Please enable JavaScript.

Coggle requires JavaScript to display documents.

Kubernetes (Advanced (Affinity (Interpod Affinity (Apply (To (Namespace)),…

- - - - Other Services
        
        Running
        
        Same Cluster
  - - - Environment Variables
      - Container
        
        Commandline
        
        Arguments
        
        In
        
        Pod Configuration
      - Volumes
    - - create
        
        configmap
        
        nginx-config
        
        --from-file=configmap/reverseproxy.conf
  - - - Inbound Connection
        
        To Cluster
    - - External LoadBalancer
      - NodePorts
    - - LoadBalancer
  - - - DigitalOcean
    - - In a Cluster
  - - - Still exist
        
        After
        
        Container
        
        Stoppped
    - - Create Pod
        
        With
        
        Volume Def
    - - StorageClass
        
        Provisioner
        
        aws-ebs
      - PersistentVolumeClaim
        
        8Gb
      - Pod
  - - - Information
        
        In Pods
        
        At Runtime
    - - Configmap
        
        Secrets
        
        Maps
        
        Environment Variables
  - - - Pod
        
        Hostname
    - - Use
        
        DNS
        
        To find
        
        Peers
    - - Clusters
        
        Cassandra
        
        ElasticSearch
  - - - Single Node
        
        Runs
        
        Same
        
        Pod
        
        Resource
    - - Logging Aggregation
        
        Monitoring
      - Load Balancer
        
        Reverse Proxy
        
        API Gateways
  - - - Metrics
        
        REST endpoints
      - Backend
        
        InfluxDB
        
        Kafka
      - Visualization
        
        Grafana
      - Pods
        
        Deployment
        
        Github
      - Deprecated :no_entry:
        
        After 1.13
  - - - Scaling
        
        Metrics-Based
    - - ReplicaSet
      - Replication Controller
      - Deployment
    - - ENABLE_CUSTOM_METRICS = TRUE
    - - HorizontalPodAutoscaler
  - - - Than
        
        NodeSelector
    - - Node
        
        +
      - Pod
        
        +:/-
    - - Rule
    - - During
        
        Scheduling
    - - requiredDuringSchedulingIgnoredDuringExecution
      - preferredDuringSchedulingIgnoredDuringExecution
    - - Apply
        
        To
        
        Namespace
      - Affinity
        
        Co-located
        
        Pods
        
        Node
        
        AZ
      - Topology
        
        Domain
        
        topologyKey
      - Anti-Affinity
        
        Only
        
        1 Pod
        
        1 Node
  - - - Repel
        
        Set of
        
        Pods
      - Derogation
        
        To
        
        Taints
    - - Applied
        
        To
        
        Node
      - Example
        
        No creation :no_entry:
        
        MasterNode
      - kubectl taints nodes node1 key=value:NoSchedule
      - NoExecute
        
        Vs
        
        NoSchedule
  - - - Customed Resource
    - - Prometheus
        
        PostGre
        
        MySQL
      - Use
        
        CRD
      - App
        
        Stafeul
        
        Hidding
        
        Complexity
      - Rook.io
- - - - IPtables
      - kubelet
        
        Launch
        
        Pods
      - kube-proxy
        
        Feed
        
        IPTable
        
        With
        
        Pods
      - Pods
        
        Containers
  - - - Outside
        
        Container
    - - Written
  - - - Replicas
        
        YAML File
        
        kubectl scale --replicas=4 <yml.file>
  - - - Definition
    - - Update
        
        Rolling Update
        
        Rolling Back
    - - get deployments
      - get rs
        
        Replica Set
        
        Infos
      - rollout status <deployment-object>
      - set image <deployment-object> <new-name>
        
        Tag
        
        New version
      - rollout undo <deployment-object>
  - - - NodePort
        
        Accessible
        
        Externally
        
        Same
        
        Port
        
        Each
        
        Node
      - ClusterIP
        
        Accessible
        
        Within
        
        Cluster
        
        Not static IP
        
        By Default
      - Load Balancer
        
        Cloud
  - - - Pod
        
        Specific
        
        Node
        
        Tag
        
        Pod
        
        Add
        
        NodeSelector
        
        To
        
        1 more item...
  - - - Command
        
        In Container
    - - Check
        
        On URL
        
        Preferred
        
        livenessProbe:
        
        httpGet:
        
        Path:/
        
        Port:3000
        
        1 more item...
    - - Running?
  - - - To Serve
  - - - Running
        
        Bound
        
        To Node
        
        All Containers
        
        Created
        
        At Least
        
        1 Container
        
        Running
      - Pending
      - Succeeded
        
        All Containers
        
        Terminated
        
        Successfully
        
        No Restart
      - Failed
        
        All Containers
        
        Terminated
        
        At least 1 Container
        
        Returns
        
        Failure Code
      - Unknown
        
        Netowrok
        
        Issue
    - - PodScheduled
        
        Scheduled
        
        To a Node
      - Ready
        
        Pod
        
        Ready
        
        To serve
      - Initialized
      - Unschedulable
        
        Ressource
        
        Constrains
      - ContainersReady
        
        All Containers
        
        In Pod
        
        Ready
    - - Running
        
        Terminating
        
        Waiting
  - - - Volume Prep
    - - Pre Stop Hook
  - - - Other Solutions
        
        External
        
        Vault Services
    - - Environment Variables
      - File
        
        In a Pod
      - External
        
        Image
        
        From
        
        Private Image Registry
    - - File
      - SSH Key
        
        SSL Certificate
- - - - kubectl
        
        Authorization
        
        REST interfaces
        
        kubelet in node
      - etcd
        
        Saved
        
        Backend
      - Scheduler
        
        Controller Manager
  - - - Cluster
        
        Namespaces
    - - Request capacity
      - Capacity limits
    - - Specify
        
        Default
    - - requests.
        
