Kubernetes: Preparing for the CKA and CKAD Certifications

Table of Contents
About the Author
About the Technical Reviewer
Introduction
Chapter 1: Creating a Cluster with kubeadm
	Provisioning Compute Resources
	Install Docker on the Hosts
	Install kubeadm, kubelet, and kubectl on the Hosts
	Initialize the Control Plane Node
	Join the Workers
Chapter 2: Control Plane Components
	Explore the Control Plane Services
Chapter 3: Accessing the Cluster
	Install kubectl on Your dev Machine
		Linux
		macOS
		Windows
	Access the Cluster from the dev Machine
Chapter 4: Kubernetes Resources
	Namespaces
	Labels and Selectors
	Annotations
Chapter 5: The Workloads
	Pod Specs
	Container Specs
	Pod Controllers
	ReplicaSet Controller
	Deployment Controller
	Update and Rollback
	Deployment Strategies
		The Recreate Strategy
		The RollingUpdate Strategy
	Running Jobs
		Job Controller
		Run One Pod to Its Completion
		Run Several Pods Until One Completes
		Run Several Pods Until Several Pods Complete
	CronJob Controller
		Schedule Format
Chapter 6: Configuring Applications
	Arguments to the Command
	Environment Variables
	Declaring Values Directly
		In Declarative Form
		In Imperative Form
	Referencing Specific Values from ConfigMaps and Secrets
		In Declarative Form
		In Imperative Form
	Referencing All Values from ConfigMaps and Secrets
		In Declarative Form
		In Imperative Form
	Referencing Values from Pod Fields
	Referencing Values from Container Resources Fields
	Configuration File from ConfigMap
	Configuration File from Secret
	Configuration File from Pod Fields
	Configuration File from Container Resources Fields
	Configuration File from Different Sources
Chapter 7: Scaling an Application
	Manual Scaling
	Auto-scaling
Chapter 8: Application Self-Healing
	Controller to the Rescue
	Liveness Probes
	A Note About Readiness Probes
	HTTP Request Liveness Probe
	Command Liveness Probe
	TCP Connection Liveness Probe
	Resource Limits and Quality of Service (QoS) Classes
Chapter 9: Scheduling Pods
	Using Label Selectors to Schedule Pods on Specific Nodes
	Adding Labels to Nodes
	Adding Node Selectors to Pods
	Manual Scheduling
	DaemonSets
	Static Pods
	Resource Requests
	In Imperative Form
	In Declarative Form
	Running Multiple Schedulers
	Examine Scheduler Events
Chapter 10: Discovery and Load Balancing
	Services
		Selectors
		Readiness Probes
		Endpoints
	Service Types
		ClusterIP
		NodePort
		LoadBalancer
		ExternalName
	Ingress
		Install nginx Ingress Controller
		Accessing Applications
		HTTPS and Ingress
Chapter 11: Security
	Authentication
		Normal User Authentication
			Client Certificate Authentication
			HTTP Basic Auth
			Bearer Token Authentication
		Service Account Authentication
		Service Account Outside the Cluster
	Authorization
	Anatomy of an API Server Request
		Resource Requests
		Non-resource Requests
	Request Attributes for Authorization
	RBAC Mode
		Role and ClusterRole
		RoleBinding and ClusterRoleBinding
		Examples
	Security Contexts
		At Pod Level
		User and Groups
			SELinux Options
			Sysctls
	At Container Level
		User and Groups
		SELinux Options
		Capabilities
		Others
	Network Policies
	Working with Private Docker Registries
		Using imagePullSecrets
	Pre-pulling Images on Nodes
	Giving Credentials to kubelet
Chapter 12: Persistent Volumes
	Creating an NFS Persistent Volume
	Access Modes
	Claiming a Persistent Volume
	Cleanup
	Using Auto-provisioned Persistent Volumes
	Cleanup
Chapter 13: Multi-container Pod Design Patterns
	Init Container
	Initialize a Storage
	Wait for Availability of Another Service
	Sidecar Container
	Adapter Container
	Ambassador Container
Chapter 14: Observability
	Debugging at the Kubernetes Level
	Debugging Inside Containers
	Debugging Services
	Logging
	Logging at the Node Level
	Cluster-Level Logging with a Node Logging Agent
	Using a Sidecar to Redirect Logs to stdout
	Monitoring
	Monitoring with Prometheus
Chapter 15: Upgrading the Cluster
	Upgrade the Controller
	Upgrade the Workers
	Upgrading the Operating System
	Back Up a Cluster
	Restore a Cluster
Chapter 16: Command-Line Tools
	kubectl
	Managing the kubeconfig File
	Generic Commands
	Creating Application Resources
		Creating and Parameterizing Workloads
	Configuring Workloads
	Exposing Pods
	Authorization
	Annotate and Label
	Interacting with the Application
	Managing Clusters
	Getting Documentation
	Helm
	Install Helm on Your dev Machine
		Linux
		macOS
		Windows
	Install Charts
	Create Your Own Charts
	Kustomize
	Dev and Production Environments Example
	Rolling Configuration Update
Appendix A:
Curriculum CKA 1.19: September 2020
	Cluster Architecture, Installation, and Configuration (25%)
	Workloads and Scheduling (15%)
	Services and Networking (20%)
	Storage (10%)
	Troubleshooting (30%)
Appendix B:
Curriculum CKAD 1.18: April 2020
	Core Concepts (13%)
	Configuration (18%)
	Multi-container Pods (10%)
	Observability (18%)
	Pod Design (20%)
	Services and Networking (13%)
	State Persistence (8%)
Index