Cloud Without Compromise

Copyright
Table of Contents
Preface: Who This Book Is For
	Conventions Used in This Book
	O’Reilly Online Learning
	How to Contact Us
	Our Collective Thank Yous and Acknowledgments
	Our Personal Dedications and Reflections
		Paul Zikopoulos
		Christopher Bienko
		Chris Backer
		Chris Konarski
		Sai Vennam
Introduction
Chapter 1. Cloudy Skies Are the Best Forecast Ever
	Thrivers, Divers, and New Arrivers
	Business Vaccination: The Arriver’s Guide
		Cost Takeout
		Resiliency
		Performance
		Security
		Modernization
		AI
	So Why Are Cloudy Skies the Best Forecast Ever?
Chapter 2. Evolution of Cloud
	Are You on the Intranet, Internet, or Extranet? Nah—Just Internet
	Are You on a Private Cloud, Public Cloud, or Community Cloud? Nah—Just Cloud
	History Repeats Itself: From Granularity of Terms to General Terms
	Hybrid Cloud’s “Chapter 2”: Distributed Cloud
		Distributed Cloud On-Premises
	Living on the Edge: Distributed Cloud
		Distributed Cloud for Multicloud
		A Caveat to Distributed Cloud
		Distributed Cloud: The Ultimate Unification Layer
	Industry Expertise in Mission-Critical Business Processes
	Proven Security, Compliance, and Governance
	Confidential Computing and Zero Trust Architectures
	Build Once and Run Anywhere with Consistency
	Capture the World’s Innovation
	Cloud Solely for Savings Could Leave You with Cravings: A Trend of Repatriation
	Be Ye a Renovator, Innovator, or Both? How You Spend Budget
	Adopting a “Learning Never Ends” Culture: A Cloud Success Secret Ingredient
	Ready, Set, Cloud!
Chapter 3. “Cloud Chapter 2”: The Path to Cloud Native
	Eras of Application Development
		In the Beginning: Monoliths and Waterfalls
		SOA Is the SOS to Your Monolith
		Microservices: What SOA Would Be If It Was Version 2.0
		First “Pass” on PaaS
		Lessons Learned: The Rise of Containers
		But Wait, Don’t VMs Do the Same Thing!?
		Docker Brings Containers to the Masses
	A Practical Understanding of Kubernetes
		Starting the Kubernetes Journey
	Time to Start Building
Chapter 4. Cloud Computing: Patterns for The What, The How, and The Why
	Patterns of Cloud Computing: A Working Framework for Discussion
	Order Up: Pizza as a Service
	Do (Almost All of) It Yourself: Infrastructure as a Service
		IaaS has a Twin Sibling: Bare Metal
	Noisy Neighbors Can Be Bad Neighbors: The Multitenant Cloud
		Cloud Regions and Cloud Availability Zones for Any As-a-Service Offering
	Building the Developer’s Sandbox with Platform as a Service
		Digging Deeper into PaaS
		Composing in the Fabric of Cloud Services
	Consuming Functionality Without the Stress: Software as a Service
	The Cloud Bazaar: SaaS and the API Economy
	All You Need Is a Little Bit of REST and Some Microservices
		It’s Not Magic, But It’s Cool: The Server in Serverless?
		Serverless has a Kid! Function as a Service
		The Takeaway
	Wrapping It Up
Chapter 5. Shift Left
	Monolithic and Microservices
		Separating the Old from the New
		Microservices Dance to a Different Fiddle
		Scaling: One of These Things Is Not Like the Other
		Orchestration: Amplifying the Challenges of Scale
	Write Once, Run Anywhere
		Three Stages of Approaching Modernization Incrementally
	Comparing Legacy Applications, Containerized Applications, and Virtual Machines
		Namespaces: What’s in a Name?
		Building an Operating System for Containers
	It’s OK to Have an Opinion: Opinionated Open Source
		Putting It All Together
Chapter 6. Hackers, Attackers, and Would-Be Bad Actors: Thoughts on Security for Hybrid Cloud
	Just to Level Set: What’s This Open Source Stuff?
	Data Breaches, Exploits, and Vulnerabilities
		Hackers Don’t Care Where You Work: Public Cloud and Security
	A Case Study in Exploitable OSS
	Did You Leave the Container Door Open?
	Zero Trust in a Hybrid Cloud World
	Importance of Sec(urity) in DevSecOps
	Container Security Visibility 101
Chapter 7. Data Gravity
	Data Gravity: More Formally Defined
	Container-Ready and Container-Native Storage
		Solving Challenges of Business Continuity in a Containerized World
		Why Storage? Why Now? The Curious Evolution of Persistence for Containers
		Container: May Ye Live Long and Prosper
		Container-Ready and Container-Native: Reinventing Storage for Containerized Applications
		Adding Storage for Containers…The Right Way
	Seven Best Practices for Securing Containerized Data and Applications
		1. Multitenancy and the Unusual World of Container Host Operating Systems
		2. Trusting Your Sources
		3. Protecting the Software Build Process
		4. Wrangling Deployments on Clusters
		5. Orchestrating Securely
		6. Lockdown: Network Isolation and API Endpoint Security
		7. United Federation of Containerized Applications
	Readying Data for the New Normal
Chapter 8. Ecosystem for Automation
	Rethinking Automation for the As-a-Service Era
	More Agency with Agentless Design
	What’s the Play? Architecting for Automation
	Streamlined Automation for the Hybrid Multicloud Era
		Automation for Multivendor Stacks
		Automation for Cloud-Scale Deployments
		Automation for Stress-Free DevOps
	Automation Everywhere and for All
Appendix A. Speaking Kubernetes and Other Strange-Sounding Names
	The Perfect Open Source Project
	Day 1 on the Job: Helm Package Management
	Day 2 on the Job: Kubernetes Operators to Save the Day
	The Infrastructure…Of Course!
	Making the Network Tractable: Service Meshes
	Testing, Integration, and Deployment
	Monitoring and Observability
		Prometheus
		Grafana
		Alertmanager
	The Paradox of Choice: Red Hat OpenShift
Index
About the Authors
Colophon