Please enable JavaScript.

Coggle requires JavaScript to display documents.

Kube Basics (Control Plane (etcd (based on raft consensus algorithm,…

- - - - Authentication
        
        Normal Users
        
        Service Accounts
        
        tied to namespace
        
        creds via secrets
        
        Anonymous (if configured)
      - Authorisation
        
        Node
        
        Kublets
        
        ABAC
        
        policies with attributes
        
        Webhook
        
        3rd Party
        
        RBAC
        
        policies with roles
        
        restrict resource by operation
        
        Role
        
        limit on namesapce
        
        Role Binding
        
        Cluster Role
        
        cluster wide
        
        Cluster Role Binding
      - Admission Control
        
        Resource Quotas etc
- - - - Flannel
      - Weave
      - Calico
- - - - dockershim - docker > containerd
      - cri-conteinerd - direct to containerd
      - cri-o any OCI runtime
- - - - External Access via Reverse Proxy
      - Hit any node on specific port > Cluster IP
    - - 3rd part Cloud LB + Node Port + Cluster IP
    - - Admin Setup standard IP routes to worker
    - - cname of external resource
- - - - lifetime of pod
    - - still on host when pod dies
    - - Dynamically allocate persistent storage where storage class supports it