Kubernetes

Becoming a Kubernetes administrator is a big accomplishment—and passing the Certified Kubernetes Administrator (CKA) exam can be a big boost to your career! Learn the hands on skills you need to ace the exam with clear teaching and hands-on exercises that match the unique CKA test environment.

In Acing the Certified Kubernetes Administrator Exam you’ll learn how to:

• Administer an application running on Kubernetes
• Troubleshoot errors inside a Kubernetes cluster
• Authenticate users and machines to the Kubernetes API
• Create persistent storage in Kubernetes
• Add additional functionality to an existing Kubernetes cluster

Acing the Certified Kubernetes Administrator Exam is your fast-track to becoming a Certified Kubernetes Administrator! Your expert exam tutor is Chad Crowell, whose courses have helped thousands of developers to understand Kubernetes and earn the coveted CKA certification. If you’re familiar with Kubernetes, this book will ensure you’re ready to pass in just one month of study. If you’re brand new, this is the perfect primer to get started on your Kubernetes journey.

Go hands-on with all the exam objectives, including deploying containerized applications to Kubernetes, accessing an application from an ingress resource, and backup and restore. Plus, essential exam tips and exercises help you work out your mental muscle memory.

The ability to administer and monitor a Kubernetes cluster is in high demand today. To meet this need, the Cloud Native Computing Foundation developed a certification exam to establish an administrator's credibility and value in the job market to confidently work in a Kubernetes environment.

The Certified Kubernetes Administrator (CKA) certification exam is different from the typical multiple-choice format of other professional certifications. Instead, the CKA is a performance-based exam that requires deep knowledge of the tasks under immense time pressure.

This study guide walks you through all the topics covered to fully prepare you for the exam. Author Benjamin Muschko also shares his personal experience with preparing for all aspects of the exam.

• Learn when and how to apply Kubernetes concepts to administer and troubleshoot a production-grade cluster
• Understand the objectives, abilities, and tips and tricks needed to pass the CKA exam
• Explore the ins and outs of the kubectl command-line tool
• Demonstrate competency to perform the responsibilities of a Kubernetes administrator
• Solve real-world Kubernetes problems in a hands-on command-line environment
• Effectively navigate and solve questions during the CKA exam

Vulnerabilities in software and IT infrastructure pose a major threat to organizations. In response, the Cloud Native Computing Foundation (CNCF) developed the Certified Kubernetes Security Specialist (CKS) certification to verify an administrator's proficiency to protect Kubernetes clusters and the cloud native software they contain. This practical book helps you fully prepare for the certification exam by walking you through all of the topics covered.

Different from typical multiple-choice formats used by other certifications, this performance-based exam requires deep knowledge of the tasks it covers under intense time pressure. If you want to pass the CKS exam on the first go, author Benjamin Muschko shares his personal experience to help you learn the objectives, abilities, and tips and tricks you need to pass on the first attempt.

• Identify, mitigate, and/or minimize threats to cloud native applications and Kubernetes clusters
• Learn the ins and outs of Kubernetes's security features, and external tools for security detection and mitigation purposes
• Demonstrate competency to perform the responsibilities of a Kubernetes administrator or application developer with a security viewpoint
• Solve real-world Kubernetes problems in a hands-on, command-line environment
• Effectively navigate and solve questions during the CKS exam

To facilitate scalability and resilience, many organizations now run applications in cloud native environments using containers and orchestration. But how do you know if the deployment is secure? This practical book examines key underlying technologies to help developers, operators, and security professionals assess security risks and determine appropriate solutions.

Author Liz Rice, Chief Open Source Officer at Isovalent, looks at how the building blocks commonly used in container-based systems are constructed in Linux. You'll understand what's happening when you deploy containers and learn how to assess potential security risks that could affect your deployments. If you run container applications with kubectl or docker and use Linux command-line tools such as ps and grep, you're ready to get started.

