In Core Kubernetes you will learn about:
To build and operate reliable Kubernetes-based systems, you need to understand what’s going on below the surface. Core Kubernetes is an in-depth guide to Kubernetes’ internal workings written by Kubernetes contributors Chris Love and Jay Vyas. It’s packed with experience-driven insights and advanced techniques you won’t find anywhere else.
You’ll understand the unique security concerns of container-based applications, minimize costly unused capacity, and get pro tips for maximizing performance. Diagrams, labs, and hands-on examples ensure that the complex ideas are easy to understand and practical to apply.
About the Technology
Real-world Kubernetes deployments are messy. Even small configuration errors or design problems can bring your system to its knees. In the real world, it pays to know how each component works so you can quickly troubleshoot, reset, and get on to the next challenge. This one-of-a-kind book includes the details, hard-won advice, and pro tips to keep your Kubernetes apps up and running.
About the Book
This book is a tour of Kubernetes under the hood, from managing iptables to setting up dynamically scaled clusters that respond to changes in load. Every page will give you new insights on setting up and managing Kubernetes and dealing with inevitable curveballs. Core Kubernetes is a comprehensive reference guide to maintaining Kubernetes deployments in production.
What’s Inside
Chapter 1. Why Kubernetes exists
Chapter 1. Containers and images
Chapter 1. Kubernetes features
Chapter 1. Kubernetes components and architecture
Chapter 2. Why the Pod?
Chapter 2. What is a Pod?
Chapter 2. The Node API object
Chapter 2. Creating a web application with kubectl
Chapter 2. Infrastructure controllers
Chapter 2. Scaling, highly available applications, and the control plane
Chapter 3. Let’s build a Pod
Chapter 3. What is a Linux primitive
Chapter 3. Files are composable
Chapter 3. Using Linux primitives in Kubernetes
Chapter 3. Exploring the Pod’s Linux dependencies
Chapter 3. Building a Pod from scratch
Chapter 3. Securing our process with unshare
Chapter 3. Using our Pod in the real world
Chapter 3. Using the kube-dns Pod
Chapter 4. Using cgroups for processes in our Pods
Chapter 4. Processes and threads in Linux
Chapter 4. Implementing cgroups for a normal Pod
Chapter 4. Diving into how the kubelet manages resources
Chapter 4. Hack: Editing HugePages with init containers
Chapter 4. Monitoring the Linux kernel with Prometheus, cAdvisor, and the API server
Chapter 4. Creating a local Prometheus monitoring service
Chapter 5. CNIs and providing the Pod with a network
Chapter 5. Implementing the service side of the Kubernetes SDN: The kube-proxy
Chapter 5. What about NodePorts?
Chapter 5. Diving into two CNI networking plugins: Calico and Antrea
Chapter 5. Installing the Calico CNI provider
Chapter 5. Kubernetes networking with OVS and Antrea
Chapter 6. Troubleshooting large-scale network errors
Chapter 6. Inspecting CNI routing on different providers with the arp and ip commands
Chapter 6. Routes
Chapter 6. The kube-proxy and iptables
Chapter 6. Ingress controllers
Chapter 7. Pod storage and the CSI
Chapter 7. Three types of storage requirements for Kubernetes
Chapter 7. The container storage interface (CSI)
Chapter 7. A quick look at a few running CSI drivers
Chapter 8. Storage implementation and modeling
Chapter 8. PersistentVolumes
Chapter 8. Dynamic provisioning benefits from CSI but is orthogonal
Chapter 8. Kubernetes use cases for storage
Chapter 8. hostPath for system control and/or data access
Chapter 8. Cassandra: An example of real-world Kubernetes application storage
Chapter 9. Running Pods: How the kubelet works
Chapter 9. The core kubelet
Chapter 9. Starting the kubelet binary
Chapter 9. The Container Runtime Interface (CRI)
Chapter 10. DNS in Kubernetes
Chapter 10. Why StatefulSets instead of Deployments?
Chapter 10. The resolv.conf file
Chapter 11. The core of the control plane
Chapter 11. Scheduler details
Chapter 11. The controller manager
Chapter 12. etcd and the control plane
Chapter 12. Knowing when to tune etcd
Chapter 12. etcd as a data store
Chapter 12. Looking at the interface for Kubernetes to etcd
Chapter 12. The CAP theorem
Chapter 12. Performance and fault tolerance of etcd at a global scale
Chapter 13. Container and Pod security
Chapter 13. Container security
Chapter 13. Pod security
Chapter 13. Pod Security Policies (PSPs)
Chapter 14. Nodes and Kubernetes security
Chapter 14. Isolated container runtimes
Chapter 14. API server security
Chapter 14. Authn, Authz, and Secrets
Chapter 14. Network security
Chapter 14. Multi-tenancy
Chapter 15. Installing applications
Chapter 15. Installing the Carvel toolkit
Chapter 15. Part 3: Managing and deploying Guestbook as a single application
Chapter 15. Revisiting the Kubernetes Operator