Kubernetes for Developers MEAP V11
Copyright
Welcome
Brief contents
Chapter 1: Kubernetes for Application Deployment
1.1 Containers: The Ideal Application Package
1.1.1 Language flexibility
1.1.2 Isolation Without Overhead
1.1.3 Developer Efficiency
1.1.4 Reproducibility
1.2 Running Containers on Kubernetes
1.2.1 Kubernetes Architecture: Life of a Container
1.3 Benefits of using Kubernetes
1.3.1 Automated Operations
1.3.2 A Workload Abstraction
1.3.3 The Ability to Scale Up
1.3.4 Cost Efficient Deployments
1.3.5 Extensibility
1.3.6 Open Source
1.3.7 Customized Workflows
1.4 Deciding when to use Kubernetes
1.4.1 Running a Stateful Database
1.4.2 Functions as a Service
1.4.3 Pure Stateless Applications
1.5 Summary
Chapter 2: Containerizing Apps
2.1 Building Docker Containers
2.1.1 Developer Setup
Windows 10
Mac
Linux
2.1.2 Running Commands in Docker
2.1.3 Building our own Images
2.1.4 Using Base Images
2.1.5 Adding a Default Command
2.1.6 Adding Dependencies
2.1.7 Compiling Code in Docker
2.1.8 Compiling Code with a Multi-stage Build
2.2 Containerizing a Server Application
2.2.1 Containerizing an Application Server
2.2.2 Debugging
2.3 Using Docker Compose for Local Testing
2.3.1 Mapping Folders Locally
2.3.2 Adding Service Dependencies
2.3.3 Faking External Dependencies
2.4 Summary
Chapter 3: Deploying to Kubernetes
3.1 Kubernetes Architecture
3.1.1 The Kubernetes Cluster
3.1.2 Kubernetes Objects
Pod
Deployment
Service
3.2 Deploying an Application
3.2.1 Creating a Cluster
Prefer a local cluster?
Google Kubernetes Engine
3.2.2 Uploading your Container
Authenticate
Tag
Push
3.2.3 Deploying to Kubernetes
Troubleshooting
3.2.4 The Podspec
3.2.5 Publishing your Service
Troubleshooting
3.2.6 Interactive with the Deployment
Running one-off commands
Copying files to/from the container
3.2.7 Updating your Application
Monitoring The Rollout
Watching the deployment
3.2.8 Cleaning Up
3.3 Declarative Commands
3.4 Local Kubernetes Environments
3.4.1 Docker Desktop’s Kubernetes Cluster
3.4.2 Minikube
3.4.3 Using your Local Kubernetes Cluster
Accessing the Service
Deploying Local Images
3.5 Summary
Chapter 4: Automated Operations
4.1 Automated Uptime with Health Checks
4.1.1 Liveness and Readiness Probes
4.1.2 Adding a Readiness Probe
4.1.3 Adding a Liveness Probe
4.1.4 Designing Good Health Checks
4.1.5 Rescheduling Unready Containers
4.1.6 Probe Types
4.2 Updating Live Applications
4.2.1 Rolling Update Strategy
MaxSurge
MaxUnavailable
Recommendation
Deploying Changes with Rolling Update
4.2.2 Replacement Strategy
4.2.3 Blue / Green Strategy
Implementing blue / green in Kubernetes
4.2.4 Choosing a Rollout Strategy
4.3 Summary
Chapter 5: Resource Management
5.1 Pod Scheduling
5.1.1 Specifying Pod Resources
5.1.2 Quality of Service
Guaranteed Class
Burstable Class
Best Effort
Summary
5.1.3 Evictions, Priority and Preemption
Eviction
“Evicted” Error Status
Priority
Preemption
When to Use Priority and Preemption
5.2 Calculating Pod Resources
5.2.1 Setting Memory Requests and Limits
5.2.2 Setting CPU Requests and Limits
5.2.3 Reducing Costs by Overcommitting CPU
5.2.4 Balancing Pod Replicas and Internal Pod Concurrency
5.3 Summary
Chapter 6: Scaling Up
6.1 Scaling Pods and Nodes
6.2 Horizontal Pod Autoscaling
6.2.1 External Metrics
Observing and Debugging
AverageValue vs Value