• Explore attack vectors that affect container deployments
• Dive into the Linux constructs that underpin containers
• Examine measures for hardening containers
• Understand how misconfigurations can compromise container isolation
• Learn best practices for building container images
• Identify container images that have known software vulnerabilities
• Leverage secure connections between containers
• Use security tooling to prevent attacks on your deployment

Take a deep dive into Kubernetes inner components and discover what really powers a Kubernetes cluster. This in-depth guide shines a light on Kubernetes' murky internals, to help you better plan cloud native architectures and ensure the reliability of your systems.

In Core Kubernetes you will learn about:

• Kubernetes base components
• Kubernetes networking
• Storage and the Container Storage Interface
• External load balancing and ingress
• Kubernetes security
• Different ways of creating a Kubernetes cluster
• Configuring Kubernetes to use a GPU

To build and operate reliable Kubernetes-based systems, you need to understand what’s going on below the surface. Core Kubernetes is an in-depth guide to Kubernetes’ internal workings written by Kubernetes contributors Chris Love and Jay Vyas. It’s packed with experience-driven insights and advanced techniques you won’t find anywhere else.

You’ll understand the unique security concerns of container-based applications, minimize costly unused capacity, and get pro tips for maximizing performance. Diagrams, labs, and hands-on examples ensure that the complex ideas are easy to understand and practical to apply.

GitOps and Kubernetes introduces a radical idea—managing your infrastructure with the same Git pull requests you use to manage your codebase. In this in-depth tutorial, you’ll learn to operate infrastructures based on powerful-but-complex technologies such as Kubernetes with the same Git version control tools most developers use daily. With these GitOps techniques and best practices, you’ll accelerate application development without compromising on security, easily roll back infrastructure changes, and seamlessly introduce new team members to your automation process.

Learn multicloud deployment on Anthos directly from the Google development team! Anthos delivers a consistent management platform for deploying and operating Linux and Windows applications anywhere—multi-cloud, edge, on-prem, bare metal, or VMware.

In Google Anthos in Action you will learn:

• How Anthos reduces your dependencies and stack-bloat
• Running applications across multiple clouds and platforms
• Handling different workloads and data
• Adding automation to speed up code delivery
• Modernizing infrastructure with microservices and Service Mesh
• Policy management for enterprises
• Security and observability at scale

Google Anthos in Action demystifies Anthos with practical examples of Anthos at work and invaluable insights from the Google team that built it. You’ll learn how to use this modern, Kubernetes-based cloud platform to balance costs, automate security, and run your software literally anywhere. The book is full of Google-tested patterns that will boost efficiency across the development lifecycle. It’s an absolutely essential guide for anyone working with Anthos, or delivering software in a cloud-centric world.

Solve difficult service-to-service communication challenges around security, observability, routing, and resilience with an Istio-based service mesh. Istio allows you to define these traffic policies as configuration and enforce them consistently without needing any service-code changes.

In Istio in Action you will learn:

• Why and when to use a service mesh
• Envoy’s role in Istio’s service mesh
• Allowing “North-South” traffic into a mesh
• Fine-grained traffic routing
• Make your services robust to network failures
• Gain observability over your system with telemetry “golden signals”
• How Istio makes your services secure by default
• Integrate cloud-native applications with legacy workloads such as in VMs

Reduce the operational complexity of your microservices with an Istio-powered service mesh! Istio in Action shows you how to implement this powerful new architecture and move your application-networking concerns to a dedicated infrastructure layer. Non-functional concerns stay separate from your application, so your code is easier to understand, maintain, and adapt regardless of programming language.

In this practical guide, you’ll go hands-on with the full-featured Istio service mesh to manage microservices communication. Helpful diagrams, example configuration, and examples make it easy to understand how to control routing, secure container applications, and monitor network traffic.

Take the pain out of managing serverless applications. Knative, a collection of Kubernetes extensions curated by Google, simplifies building and running serverless systems.

Knative in Action guides you through the Knative toolkit, showing you how to launch, modify, and monitor event-based apps built using cloud-hosted functions like AWS Lambda. You’ll learn how to use Knative Serving to develop software that is easily deployed and autoscaled, how to use Knative Eventing to wire together disparate systems into a consistent whole, and how to integrate Knative into your shipping pipeline.

