book

Kubernetes: Up and Running, 3rd Edition

by Brendan Burns, Joe Beda, Kelsey Hightower, Lachlan Evenson

August 2022

Intermediate to advanced

328 pages

8h 22m

English

O'Reilly Media, Inc.

Book available

Read now

Unlock full access

Includes

Includes Quizzes

Has Sandbox

Who Should Read This BookWhy We Wrote This BookWhy We Updated This BookA Word on Cloud Native Applications TodayNavigating This BookOnline ResourcesConventions Used in This BookUsing Code ExamplesO’Reilly Online LearningHow to Contact UsAcknowledgments
VelocityThe Value of ImmutabilityDeclarative ConfigurationSelf-Healing SystemsScaling Your Service and Your TeamsDecouplingEasy Scaling for Applications and ClustersScaling Development Teams with MicroservicesSeparation of Concerns for Consistency and ScalingAbstracting Your InfrastructureEfficiencyCloud Native EcosystemSummary
Container ImagesBuilding Application Images with DockerDockerfilesOptimizing Image SizesImage SecurityMultistage Image BuildsStoring Images in a Remote RegistryThe Container Runtime InterfaceRunning Containers with DockerExploring the kuard ApplicationLimiting Resource UsageCleanupSummary
Installing Kubernetes on a Public Cloud ProviderInstalling Kubernetes with Google Kubernetes EngineInstalling Kubernetes with Azure Kubernetes ServiceInstalling Kubernetes on Amazon Web ServicesInstalling Kubernetes Locally Using minikubeRunning Kubernetes in DockerThe Kubernetes ClientChecking Cluster StatusListing Kubernetes NodesCluster ComponentsKubernetes ProxyKubernetes DNSKubernetes UISummary
NamespacesContextsViewing Kubernetes API ObjectsCreating, Updating, and Destroying Kubernetes ObjectsLabeling and Annotating ObjectsDebugging CommandsCluster ManagementCommand AutocompletionAlternative Ways of Viewing Your ClusterSummary
Pods in KubernetesThinking with PodsThe Pod ManifestCreating a PodCreating a Pod ManifestRunning PodsListing PodsPod DetailsDeleting a PodAccessing Your PodGetting More Information with LogsRunning Commands in Your Container with execCopying Files to and from ContainersHealth ChecksLiveness ProbeReadiness ProbeStartup ProbeAdvanced Probe ConfigurationOther Types of Health ChecksResource ManagementResource Requests: Minimum Required ResourcesCapping Resource Usage with LimitsPersisting Data with VolumesUsing Volumes with PodsDifferent Ways of Using Volumes with PodsPutting It All TogetherSummary
LabelsApplying LabelsModifying LabelsLabel SelectorsLabel Selectors in API ObjectsLabels in the Kubernetes ArchitectureAnnotationsCleanupSummary
What Is Service Discovery?The Service ObjectService DNSReadiness ChecksLooking Beyond the ClusterLoad Balancer IntegrationAdvanced DetailsEndpointsManual Service Discoverykube-proxy and Cluster IPsCluster IP Environment VariablesConnecting with Other EnvironmentsConnecting to Resources Outside of a ClusterConnecting External Resources to Services Inside a ClusterCleanupSummary
Ingress Spec Versus Ingress ControllersInstalling ContourConfiguring DNSConfiguring a Local hosts FileUsing IngressSimplest UsageUsing HostnamesUsing PathsCleanupAdvanced Ingress Topics and GotchasRunning Multiple Ingress ControllersMultiple Ingress ObjectsIngress and NamespacesPath RewritingServing TLSAlternate Ingress ImplementationsThe Future of IngressSummary
Reconciliation LoopsRelating Pods and ReplicaSetsAdopting Existing ContainersQuarantining ContainersDesigning with ReplicaSetsReplicaSet SpecPod TemplatesLabelsCreating a ReplicaSetInspecting a ReplicaSetFinding a ReplicaSet from a PodFinding a Set of Pods for a ReplicaSetScaling ReplicaSetsImperative Scaling with kubectl scaleDeclaratively Scaling with kubectl applyAutoscaling a ReplicaSetDeleting ReplicaSetsSummary