Other metrics
Other Monitoring Solutions
6.3 Node Autoscaling & Capacity Planning
6.3.1 Cluster Autoscaling
6.3.2 Capacity Planning with Cluster Autoscaling
6.4 Building Your App to Scale
6.4.1 Avoiding State
6.4.2 Microservice Architectures
6.5 Summary
Chapter 7: Internal Services and Load Balancing
7.1 Internal Services
7.1.1 Kubernetes Cluster Networking
7.1.2 Creating an Internal Service
7.1.3 Service Discovery
Service Discovery using Environment Variables
Service Discovery using DNS
Putting it all together
7.2 Ingress: HTTP(S) Load Balancing
7.2.1 TLS
7.3 Summary
Chapter 8: Node Feature Selection
8.1 Node Feature Selection
8.1.1 Node Selectors
8.1.2 Node Affinity and Anti-Affinity
Preferred Node Affinity
8.1.3 Tainting Nodes to Prevent Scheduling by Default
Tolerating All Taints
8.1.4 Workload Separation
8.2 Placing Pods
8.2.1 Building Highly Available Deployments
Spreading Across Zones
8.2.2 Collocating Interdependent Pods
8.2.3 Avoiding Certain Pods
8.3 Debugging Placement Issues
Placement rules don’t appear to work
Pods are Pending
8.4 Summary
Chapter 9: Stateful Applications
9.1 Volumes, Persistent Volumes, Claims and Storage Classes
9.1.1 Volumes
EmptyDir Volumes
ConfigMap Volume
Cloud Provider Volumes
9.1.2 Persistent Volumes and Claims
9.1.3 Storage Classes
9.1.4 Single-pod Stateful Workload Deployments
9.2 StatefulSet
9.2.1 Deploying StatefulSet
MariaDB
Redis
9.2.2 Deploying a Multi-Role StatefulSet
9.3 Migrating/Recovering Disks
9.4 Summary
Chapter 10: Background Processing
10.1 Background Processing Queues
10.1.1 Creating a custom task queue
Creating a worker container
Deploying to Kubernetes
Adding work to the queue
Viewing the work
10.1.2 Signal Handling in Worker Pods
10.1.3 Scaling Worker Pods
10.1.4 Open Source Task Queues
10.2 Jobs
10.2.1 Running one-off tasks with Jobs
10.2.2 Scheduling Tasks with Cron Jobs
10.3 Batch task processing with Jobs
10.3.1 Dynamic Queue Processing with Jobs
10.3.2 Static Queue Processing with Jobs
10.4 Liveness Probes for Background Tasks
Liveness Bash Script for Background Tasks
10.5 Summary
Chapter 11: GitOps: Configuration as Code
11.1 Production and Staging Environments using Namespaces
11.1.1 Deploying to our new namespace
11.1.2 Syncing Mutations from the Cluster
11.2 Configuration as Code the Kubernetes Way
11.3 Rolling Out Safely
11.3.1 Deployment Pipelines
Continuous Deployment with Cloud Build
Continuous Reconciliation
11.4 Secrets
11.4.1 String-based (Password) Secrets
11.4.2 Base64 Encoded Secrets
11.4.3 File-based Secrets
11.4.4 Secrets and GitOps
Separate Repository
Sealed Secrets
Secrets Service
11.5 Summary
Chapter 12: Securing Kubernetes
12.1 Staying up to date
12.1.1 Cluster and Node Updates
12.1.2 Updating Containers
Reducing Container Updates
12.1.3 Handling Disruptions
Readiness Checks
Signal Handling and Graceful Termination
Rolling Updates
Pod Disruption Budgets
12.2 Deploying Node Agents with DaemonSet
12.3 Pod Security Context
12.4 Non-Root Containers
Updating Containers To Run As Non-Root
12.5 Admission Controllers
12.5.1 Pod Security Admission
Installing Pod Security Admission
Pod Security policies
Creating a Namespace with Pod Security
12.6 Role-based Access Control (RBAC)
Namespace Role
Cluster Role
Applying the Pod Security
RBAC for ServiceAccounts
12.7 Summary