In this practical guide, four Kubernetes professionals with deep experience in distributed systems, enterprise application development, and open source will guide you through the process of building applications with this container orchestration system. They distill decades of experience from companies that are successfully running Kubernetes in production and provide concrete code examples to back the methods presented in this book.

Revised to cover all the latest Kubernetes features, new tooling, and deprecations, this book is ideal for those who are familiar with basic Kubernetes concepts but want to get up to speed on the latest best practices. You'll learn exactly what you need to know to build your best app with Kubernetes the first time.

• Set up and develop applications in Kubernetes
• Learn patterns for monitoring, securing your systems, and managing upgrades, rollouts, and rollbacks
• Integrate services and legacy applications and develop higher-level platforms on top of Kubernetes
• Run machine learning workloads in Kubernetes
• Ensure pod and container security
• Understand issues that have become increasingly critical to the successful implementation of Kubernetes, such as chaos engineering/testing, GitOps, service mesh, and observability

Kubernetes is the de facto standard for container orchestration and distributed applications management across a microservices framework. With this practical cookbook, you'll learn hands-on Kubernetes recipes for automating the deployment, scaling, and operations of application containers across clusters of hosts.

In this fully updated second edition, Sameer Naik, Sébastien Goasguen, and Jonathan Michaux from TriggerMesh provide a problem-solution-discussion format with easy lookups to help you find the detailed answers you need—fast. Kubernetes lets you deploy your applications quickly and predictably, so you can efficiently respond to customer demand. This cookbook delivers the essential knowledge that developers and system administrators need to get there.

Recipes in this cookbook focus on:

• Creating a Kubernetes cluster
• Using the Kubernetes command-line interface
• Managing fundamental workload types
• Working with services
• Exploring the Kubernetes API
• Managing stateful and non-cloud-native apps
• Working with volumes and configuration data
• Cluster-level and application-level scaling
• Securing your applications
• Monitoring and logging
• Maintenance and troubleshooting

A clear and practical beginner’s guide that shows you just how easy it can be to make the switch to Kubernetes!

Kubernetes for Developers reveals practical and painless methods for deploying your apps on Kubernetes—even for small-to-medium sized applications! You’ll learn how to migrate your existing apps onto Kubernetes without a rebuild, and implement modern cloud native architectures that can handle your future growth.

Inside, you’ll learn how to:

• Containerize a web application with Docker
• Host a containerized app on Kubernetes with a public cloud service
• Save money and improve performance with cloud native technologies
• Make your deployments reliable and fault tolerant
• Prepare your deployments to scale without a redesign
• Monitor, debug and tune application deployments on Kubernetes

Designed for busy working developers, this hands-on guide helps your first steps into Kubernetes using the powerful Google Kubernetes Engine (GKE) service. Learn how the GKE’s powerful automation tools can perform automatic checks and scaling, giving you more time to spend developing great applications. You’ll soon see that you don’t need to incur huge costs or have the manpower of an enterprise organization to get a productivity boost from Kubernetes!

Build fast, efficient Kubernetes-based Java applications using the Quarkus framework, MicroProfile, and Java standards.

In Kubernetes Native Microservices with Quarkus and MicroProfile you’ll learn how to:

• Deploy enterprise Java applications on Kubernetes
• Develop applications using the Quarkus runtime
• Compile natively using GraalVM for blazing speed
• Create efficient microservices applications
• Take advantage of MicroProfile specifications

Popular Java frameworks like Spring were designed long before Kubernetes and the microservices revolution.

Kubernetes Native Microservices with Quarkus and MicroProfile introduces next generation tools that have been cloud-native and Kubernetes-aware right from the beginning. Written by veteran Java developers John Clingan and Ken Finnigan, this book shares expert insight into Quarkus and MicroProfile directly from contributors at Red Hat. You’ll learn how to utilize these modern tools to create efficient enterprise Java applications that are easy to deploy, maintain, and expand.

The way developers design, build, and run software has changed significantly with the evolution of microservices and containers. These modern architectures offer new distributed primitives that require a different set of practices than many developers, tech leads, and architects are accustomed to. With this focused guide, Bilgin Ibryam and Roland Huss provide common reusable patterns and principles for designing and implementing cloud native applications on Kubernetes.