Your First DeploymentCreating DeploymentsManaging DeploymentsUpdating DeploymentsScaling a DeploymentUpdating a Container ImageRollout HistoryDeployment StrategiesRecreate StrategyRollingUpdate StrategySlowing Rollouts to Ensure Service HealthDeleting a DeploymentMonitoring a DeploymentSummary
DaemonSet SchedulerCreating DaemonSetsLimiting DaemonSets to Specific NodesAdding Labels to NodesNode SelectorsUpdating a DaemonSetDeleting a DaemonSetSummary
The Job ObjectJob PatternsOne ShotParallelismWork QueuesCronJobsSummary
ConfigMapsCreating ConfigMapsUsing a ConfigMapSecretsCreating SecretsConsuming SecretsPrivate Container RegistriesNaming ConstraintsManaging ConfigMaps and SecretsListingCreatingUpdatingSummary
Role-Based Access ControlIdentity in KubernetesUnderstanding Roles and Role BindingsRoles and Role Bindings in KubernetesTechniques for Managing RBACTesting Authorization with can-iManaging RBAC in Source ControlAdvanced TopicsAggregating ClusterRolesUsing Groups for BindingsSummary
Encryption and Authentication with Mutal TLSTraffic ShapingIntrospectionDo You Really Need a Service Mesh?Introspecting a Service Mesh ImplementationService Mesh LandscapeSummary
Importing External ServicesServices Without SelectorsLimitations of External Services: Health CheckingRunning Reliable SingletonsRunning a MySQL SingletonDynamic Volume ProvisioningKubernetes-Native Storage with StatefulSetsProperties of StatefulSetsManually Replicated MongoDB with StatefulSetsAutomating MongoDB Cluster CreationPersistent Volumes and StatefulSetsOne Final Thing: Readiness ProbesSummary
What It Means to Extend KubernetesPoints of ExtensibilityPatterns for Custom ResourcesJust DataCompilersOperatorsGetting StartedSummary
The Kubernetes API: A Client’s PerspectiveOpenAPI and Generated Client LibrariesBut What About kubectl x?Programming the Kubernetes APIInstalling the Client LibrariesAuthenticating to the Kubernetes APIAccessing the Kubernetes APIPutting It All Together: Listing and Creating Pods in Python, Java, and .NETCreating and Patching ObjectsWatching Kubernetes APIs for ChangesInteracting with PodsSummary
Understanding SecurityContextSecurityContext ChallengesPod SecurityWhat Is Pod Security?Applying Pod Security StandardsService Account ManagementRole-Based Access ControlRuntimeClassNetwork PolicyService MeshSecurity Benchmark ToolsImage SecuritySummary
Why Policy and Governance MatterAdmission FlowPolicy and Governance with GatekeeperWhat Is Open Policy Agent?Installing GatekeeperConfiguring PoliciesUnderstanding Constraint TemplatesCreating ConstraintsAuditMutationData ReplicationMetricsPolicy LibrarySummary
Before You Even BeginStarting at the Top with a Load-Balancing ApproachBuilding Applications for Multiple ClustersReplicated Silos: The Simplest Cross-Regional ModelSharding: Regional DataBetter Flexibility: Microservice RoutingSummary
Principles to Guide UsFilesystems as the Source of TruthThe Role of Code ReviewFeature GatesManaging Your Application in Source ControlFilesystem LayoutManaging Periodic VersionsStructuring Your Application for Development, Testing, and DeploymentGoalsProgression of a ReleaseParameterizing Your Application with TemplatesParameterizing with Helm and TemplatesFilesystem Layout for ParameterizationDeploying Your Application Around the WorldArchitectures for Worldwide DeploymentImplementing Worldwide DeploymentDashboards and Monitoring for Worldwide DeploymentsSummary
Parts ListFlashing ImagesFirst BootSetting Up NetworkingInstalling a Container RuntimeInstalling KubernetesSetting Up the ClusterSetting Up Cluster NetworkingSummary

Overview

In just five years, Kubernetes has radically changed the way developers and ops personnel build, deploy, and maintain applications in the cloud. With this book's updated third edition, you'll learn how this popular container orchestrator can help your company achieve new levels of velocity, agility, reliability, and efficiency--whether you're new to distributed systems or have been deploying cloud native apps for some time.

Brendan Burns, Joe Beda, Kelsey Hightower, and Lachlan Evenson--who have worked on Kubernetes at Google and beyond--explain how this system fits into the life cycle of a distributed application. Software developers, engineers, and architects will learn ways to use tools and APIs to automate scalable distributed systems for online services, machine learning applications, or even a cluster of Raspberry Pi computers.

This guide shows you how to:

Create a simple cluster to learn how Kubernetes works
Dive into the details of deploying an application using Kubernetes
Learn specialized objects in Kubernetes, such as DaemonSets, jobs, ConfigMaps, and secrets
Explore deployments that tie together the lifecycle of a complete application
Get practical examples of how to develop and deploy real-world applications in Kubernetes