Book Image

Mastering Kubernetes - Third Edition

By : Gigi Sayfan
Book Image

Mastering Kubernetes - Third Edition

By: Gigi Sayfan

Overview of this book

The third edition of Mastering Kubernetes is updated with the latest tools and code enabling you to learn Kubernetes 1.18’s latest features. This book primarily concentrates on diving deeply into complex concepts and Kubernetes best practices to help you master the skills of designing and deploying large clusters on various cloud platforms. The book trains you to run complex stateful microservices on Kubernetes including advanced features such as horizontal pod autoscaling, rolling updates, resource quotas, and persistent storage backend. With the two new chapters, you will gain expertise in serverless computing and utilizing service meshes. As you proceed through the chapters, you will explore different options for network configuration and learn to set up, operate, and troubleshoot Kubernetes networking plugins through real-world use cases. Furthermore, you will understand the mechanisms of custom resource development and its utilization in automation and maintenance workflows. By the end of this Kubernetes book, you will graduate from an intermediate to advanced Kubernetes professional.

Related Content you might be interested in

Current Title:

Small book image
Mastering Kubernetes - Third Edition
Gigi Sayfan
Jun, 2020 | 642 pages
Small book image
Hands-On Microservices with Kubernetes
Gigi Sayfan
Jul, 2019 | 502 pages
Small book image
Getting Started with Kubernetes
Jesse White | Jonathan Baier
Oct, 2018 | 470 pages
Small book image
Cloud Native with Kubernetes
Alexander Raul
Jan, 2021 | 446 pages
Table of Contents (19 chapters)
Preface
Preface
Who this book is for
What this book covers
To get the most out of this book
Get in touch
1
Understanding Kubernetes Architecture
Understanding Kubernetes Architecture
What is Kubernetes?
Kubernetes concepts
Diving into Kubernetes architecture in depth
Kubernetes runtimes
Continuous integration and deployment
Summary
Free Chapter
2
Creating Kubernetes Clusters
Overview
Creating a single-node cluster with Minikube
Creating a multi-node cluster with KinD
Creating a multi-node cluster with k3d
Comparing Minikube, KinD, and k3d
Creating clusters in the cloud (GCP, AWS, Azure)
Creating a bare-metal cluster from scratch
Summary
References
3
High Availability and Reliability
High Availability and Reliability
High availability concepts
High availability best practices
High availability, scalability, and capacity planning
Live cluster updates
Large cluster performance, cost, and design trade-offs
Summary
References
4
Securing Kubernetes
Securing Kubernetes
Understanding Kubernetes security challenges
Hardening Kubernetes
Running a multi-user cluster
Summary
References
5
Using Kubernetes Resources in Practice
Using Kubernetes Resources in Practice
Designing the Hue platform
Using Kubernetes to build the Hue platform
Separating internal and external services
Advanced scheduling
Using namespaces to limit access
Using kustomization for hierarchical cluster structures
Launching jobs
Mixing non-cluster components
Evolving the Hue platform with Kubernetes
Summary
References
6
Managing Storage
Managing Storage
Persistent volumes walkthrough
Public cloud storage volume types – GCE, AWS, and Azure
GlusterFS and Ceph volumes in Kubernetes
Flocker as a clustered container data volume manager
Integrating enterprise storage into Kubernetes
Projecting volumes
Using out-of-tree volume plugins with FlexVolume
The Container Storage Interface
Summary
7
Running Stateful Applications with Kubernetes
Running Stateful Applications with Kubernetes
Stateful versus stateless applications in Kubernetes
8
Deploying and Updating Applications
Deploying and Updating Applications
Horizontal pod autoscaling
Performing rolling updates with autoscaling
Handling scarce resources with limits and quotas
Choosing and managing the cluster capacity
Pushing the envelope with Kubernetes
Summary
9
Packaging Applications
Packaging Applications
Understanding Helm
Using Helm
Creating your own charts
Summary
10
Exploring Advanced Networking
Exploring Advanced Networking
Understanding the Kubernetes networking model
Kubernetes networking solutions
Using network policies effectively
Load balancing options
Writing your own CNI plugin
Summary
11
Running Kubernetes on Multiple Clouds and Cluster Federation
Running Kubernetes on Multiple Clouds and Cluster Federation
The history of cluster federation on Kubernetes
Understanding cluster federation
Managing a Kubernetes Cluster Federation
Introducing the Gardener project
Summary
12
Serverless Computing on Kubernetes
Serverless Computing on Kubernetes
Understanding serverless computing
Serverless Kubernetes in the cloud
Knative
Kubernetes FaaS frameworks
Summary
13
Monitoring Kubernetes Clusters
Monitoring Kubernetes Clusters
Understanding observability
Logging with Kubernetes
Collecting metrics with Kubernetes
Distributed tracing with Jaeger
Troubleshooting problems
Summary
14
Utilizing Service Meshes
Utilizing Service Meshes
What is a service mesh?
Choosing a service mesh
Incorporating Istio into your Kubernetes cluster
Summary
15
Extending Kubernetes
Extending Kubernetes
Working with the Kubernetes API
Extending the Kubernetes API
Writing Kubernetes plugins
Employing access control webhooks
Summary
16
The Future of Kubernetes
The Future of Kubernetes
The Kubernetes momentum
The rise of managed Kubernetes platforms
Upcoming trends
Summary
References
17
Other Books You May Enjoy
Other Books You May Enjoy
18
Index
Index

Mixing non-cluster components

Most real-time system components in the Kubernetes cluster will communicate with out-of-cluster components. Those could be completely external third-party services accessible through some API, but can also be internal services running in the same local network that, for various reasons, are not part of the Kubernetes cluster.

There are two categories here: inside the cluster network and outside the cluster network. Why is the distinction important?

Outside-the-cluster-network components

These components have no direct access to the cluster. They can only access it through APIs, externally visible URLs, and exposed services. These components are treated just like any external user. Often, cluster components will just use external services, which pose no security issue. For example, in a previous job we had a Kubernetes cluster that reported exceptions to a third-party service (https://sentry.io/welcome/). It was one-way communication from the...

Previous Section
End of Section 9
Next Section