Each pattern includes a description of the problem and a Kubernetes-specific solution. All patterns are backed by and demonstrated with concrete code examples. This updated edition is ideal for developers and architects familiar with basic Kubernetes concepts who want to learn how to solve common cloud native challenges with proven design patterns.

You'll explore:

• Foundational patterns covering core principles and practices for building and running container-based cloud native applications
• Behavioral patterns that delve into finer-grained concepts for managing various types of container and platform interactions
• Structural patterns for organizing containers within a Pod for addressing specific use cases
• Configuration patterns that provide insight into how application configurations can be handled in Kubernetes
• Security patterns for hardening the access to cloud native applications running on KubernetesAdvanced patterns covering more complex topics such as operators and autoscaling

Safely manage your secret information like passwords, keys, and certificates in Kubernetes. This practical guide is full of best practices and methods for adding layers of security that will defend the critical data of your applications.

In Kubernetes Secrets Management you will find:

• Strategies for storing secure assets in Kubernetes
• Cryptographic options and how to apply them in Kubernetes
• Using the HashiCorp Vault server on Kubernetes for secure secrets storage
• Managing security with public cloud providers
• Applying security concepts using tools from the Kubernetes ecosystem
• End-to-end secrets storage from development to operations
• Implementing in Kubernetes in CI/CD systems

Secrets, like database passwords and API keys, are some of the most important data in your application.

Kubernetes Secrets Management reveals how to store these sensitive assets in Kubernetes in a way that’s protected against leaks and hacks. You’ll learn the default capabilities of Kubernetes secrets, where they’re lacking, and alternative options to strengthen applications and infrastructure. Discover a security-first mindset that is vital for storing and using secrets correctly, and tools and concepts that will help you manage sensitive assets such as certificates, keys, and key rotation.

This third edition comes with a dedicated playlist of interactive Katacoda labs mapped to each section of the book. As you read through each chapter, you can practice the concepts covered in each section by completing the associated labs.

In just five years, Kubernetes has radically changed the way developers and ops personnel build, deploy, and maintain applications in the cloud. With this book's updated third edition, you'll learn how this popular container orchestrator can help your company achieve new levels of velocity, agility, reliability, and efficiency--whether you're new to distributed systems or have been deploying cloud native apps for some time.

Brendan Burns, Joe Beda, Kelsey Hightower, and Lachlan Evenson--who have worked on Kubernetes at Google and beyond--explain how this system fits into the life cycle of a distributed application. Software developers, engineers, and architects will learn ways to use tools and APIs to automate scalable distributed systems for online services, machine learning applications, or even a cluster of Raspberry Pi computers.

This guide shows you how to:

• Create a simple cluster to learn how Kubernetes works
• Dive into the details of deploying an application using Kubernetes
• Learn specialized objects in Kubernetes, such as DaemonSets, jobs, ConfigMaps, and secrets
• Explore deployments that tie together the lifecycle of a complete application
• Get practical examples of how to develop and deploy real-world applications in Kubernetes

In Learn Kubernetes in a Month of Lunches you'll go from "what's a Pod?" to automatically scaling clusters of containers and components in just 22 hands-on lessons, each short enough to fit into a lunch break. Every lesson is task-focused and covers an essential skill on the road to Kubernetes mastery. You'll learn how to smooth container management with Kubernetes, including securing your clusters, and upgrades and rollbacks with zero downtime. No development stack, platform, or background is assumed. Author Elton Stoneman describes all patterns generically, so you can easily apply them to your applications and port them to other projects!

Get up to speed with Helm, the preeminent package manager for the Kubernetes container orchestration system. This practical guide shows you how to efficiently create, install, and manage the applications running inside your containers. Helm maintainers Matt Butcher, Matt Farina, and Josh Dolitsky explain how this package manager fits into the Kubernetes ecosystem and provide an inside look at Helm's design and best practices.

More than 70% of the organizations that work with Kubernetes use Helm today. While the Helm community provides thousands of packages, or charts, to help you get started, this book walks developers and DevOps engineers through the process of creating custom charts to package applications. If you have a working understanding of Kubernetes, you're ready to go.

