《Kubernetes实战指南》：深度解析核心组件

kubernetes

4星 · 超过85%的资源需积分: 22 147 浏览量更新于2024-07-18 3 收藏 11.86MB PDF 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

《Kubernetes in Action》是一本备受推崇的Kubernetes入门书籍，作者Marko Lukša以其通俗易懂且深入浅出的方式讲解了Kubernetes的核心概念和实践。本书全面覆盖了Kubernetes中的关键资源，旨在帮助读者理解并掌握容器编排平台的基础知识。首先，我们来探讨一下几个核心资源及其在Kubernetes中的作用： 1. **命名空间（Namespace, ns）[v1]**：命名空间是Kubernetes用来组织资源的基本单元，它将资源分组到互不干扰的逻辑集合中，例如不同的租户或项目。通过命名空间，可以实现资源隔离，确保不同环境或服务的安全运行。 2. **Pod（po）[v1]**：Pod是Kubernetes中最小的部署单位，它封装了一个或多个共享存储和网络的容器，是运行应用程序的基本单元。 3. **ReplicaSet (rs) [apps/v1beta2]**：ReplicaSet负责维护一个或多个Pod副本，确保其可用性。它是ReplicationController的替代方案，提供了更现代化的资源管理和扩展策略。 4. **ReplicationController (rc) [v1]**：尽管版本较旧，但ReplicationController在早期版本中扮演着重要角色，它控制Pod的数量以保持预期副本，并对Pod进行自动替换。 5. **Job [batch/v1]**：Job用于一次性执行任务，确保任务完成后再释放资源，适合执行短期、可重复的任务。 6. **CronJob [batch/v1beta1]**：CronJob是一种周期性任务调度器，允许用户定义基于时间的任务，如定期备份或数据分析。 7. **DaemonSet (ds) [apps/v1beta2]**：DaemonSet确保在每个节点上运行一个Pod副本，这特别适用于需要持久运行的服务，如系统监控工具。 8. **StatefulSet (sts) [apps/v1beta1]**：StatefulSet是为有状态应用设计的，提供每个Pod一个稳定的网络标识和持久化存储，保证数据一致性。 9. **Deployment (deploy) [apps/v1beta1]**：Deployment是声明式部署和更新机制，它管理Pod的生命周期，包括滚动更新和故障恢复。 10. **服务（Service, svc）[v1]**：Service用于暴露Pod的应用，为外部用户提供访问入口，通过内部IP和端口规则实现负载均衡和高可用。这些知识点是理解Kubernetes如何管理容器化应用的关键组成部分。通过学习和实践这些概念，开发者可以有效地利用Kubernetes来构建、部署和扩展复杂的分布式系统。《Kubernetes in Action》是一本值得推荐的指南，对于想要深入了解Kubernetes操作和技术的读者来说，无疑是一本不可或缺的参考书籍。

资源详情

资源推荐

CONTENTS

xiv

ConfigMaps and Secrets: configuring applications 191

7.1 Configuring containerized applications 191

7.2 Passing command-line arguments to containers 192

Defining the command and arguments in Docker 193

Overriding the command and arguments in Kubernetes 195

7.3 Setting environment variables for a container 196

Specifying environment variables in a container definition 197

Referring to other environment variables in a variable’s value 198

Understanding the drawback of hardcoding environment

variables 198

7.4 Decoupling configuration with a ConfigMap 198

Introducing ConfigMaps 198

■

Creating a ConfigMap 200

Passing a ConfigMap entry to a container as an environment

variable 202

■

Passing all entries of a ConfigMap as environment

variables at once 204

■

Passing a ConfigMap entry as a

command-line argument 204

■

Using a configMap volume to

expose ConfigMap entries as files 205

■

Updating an app’s config

without having to restart the app 211

7.5 Using Secrets to pass sensitive data to containers 213

Introducing Secrets 214

■

Introducing the default token

Secret 214

■

Creating a Secret 216

■

Comparing ConfigMaps

and Secrets 217

■

Using the Secret in a pod 218

Understanding image pull Secrets 222

7.6 Summary 224

Accessing pod metadata and other resources from

applications 225

8.1 Passing metadata through the Downward API 226

Understanding the available metadata 226

■

Exposing metadata

through environment variables 227

■

Passing metadata through

files in a downwardAPI volume 230

8.2 Talking to the Kubernetes API server 233

Exploring the Kubernetes REST API 234

■

Talking to the API

server from within a pod 238

■

Simplifying API server

communication with ambassador containers 243

■

Using client

libraries to talk to the API server 246

8.3 Summary 249

CONTENTS

xvii

Securing cluster nodes and the network 375

13.1 Using the host node’s namespaces in a pod 376

Using the node’s network namespace in a pod 376

■

Binding to

a host port without using the host’s network namespace 377

Using the node’s PID and IPC namespaces 379

13.2 Configuring the container’s security context 380

Running a container as a specific user 381

■

Preventing a

container from running as root 382

■

Running pods in

privileged mode 382

■

Adding individual kernel capabilities

to a container 384

■

Dropping capabilities from a container 385

Preventing processes from writing to the container’s filesystem 386

Sharing volumes when containers run as different users 387

13.3 Restricting the use of security-related features

in pods 389

Introducing the PodSecurityPolicy resource 389

■

Understanding

runAsUser, fsGroup, and supplementalGroups policies 392

Configuring allowed, default, and disallowed capabilities 394

Constraining the types of volumes pods can use 395

■

Assigning

different PodSecurityPolicies to different users and groups 396

13.4 Isolating the pod network 399

Enabling network isolation in a namespace 399

■

Allowing

only some pods in the namespace to connect to a server pod 400

Isolating the network between Kubernetes namespaces 401

Isolating using CIDR notation 402

■

Limiting the outbound

traffic of a set of pods 403

13.5 Summary 403

Managing pods’ computational resources 404

14.1 Requesting resources for a pod’s containers 405

Creating pods with resource requests 405

■

Understanding how

resource requests affect scheduling 406

■

Understanding how CPU

requests affect CPU time sharing 411

■

Defining and requesting

custom resources 411

14.2 Limiting resources available to a container 412

Setting a hard limit for the amount of resources a container

can use 412

■

Exceeding the limits 414

■

Understanding

how apps in containers see limits 415

14.3 Understanding pod QoS classes 417

Defining the QoS class for a pod 417

■

Understanding which

process gets killed when memory is low 420

剩余627页未读，继续阅读

中年程序员

粉丝: 1
资源: 2

《Kubernetes实战指南》：深度解析核心组件

kubernetes-in-action.pdf.zip

kubernetes实战 英文版

Kubernetes in Action中文版,七牛云

推荐一些kubernetes入门教程的网站博客或者书籍

docker和kubernetes书籍推荐

kubernetes电子书籍合集

帮我推荐相关的最新教程文档或者视频

想学k8s二次开发，有哪些教程推荐

javaweb参考文献近五年

k8s runtime proxy

Pod使用率用prometheus怎么监控告警

springboot的参考文献

Spring BOOT参考文献

springboot近三年的参考文献

springboot文献综述

golang书籍学习路径

你现在是一个资深云原生架构师，给我详细介绍一下etcd的作用及如何使用go语言操作etcd，最后给我几个用于新手学习etcd的网址

Kubernetes实战（套装共2册）PDF

最新资源

kubernetes实战英文版