionWebhook.
  2. A NetworkPolicy with a blank Pod Selector has the effect of selecting all Pods. A NetworkPolicy with all Pods selected, and Ingress and Egress types added without any rules, will have the effect of automatically denying all ingress and egress to all Pods in the namespace of the NetworkPolicy.
  3. We would want to track any API requests where resources are patched or updated, because attackers could update a Deployment, Pod, or another resource with malicious containers.