• Explore primary features including frequently used Helm commands
• Learn how to build and deploy Helm charts from scratch
• Use Helm to manage complexity and achieve repeatable deployments
• Package an application and its dependencies for easy installation
• Manage the entire lifecycle of applications on Kubernetes
• Explore ways to extend Helm to add features and functionality
• Learn features for testing, handling dependencies, and providing security

The fourth edition of the bestseller Mastering Kubernetes includes the most recent tools and code to enable you to learn the latest features of Kubernetes 1.25. This book contains a thorough exploration of complex concepts and best practices to help you master the skills of designing and deploying large-scale distributed systems on Kubernetes clusters.

You’ll learn how to run complex stateless and stateful microservices on Kubernetes, including advanced features such as horizontal pod autoscaling, rolling updates, resource quotas, and persistent storage backends. In addition, you’ll understand how to utilize serverless computing and service meshes.

Further, two new chapters have been added. “Governing Kubernetes” covers the problem of policy management, how admission control addresses it, and how policy engines provide a powerful governance solution. “Running Kubernetes in Production” shows you what it takes to run Kubernetes at scale across multiple cloud providers, multiple geographical regions, and multiple clusters, and it also explains how to handle topics such as upgrades, capacity planning, dealing with cloud provider limits/quotas, and cost management.

By the end of this Kubernetes book, you’ll have a strong understanding of, and hands-on experience with, a wide range of Kubernetes capabilities.

What you will learn

• Learn how to govern Kubernetes using policy engines
• Learn what it takes to run Kubernetes in production and at scale
• Build and run stateful applications and complex microservices
• Master Kubernetes networking with services, Ingress objects, load balancers, and service meshes
• Achieve high availability for your Kubernetes clusters
• Improve Kubernetes observability with tools such as Prometheus, Grafana, and Jaeger
• Extend Kubernetes with the Kubernetes API, plugins, and webhooks

Who this book is for

If you're a system administrator or cloud developer who wants to become comfortable with Kubernetes and would like to master its advanced features, then this book is for you. Software and DevOps engineers with a working knowledge of Kubernetes, as well as technical managers of Kubernetes-based systems, will also find this book useful. Those deciding on whether to migrate to Kubernetes and are curious about its inner workings will find plenty of answers here as well. Basic familiarity with networking concepts will prove beneficial.

Kubernetes has become an essential part of the daily work for most system, network, and cluster administrators today. But to work effectively together on a production-scale Kubernetes system, they must be able to speak the same language. This book provides a clear guide to the layers of complexity and abstraction that come with running a Kubernetes network.

Authors James Strong and Vallery Lancey bring you up to speed on the intricacies that Kubernetes has to offer for large container deployments. If you're to be effective in troubleshooting and maintaining a production cluster, you need to be well versed in the abstraction provided at each layer. This practical book shows you how.

• Learn the Kubernetes networking model
• Choose the best interface for your clusters from the CNCF Container Network Interface project
• Explore the networking and Linux primitives that power Kubernetes
• Quickly troubleshoot networking issues and prevent downtime
• Examine cloud networking and Kubernetes using the three major providers: Amazon Web Services, Google Cloud, and Microsoft Azure
• Learn the pros and cons of various network tools--and how to select the best ones for your stack

Empower your team with platforms built on top of Kubernetes using open source tools.

Adopting Kubernetes is complex—especially when you’re working in an organization with multiple teams, deploying to multiple cloud providers, and working with different stacks.

Platform Engineering on Kubernetes shows you how to solve these common cloud native problems with open-source tools and emerging best practices from the Kubernetes community.

In Platform Engineering on Kubernetes you will learn about:

• The principles behind platform engineering and how these apply to Kubernetes
• Evaluating and adopting open-source projects to build domain specific platforms
• Creating Platform APIs to enable teams to release more software more efficiently
• Reducing the cognitive load of a platform for your teams
• Measuring your platform initiatives using established software delivery metrics
• Package, version, distribute, and deploy with Helm, Tekton, Dagger and Argo CD
• Implement a multi-cloud infrastructure strategy using Crossplane
• Progressive upgrades with Knative Serving and Argo Rollouts
• Enable development teams with standard application-level APIs with Dapr

A platform helps your team stay focused on delivering amazing software. But building a reliable platform on top of Kubernetes demands real expertise.

