K8s in 2hours
3 likes236 views
Kubernetes is an open source container cluster manager that provides workload abstractions like pods, deployments, and services. It supports multiple virtual clusters on the same physical cluster through namespaces. Key resources include secrets for storing sensitive information like TLS certificates, persistent volumes for storage, and private registries. Kubernetes can be installed on-premises or in the cloud using tools like Kops on AWS or kubeadm for laptop development.
K8s in 2hours
- 1. Kubernetes In 2 Hours PhuLeTV - DevOps Lead
- 2. Agenda • What is K8s • Pod – Deployment – Statfulset – Service • Namespace • Secret TLS • Storage • Private Registry • How to install and sample
- 3. What is Kubernetes Oh no … Today is deployment day, again! • K8s is an abbreviation • Open source container cluster manager • Cloud ready
- 4. What is Kubernetes Oh no … Today is deployment day, again!
- 5. Workload Today is deployment day, again! Pod = the smallest and simplest unit in the Kubernetes object model Deployment = keep a set of pods Service = is a REST object, is a simple Endpoints API that is updated whenever the set of Pods in a Service changes. StatefulSet = keep a set of pods, maintains a sticky identity for each of their Pods.
- 7. Service vs StatefulSet Today is deployment day, again!
- 8. Namespace Oh no … • Kubernetes supports multiple virtual clusters backed by the same physical cluster. • Namespaces are intended for use in environments with many users spread across multiple teams, or projects. • Namespaces provide a scope for names. • Names of resources need to be unique within a namespace, but not across namespaces.
- 9. Secret TLS Oh no … Today is deployment day, again! apiVersion: v1 data: ca.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0 ca.key: LS0tLS1CRUdJTiBQUklWQVRFIE kind: Secret metadata: creationTimestamp: 2018-09-08T14:46:33Z name: printtext-tls namespace: default resourceVersion: "2492112" selfLink: /api/v1/namespaces/default/secrets/printtext-tls uid: fae77b5e-b375-11e8-9810-02efd033106c type: Opaque
- 10. Secret TLS Oh no … Today is deployment day, again! Or: kubectl create secret generic printtext- tls --from-file=ca.crt --from-file=ca.key
- 11. Secret TLS Oh no … Today is deployment day, again! Use secret as environment variable: apiVersion: v1 kind: Pod metadata: name: secret-env-pod spec: containers: - name: mycontainer image: redis env: - name: SECRET_USERNAME valueFrom: secretKeyRef: name: mysecret key: username - name: SECRET_PASSWORD valueFrom: secretKeyRef: name: mysecret key: password restartPolicy: Never
- 12. Storage Persistent Volume Label A Physical Storage - NFS - AWS EBS Pod Volumes: - PVC name StorageClass Persistent Volume Claim: Pod Volumes: - PVC name Persistent Volume Label B Users Admins selector storageClass Name
- 13. Private Registry Oh no … Today is deployment day, again!
- 14. How To Install and Sample Oh no … Today is deployment day, again! ON AWS: • Using Kops ON Laptop: 1. Use “kubeadm” 2. Why not minikube ? 3. At least 4GB RAM in your virtual machine.