50 Kubernetes Concepts Every DevOps Engineer Should Know: Your go-to guide for making production-level decisions on how and why to implement Kubernetes

Description

A must-have Kubernetes book to learn key concepts for succeeding in any production environment, be it a greenfield Kubernetes environment or your cloud-native journey Key FeaturesAdvance in your Kubernetes journey with guidance from a seasoned k8s practitioner and trainerDiscover best practices for implementing Kubernetes in any production environmentGo beyond the basics and work with Kubernetes applications in every environmentBook Description Kubernetes is a trending topic among engineers, CTOs, CIOs, and other technically sound professionals. Due to its proliferation and importance for all cloud technologies, DevOps engineers nowadays need a solid grasp of key Kubernetes concepts to help their organization thrive. This book equips you with all the requisite information about how Kubernetes works and how to use it for the best results. You'll learn everything from why cloud native is important to implementing Kubernetes clusters to deploying applications in production. This book takes you on a learning journey, starting from what cloud native is and how to get started with Kubernetes in the cloud, on-premises, and PaaS environments such as OpenShift. Next, you'll learn about deploying applications in many ways, including Deployment specs, Ingress Specs, and StatefulSet specs. Finally, you'll be comfortable working with Kubernetes monitoring, observability, and security. Each chapter of 50 Kubernetes Concepts Every DevOps Engineer Should Know is built upon the previous chapter, ensuring that you develop practical skills as you work through the code examples in GitHub, allowing you to follow along while giving you practical knowledge. By the end of this book, you'll be able to implement Kubernetes in any environment, whether it's an existing environment, a greenfield environment, or your very own lab running in the cloud or your home. What you will learnFind out how Kubernetes works on-premises, in the cloud, and in PaaS environmentsWork with networking, cluster management, and application deploymentUnderstand why cloud native is crucial for Kubernetes applicationsDeploy apps in different states, including Stateless and StatefulMonitor and implement observability in your environmentExplore the functioning of Kubernetes security at the cluster, user, and application levelWho this book is for This book is for cloud engineers, developers, DevOps engineers, and infrastructure engineers responsible for inheriting a Kubernetes environment or creating a greenfield Kubernetes environment. If you are a professional who wants to get started with cloud-native applications and implement k8s best practices, then this book is a must-read. If you have engineered environments in the cloud and on-premises and understand how to deploy applications with a solid tenure in a developer role, this book will help you further your skills. Table of ContentsKubernetes in Today's WorldGetting the Ball Rolling with Kubernetes and the Top Three Cloud PlatformsRunning Kubernetes with Other Cloud PalsThe On-Prem Kubernetes Reality CheckDeploying Kubernetes Apps Like a True Cloud NativeKubernetes Deployment – Same Game, Next LevelKubernetes Monitoring and ObservabilitySecurity Reality Check Cover Copyright Contributors Table of Contents Preface Part 1 – First 20 Kubernetes Concepts – In and Out of the Cloud Chapter 1: Kubernetes in Today’s World Technical requirements The shift to the cloud Why organizations care about the cloud What the cloud did for engineers Kubernetes, the new cloud OS and data center Kubernetes in the cloud Why Kubernetes? Kubernetes as a data center Cloud-native apps and why they’re important What cloud-native apps do for organizations The world is cloud-based Engineering talent is toward the cloud Abstraction is easier, but with a twist What abstraction does What abstraction doesn’t do Start slow and go fast Understanding the engineering need for Kubernetes Understanding the business need for Kubernetes Planning is the hard part Summary Further reading Chapter 2: Get the Ball Rolling with Kubernetes and the Top Three Technical requirements Azure Kubernetes Service Creating an AKS cluster manually Creating an AKS cluster with automation Scaling an AKS cluster AKS and Virtual Kubelet Managing and maintaining AKS clusters AWS EKS Creating an EKS cluster manually Creating an EKS cluster with Terraform Scaling an EKS cluster EKS Fargate profiles GKE Creating a GKE cluster with Terraform GKE Autopilot A quick note on multi-cloud Summary Further reading Chapter 3: Running K8s with Other Cloud Pals Technical requirements Understanding Linode Kubernetes Engine Why LKE? Setting up LKE manually Automating LKE deployments Exploring DigitalOcean Managed Kubernetes Why DigitalOcean Kubernetes Engine? Setting up DigitalOcean Managed Kubernetes manually Automating DigitalOcean Managed Kubernetes What is Kubernetes PaaS and how does it differ? OpenShift OpenShift in the enterprise Getting started with OpenShift Sandbox OpenShift on AWS Summary Further reading Chapter 4: The On-Prem K8s Reality Check Technical requirements Understanding operating systems and infrastructure Kubeadm Deployment System size System location Operating system Troubleshooting on-prem Kubernetes clusters Server logs and infrastructure troubleshooting Network observability Kubernetes metrics crictl kubectl Introducing hybrid services Azure Stack HCI Google Anthos A quick note about other infrastructure managers Exploring networking and system components kube-proxy CNI Kubernetes resource communication DNS Service mesh and ingress Getting to know virtualized bare metal Virtualizing your environment Where to run Kubernetes Summary Further reading Part 2 – Next 15 Kubernetes Concepts – Application Strategy and Deployments Chapter 5: Deploying Kubernetes Apps Like a True Cloud Native Technical requirements Understanding cloud-native apps What’s a cloud-native app? Cloud-specific cloud native What are microservices? Learning about Kubernetes app deployments Kubernetes manifests Controllers and operators Different ways to deploy with higher-level controllers Scaling Multi-container Pods Liveness and readiness probes Exploring segregation and namespaces Namespaces Single tenancy Multi-tenancy Investigating stateless and stateful apps Stateful versus stateless Container Storage Interface Volumes Resource requests and limits Upgrading Kubernetes apps Types of upgrades What happens to an app being upgraded? Rolling updates Rollbacks Summary Further reading Chapter 6: Kubernetes Deployment– Same Game, Next Level Technical requirements Getting to know Helm charts and Kustomize Why think about deployment methods for manifests? Helm charts Kustomize Deploying with CI/CD and GitOps What is CI/CD? Using CI/CD for Kubernetes deployments What is GitOps? Using GitOps for automated deployments Production use cases for CI/CD and GitOps Troubleshooting application deployments Troubleshooting Pods Troubleshooting services Troubleshooting deployments Service meshes and Ingresses Why Ingress? Why service meshes? Summary Further reading Part 3 – Final 15 Kubernetes Concepts – Security and Monitoring Chapter 7: Kubernetes Monitoring and Observability Technical requirements How is monitoring different than observability? What’s monitoring? What’s observability? Monitoring versus observability examples Monitoring and observability tools for Kubernetes The Kubernetes Dashboard Azure Monitor AWS Container Insights Grafana/Prometheus Observability practices Logging Metrics Traces Monitoring Kubernetes resources Monitoring Pods Summary Further reading Chapter 8: Security Reality Check Technical requirements Out-of-the-box Kubernetes security Security breakdown Kubernetes security Investigating cluster security Cluster hardening and benchmarks System scanning Cluster network security Upgrading the Kubernetes API Audit logging and troubleshooting Understanding RBAC What is RBAC? Roles and ClusterRoles RoleBindings and ClusterRoleBindings Kubernetes resource (object) security Pod security Policy enforcement Scanning container images Kubernetes secrets Creating Kubernetes secrets Don’t use Kubernetes secrets Summary Further reading Index Other Books You May Enjoy