Platform Engineering on Kubernetes reveals how to combine multiple popular open-source projects into a custom platform that works for your applications and your teams. It’s the perfect guide for your organization’s journey to Kubernetes, simplifying cloud native development for your dev teams and helping them deliver software faster.

The next generation of containers is here. Learn Podman directly from its creator, discover its exceptional security features, and start managing rootless containers that integrate easily into your systems.

In Podman in Action you will learn how to:

• Build and run containers in rootless mode
• Develop and manage pods
• Use SystemD to oversee a container’s lifecycle
• Work with the Podman service via Python
• Keep your containers confined using Podman security features
• Manage containerized applications on edge devices

Podman in Action shows you how to deploy containerized applications on Linux, Windows, and MacOS systems using Podman. Written by Daniel Walsh, who leads the Red Hat Podman team, this book teaches you how to securely manage the entire application lifecycle without human intervention. You’ll quickly get to grips with Podman’s unique advantages over Docker, and learn how easy it is to migrate your Docker-based infrastructure. It also demonstrates how, with Podman, you can easily convert containerized applications into Kubernetes-based microservices.

Containers ensure that software runs reliably no matter where it’s deployed, and Kubernetes is the open-source platform that lets you manage all of your containers from a single control plane. In this comprehensive tour of Kubernetes, each chapter includes a set of examples with just enough automation to start your container exploration with ease.

The book begins with an overview of modern application architecture and the benefits of and requirements for containers and orchestration. It describes Linux control groups, process isolation, and network namespaces, and how to build container images. You'll then create containers, deploy and administer a Kubernetes cluster, and learn how to debug Kubernetes all the way down to the operating system and the network. You'll gain a deep understanding of containerization and Kubernetes, as well as how container networking works at the packet level across multiple nodes in a cluster. Along the way, you'll learn:

• How containers make applications more reliable and easier to maintain
• How to build a Kubernetes cluster and use it to run containerized applications
• Why container networking is so important and how it works in detail
• How to keep applications running well, and how to debug when things go wrong
• How to keep a cluster secure with authentication and role-based access controls

With its broad adoption across various industries, Kubernetes is helping engineers with the orchestration and automation of container deployments on a large scale, making it the leading container orchestration system and the most popular choice for running containerized applications.

This Kubernetes book starts with an introduction to Kubernetes and containerization, covering the setup of your local development environment and the roles of the most important Kubernetes components. Along with covering the core concepts necessary to make the most of your infrastructure, this book will also help you get acquainted with the fundamentals of Kubernetes. As you advance, you'll learn how to manage Kubernetes clusters on cloud platforms, such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP), and develop and deploy real-world applications in Kubernetes using practical examples. Additionally, you'll get to grips with managing microservices along with best practices.

By the end of this book, you'll be equipped with battle-tested knowledge of advanced Kubernetes topics, such as scheduling of Pods and managing incoming traffic to the cluster, and be ready to work with Kubernetes on cloud platforms.

What you will learn

• Manage containerized applications with Kubernetes
• Understand Kubernetes architecture and the responsibilities of each component
• Set up Kubernetes on Amazon Elastic Kubernetes Service, Google Kubernetes Engine, and Microsoft Azure Kubernetes Service
• Deploy cloud applications such as Prometheus and Elasticsearch using Helm charts
• Discover advanced techniques for Pod scheduling and auto-scaling the cluster
• Understand possible approaches to traffic routing in Kubernetes

Who this book is for

This book is for software developers and DevOps engineers looking to understand how to work with Kubernetes for orchestrating containerized applications and services in the cloud. Prior experience with designing software running in operating system containers, as well as a general background in DevOps best practices, will be helpful. Basic knowledge of Kubernetes, Docker, and leading cloud service providers assist with grasping the concepts covered easily.