Security Summary Security Primitives Authentication and service Accounts TLS Basics and in Kubernetes Certificates API KubeConfig API Groups Authorization Role Based Access Controls (RBAC) Cluster Roles and Role Bindings Service Accounts Image Security Security Contexts Network Policy Kubectx and Kubens…
Conception: UML ou et séquence : Gestion de projet : Jir@ Documentation : Confluence Gestion de code : Git pour configurer git, vous pouvez utiliser gitbash ou Cmder, git config –global “username” git config –global “usermail@ent.com git…
L’architecture headless a pour vocation séparer les IHM de devs frontend et le backup. Pour concevoir une architecture Headless il faut respecter les normes de la ANSSI doc :
Storage Summary Storage in Docker Volume Persistent Volume Persistent Volume Claim Access Modes for Volumes Kubernetes Storage Object Configure Applications With Persistent Storage Storage in Docker Create a volume in docker : docker volume create data_volume This command create a…
Cluster Maintenance Summary Os Upgrades Kub Versions and Working with ETCDCTL Backup and Restore Os Upgrades Attribut to know : kube-controller-manager –pod -eviction-timeout=5m0s : when a node is timeouted and returned, all pods are destroyed and the node is clean.…
Application Lifecycle Management Summary Rolling Updates and Rollbacks in Deployments Configure Applications Scale Applications Self-Healing Application Rolling Updates and Rollbacks in Deployments Deployment strategy: there is two strategies Recreate : delete all pods and create new pods ==> unavailability of…
Logging and Monitoring Summary Monitor Cluster Component Managing Application Logs Monitor Cluster Component There is a lot of open source plugin metrics like datadog, dynatrace or prometheuse… to get metrics like number of pods, cpu, ram… Heapster is deprecated and…
Scheduling Summary Labels and selectors Resource limits Manual Scheduling Taints and toleration Node Affinity and selectors DaemonSets Static Pods Multiple Schedulers Scheduler Events Confuguration of Kubernetes scheduler Labels and selectors Labels and selectors help us to tag and select a…
Architecture There is many architecture to install a K8S cluster. according to the aim or costs, you can chose the adequat design. K8S architecture bellow: most interfaces used in kub: CRI as Container Runtime Interface, CNI as Containes Network Interface,…