Book Image

DevOps with Kubernetes

By : Hideto Saito, Hui-Chuan Chloe Lee, Cheng-Yang Wu
Book Image

DevOps with Kubernetes

By: Hideto Saito, Hui-Chuan Chloe Lee, Cheng-Yang Wu

Overview of this book

Containerization is said to be the best way to implement DevOps. Google developed Kubernetes, which orchestrates containers efficiently and is considered the frontrunner in container orchestration. Kubernetes is an orchestrator that creates and manages your containers on clusters of servers. This book will guide you from simply deploying a container to administrate a Kubernetes cluster, and then you will learn how to do monitoring, logging, and continuous deployment in DevOps. The initial stages of the book will introduce the fundamental DevOps and the concept of containers. It will move on to how to containerize applications and deploy them into. The book will then introduce networks in Kubernetes. We then move on to advanced DevOps skills such as monitoring, logging, and continuous deployment in Kubernetes. It will proceed to introduce permission control for Kubernetes resources via attribute-based access control and role-based access control. The final stage of the book will cover deploying and managing your container clusters on the popular public cloud Amazon Web Services and Google Cloud Platform. At the end of the book, other orchestration frameworks, such as Docker Swarm mode, Amazon ECS, and Apache Mesos will be discussed.

Related Content you might be interested in

Current Title:

Small book image
DevOps with Kubernetes
Hideto Saito | Hui-Chuan Chloe Lee | Cheng-Yang Wu
Oct, 2017 | 382 pages
Small book image
Kubernetes Cookbook
HuiChuan Chloe Lee | KeJou Carol Hsu | Hideto Saito
May, 2018 | 554 pages
Small book image
Kubernetes on AWS
Edward Robinson
Nov, 2018 | 270 pages
Small book image
Getting Started with Kubernetes
Jesse White | Jonathan Baier
Oct, 2018 | 470 pages
Table of Contents (12 chapters)
Preface
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Free Chapter
1
Introduction to DevOps
Introduction to DevOps
Software delivery challenges
Trend of microservices
Automation and tools
Summary
2
DevOps with Container
DevOps with Container
Understanding container
Container life cycle
Working with Dockerfile
Multi-containers orchestration
Summary
3
Getting Started with Kubernetes
Getting Started with Kubernetes
Understanding Kubernetes
Getting started with Kubernetes
Multi-containers orchestration
Summary
4
Working with Storage and Resources
Working with Storage and Resources
Kubernetes volume management
Kubernetes resource management
Summary
5
Network and Security
Network and Security
Kubernetes networking
Ingress
Network policy
Summary
6
Monitoring and Logging
Monitoring and Logging
Inspecting a container
Monitoring in Kubernetes
Hands-on monitoring
Logging events
Extracting metrics from logs
Summary
7
Continuous Delivery
Continuous Delivery
Updating resources
Building a delivery pipeline
Gaining deeper understanding of pods
Summary
8
Cluster Administration
Cluster Administration
Kubernetes namespaces
ResourceQuota
Kubeconfig
Service account
Authentication and authorization
Admission control
Summary
9
Kubernetes on AWS
Kubernetes on AWS
Introduction to AWS
Setup Kubernetes on AWS
Summary
10
Kubernetes on GCP
Kubernetes on GCP
Introduction to GCP
Google Container Engine (GKE)
Summary
11
What's Next
What's Next
Exploring the possibilities of Kubernetes
Gravitating towards a future infrastructure
Summary

Admission control

Admission control takes place before Kubernetes processes the request and after authentication and authorization are passed. It's enabled when launching API server by adding --admission-control parameter. Kubernetes recommends officially to have the following plugins with the cluster if the cluster version is >= 1.6.0.

--admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,DefaultTolerationSeconds,ResourceQuota

The following introduces the usage of these plugins, and why should we need them. For more latest information about supported admission control plugins, please visit official document https://kubernetes.io/docs/admin/admission-controllers.

Namespace life cycle

...
Previous Section
End of Section 7
Next Section