        CPU
        
        MEM
        
        Storage
      - limits.
        
        CPU
        
        memory
  - - - Name
        
        Uniqueness
        
        In
        
        1 Namespace
    - - namespace
  - - - Normal
        
        API Access
        
        kubectl
        
        Authentication
        
        Client Certificates
        
        Bearer Tokens
        
        Authentication Proxy
        
        HTTP Basic
        
        1 more item...
      - Service
        
        Managed
        
        By
        
        Object
        
        Authentication
        
        Within
        
        Cluster
        
        Credentials
        
        Managed
        
        By
        
        Secrets
    - - AlwaysAllow
        
        AlwaysDeny
      - ABAC
      - RBAC
        
        --authorization-mode=RBAC
      - kind
        
        Role
        
        RoleBinding
        
        ClusterRole
        
        ClusterBinding
  - - - POD
        
        IP address
    - - AWS
        
        With
        
        VPC
    - - Calico
        
        Weave
    - - Network
        
        Flannel
        
        Network
        
        Gateway
  - - - Node Controller
    - - With
        
        Kubelet
    - - kubectl drain nodename --grace-period=500
  - - - etcd
        
        3 Nodes
    - - API Servers
        
        With
        
        Load Balancer
    - - Instances
        
        Scheduler
        
        Controller
  - - - services
        
        with
        
        annotations
        
        Access
        
        logs
        
        Add
        
        tags
        
        Backend
        
        protocol
        
        to
        
        1 more item...
        
        Certificate
        
        ARN
        
        Connection
        
        draining
        
        Timeout
  - - - Request
        
        To
        
        API Server
    - - Enabled
    - - NamespaceLifecycle
      - LimitRanger
      - ServiceAccount
      - DefaultStorageClass
  - - - Deny
        
        Privileged Modes
      - Control
        
        Volume
        
        Mounted
    - - Enabled
        
        Cluster Startup
    - - Pod
        
        Creation
        
        Modification
    - - One for Process
        
        Root
      - One for User
        
        Pods
  - - - backend
        
        Distributed
        
        Key-value store
    - - TLS
    - - Raft
        
        Consensus
        
        Write
        
        Only Leader
        
        Only Quorum
        
        Agreed
      - Heartbeat
    - - Snapshot
- - - - Pod Level
        
        ServiceAccount
        
        Annotations
        
        IAM Role ARN
  - - - Vs Kops
- - - - Docker Client
      - Minkube
    - - kubeadm
      - kops
        
        Only Mac / Linux
  - - - get service
  - - - minikube service <service-name> -url
- - - - Retry / Failover
      - Intelligent
        
        Loadbalancing
      - Routing
        
        Decision
      - Metrics/Logs/Traces
      - Access Control
      - Encryption
    - - Proxy
        
        Every App
      - Management Interface
    - - Control plane API
        
        Pilot
        
        Config Data
        
        Mixer
        
        Policy Checks
        
        Telemetry
        
        Citadel
        
        TLS Certifs
      - Envoy Proxy
        
        In Pod
      - Retry
        
        VirtualService
    - - By default
      - Defense in depth
      - Zero Trust
        
        Netowk
  - - - Mutual TLS
        
        Each Service
        
        =
        
        Strong identity
        
        Key & Certificate
        
        Management
      - RBAC
        
        X509 Certificates
        
        Conditions
        
        Roles
        
        Binding
        
        Enable
        
        Globally
        
        Namespace
        
        ServiceRole
        
        Services
        
        Methods
    - - End-user
        
        JWT
        
        JSON Web Token
        
        Headers
        
        Payloads
        
        Signature
        
        Server
        
        Private Key
  - - - Visual
        
        Network
- - - - Initialize
        
        Install Tiller
        
        Add
        
        RBAC rules
        
        Serviceaccount
        
        Admin role
    - - Chart
        
        Files Collection
        
        Describing
        
        K8S Resources
        
        Deploy
        
        App
        
        DBA
        
        Template
        
        Dynamic
        
        YAML file
        
        With
        
        Variables
        
        Logic
    - - init
        
        reset
      - install
        
        chart
      - search
        
        charts
      - list
        
        installed
        
        charts
    - - mychart/
        
        Chart.yaml
        
        values.yaml
        
        key:value
        
        templates/
        
        deployment.yaml
        
        service.yaml
  - - - Building
        
        Pushing
        
        Deploying
      - Detect
        
        Source Code
        
        Changes
  - - - Container
        
        Deployment
    - - Version Control
        
        GIT
        
        YAML files
      - K8S Cluster
- - - - Using
        
        CRD
      - Runtime
        
        Python
        
        NodeJS
        
        Ruby
        
        PHP
        
        .NET
        
        1 more item...
      - Trigger
        
        HTTP endpoint
        
        Scheduled
        
        Publish Mechanism
        
        Kafka
        
        NATS
        
        AWS Kinesis
        
        Data available