The Book of Kubernetes

About the Author
Brief Contents
Contents in Detail
Acknowledgments
Introduction
	The Approach
	Running Examples
		What You Will Need
		Run in the Cloud or Local
		Terminal Windows
Part I: Making and Using Containers
	Chapter 1: Why Containers Matter
		Modern Application Architecture
			Attribute: Cloud Native
			Attribute: Modular
			Attribute: Microservice-Based
			Benefit: Scalability
			Benefit: Reliability
			Benefit: Resilience
		Why Containers
			Requirements for Containers
			Requirements for Orchestration
		Running Containers
			What Containers Look Like
			What Containers Really Are
		Deploying Containers to Kubernetes
			Talking to the Kubernetes Cluster
			Application Overview
			Kubernetes Features
		Final Thoughts
	Chapter 2: Process Isolation
		Understanding Isolation
			Why Processes Need Isolation
			File Permissions and Change Root
			Container Isolation
		Container Platforms and Container Runtimes
			Installing containerd
			Using containerd
			Introducing Linux Namespaces
			Containers and Namespaces in CRI-O
		Running Processes in Namespaces Directly
		Final Thoughts
	Chapter 3: Resource Limiting
		CPU Priorities
			Real-Time and Non-Real-Time Policies
			Setting Process Priorities
		Linux Control Groups
			CPU Quotas with cgroups
			CPU Quota with CRI-O and crictl
		Memory Limits
		Network Bandwidth Limits
		Final Thoughts
	Chapter 4: Network Namespaces
		Network Isolation
		Network Namespaces
			Inspecting Network Namespaces
			Creating Network Namespaces
		Bridge Interfaces
			Adding Interfaces to a Bridge
			Tracing Traffic
		Masquerade
		Final Thoughts
	Chapter 5: Container Images and Runtime Layers
		Filesystem Isolation
			Container Image Contents
			Image Versions and Layers
		Building Container Images
			Using a Dockerfile
			Tagging and Publishing Images
		Image and Container Storage
			Overlay Filesystems
			Understanding Container Layers
			Practical Image Building Advice
		Open Container Initiative
		Final Thoughts
Part II: Containers in Kubernetes
	Chapter 6: Why Kubernetes Matters
		Running Containers in a Cluster
			Cross-Cutting Concerns
			Kubernetes Concepts
		Cluster Deployment
			Prerequisite Packages
			Kubernetes Packages
			Cluster Initialization
			Joining Nodes to the Cluster
		Installing Cluster Add-ons
			Network Driver
			Installing Storage
			Ingress Controller
			Metrics Server
		Exploring a Cluster
		Final Thoughts
	Chapter 7: Deploying Containers to Kubernetes
		Pods
			Deploying a Pod
			Pod Details and Logging
		Deployments
			Creating a Deployment
			Monitoring and Scaling
			Autoscaling
		Other Controllers
			Jobs and CronJobs
			StatefulSets
			Daemon Sets
		Final Thoughts
	Chapter 8: Overlay Networks
		Cluster Networking
			CNI Plug-ins
			Pod Networking
		Cross-Node Networking
			Calico Networking
			WeaveNet
			Choosing a Network Plug-in
		Network Customization
		Final Thoughts
	Chapter 9: Service and Ingress Networks
		Services
			Creating a Service
			Service DNS
			Name Resolution and Namespaces
			Traffic Routing
		External Networking
			External Services
			Ingress Services
			Ingress in Production
		Final Thoughts
	Chapter 10: When Things Go Wrong
		Scheduling
			No Available Nodes
			Insufficient Resources
		Pulling Images
		Running Containers
			Debugging Using Logs
			Debugging Using Exec
			Debugging Using Port Forwarding
		Final Thoughts
	Chapter 11: Control Plane and Access Control
		API Server
		API Server Authentication
			Client Certificates
			Bootstrap Tokens
			Service Accounts
		Role-Based Access Controls
			Roles and Cluster Roles
			Role Bindings and Cluster Role Bindings
			Assigning a Service Account to Pods
			Binding Roles to Users
		Final Thoughts
	Chapter 12: Container Runtime
		Node Service
			Kubelet Cluster Configuration
			Kubelet Container Runtime Configuration
			Kubelet Network Configuration
		Static Pods
		Node Maintenance
			Node Draining and Cordoning
			Unhealthy Nodes
			Node Unreachable
		Final Thoughts
	Chapter 13: Health Probes
		About Probes
		Liveness Probes
			Exec Probes
			HTTP Probes
			TCP Probes
		Startup Probes
		Readiness Probes
		Final Thoughts
	Chapter 14: Limits and Quotas
		Requests and Limits
			Processing and Memory Limits
			Cgroup Enforcement
			Network Limits
		Quotas
		Final Thoughts
	Chapter 15: Persistent Storage
		Storage Classes
			Storage Class Definition
			CSI Plug-in Internals
		Persistent Volumes
			Stateful Sets
			Volumes and Claims
			Deployments
			Access Modes
		Final Thoughts
	Chapter 16: Configuration and Secrets
		Injecting Configuration
			Externalizing Configuration
			Protecting Secrets
		Injecting Files
		Cluster Configuration Repository
			Using etcdctl
			Deciphering Data in etcd
		Final Thoughts
	Chapter 17: Custom Resources and Operators
		Custom Resources
			Creating CRDs
			Watching CRDs
		Operators
		Final Thoughts
Part III: Performant Kubernetes
	Chapter 18: Affinity and Devices
		Affinity and Anti-affinity
			Anti-affinity
			Affinity
		Service Traffic Routing
		Hardware Resources
		Final Thoughts
	Chapter 19: Tuning Quality of Service
		Achieving Predictability
		Quality of Service Classes
			BestEffort
			Burstable
			Guaranteed
			QoS Class Eviction
			Choosing a QoS Class
		Pod Priority
		Final Thoughts
	Chapter 20: Application Resiliency
		Example Application Stack
			Database
			Application Deployment
			Pod Autoscaling
			Application Service
		Application and Cluster Monitoring
			Prometheus Monitoring
			Deploying kube-prometheus
			Cluster Metrics
			Adding Monitoring for Services
		Final Thoughts
Index