What do you think?
Rate this book
Kubernetes – An Enterprise Guide: Effectively containerize applications, integrate enterprise systems, and scale applications in your enterprise
Master core Kubernetes concepts important to enterprises from security, policy, and management point-of-view. Learn to deploy a service mesh using Istio, build a CI/CD platform, and provide enterprise security to your clusters.
Key FeaturesExtensively revised edition to cover the latest updates and new releases along with two new chapters to introduce IstioGet a firm command of Kubernetes from a dual perspective of an admin as well as a developerUnderstand advanced topics including load balancing, externalDNS, global load balancing, authentication integration, policy, security, auditing, backup, Istio and CI/CDBook DescriptionKubernetes has taken the world by storm, becoming the standard infrastructure for DevOps teams to develop, test, and run applications. With significant updates in each chapter, this revised edition will help you acquire the knowledge and tools required to integrate Kubernetes clusters in an enterprise environment.
The book introduces you to Docker and Kubernetes fundamentals, including a review of basic Kubernetes objects. You'll get to grips with containerization and understand its core functionalities such as creating ephemeral multinode clusters using KinD. The book has replaced PodSecurityPolicies (PSP) with OPA/Gatekeeper for PSP-like enforcement. You'll integrate your container into a cloud platform and tools including MetalLB, externalDNS, OpenID connect (OIDC), Open Policy Agent (OPA), Falco, and Velero. After learning to deploy your core cluster, you'll learn how to deploy Istio and how to deploy both monolithic applications and microservices into your service mesh. Finally, you will discover how to deploy an entire GitOps platform to Kubernetes using continuous integration and continuous delivery (CI/CD).
What you will learnCreate a multinode Kubernetes cluster using KinDImplement Ingress, MetalLB, ExternalDNS, and the new sandbox project, K8GBConfigure a cluster OIDC and impersonationDeploy a monolithic application in Istio service meshMap enterprise authorization to KubernetesSecure clusters using OPA and GateKeeperEnhance auditing using Falco and ECKBack up your workload for disaster recovery and cluster migrationDeploy to a GitOps platform using Tekton, GitLab, and ArgoCDWho this book is forThis book is for anyone interested in DevOps, containerization, and going beyond basic Kubernetes cluster deployments. DevOps engineers, developers, and system administrators looking to enhance their IT career paths will also find this book helpful.
Although some prior experience with Docker and Kubernetes is recommended, this book includes a Kubernetes bootcamp that provides a description of Kubernetes objects to help you if you are new to the topic or need a refresher.
Table of ContentsDocker and Container EssentialsDeploying Kubernetes using KinDKubernetes BootcampServices, Load Balancing, ExternalDNS, and Global BalancingIntegrating Authentication into Your ClusterRBAC Policies and AuditingDeploying a Secured Kubernetes DashboardExtending Security Using Open Policy AgentNode Security with GatekeeperAuditing Using Falco, DevOps AI, and ECKBacking Up WorkloadsAn Introduction to IstioBuilding and Deploying Applications on Istio
Key FeaturesExtensively revised edition to cover the latest updates and new releases along with two new chapters to introduce IstioGet a firm command of Kubernetes from a dual perspective of an admin as well as a developerUnderstand advanced topics including load balancing, externalDNS, global load balancing, authentication integration, policy, security, auditing, backup, Istio and CI/CDBook DescriptionKubernetes has taken the world by storm, becoming the standard infrastructure for DevOps teams to develop, test, and run applications. With significant updates in each chapter, this revised edition will help you acquire the knowledge and tools required to integrate Kubernetes clusters in an enterprise environment.
The book introduces you to Docker and Kubernetes fundamentals, including a review of basic Kubernetes objects. You'll get to grips with containerization and understand its core functionalities such as creating ephemeral multinode clusters using KinD. The book has replaced PodSecurityPolicies (PSP) with OPA/Gatekeeper for PSP-like enforcement. You'll integrate your container into a cloud platform and tools including MetalLB, externalDNS, OpenID connect (OIDC), Open Policy Agent (OPA), Falco, and Velero. After learning to deploy your core cluster, you'll learn how to deploy Istio and how to deploy both monolithic applications and microservices into your service mesh. Finally, you will discover how to deploy an entire GitOps platform to Kubernetes using continuous integration and continuous delivery (CI/CD).
What you will learnCreate a multinode Kubernetes cluster using KinDImplement Ingress, MetalLB, ExternalDNS, and the new sandbox project, K8GBConfigure a cluster OIDC and impersonationDeploy a monolithic application in Istio service meshMap enterprise authorization to KubernetesSecure clusters using OPA and GateKeeperEnhance auditing using Falco and ECKBack up your workload for disaster recovery and cluster migrationDeploy to a GitOps platform using Tekton, GitLab, and ArgoCDWho this book is forThis book is for anyone interested in DevOps, containerization, and going beyond basic Kubernetes cluster deployments. DevOps engineers, developers, and system administrators looking to enhance their IT career paths will also find this book helpful.
Although some prior experience with Docker and Kubernetes is recommended, this book includes a Kubernetes bootcamp that provides a description of Kubernetes objects to help you if you are new to the topic or need a refresher.
Table of ContentsDocker and Container EssentialsDeploying Kubernetes using KinDKubernetes BootcampServices, Load Balancing, ExternalDNS, and Global BalancingIntegrating Authentication into Your ClusterRBAC Policies and AuditingDeploying a Secured Kubernetes DashboardExtending Security Using Open Policy AgentNode Security with GatekeeperAuditing Using Falco, DevOps AI, and ECKBacking Up WorkloadsAn Introduction to IstioBuilding and Deploying Applications on Istio
- GenresTechnology
578 pages, Kindle Edition
Published December 22, 2021
5 people are currently reading
27 people want to read
Ratings & Reviews
Friends & Following
Create a free account to discover what your friends think of this book!
Community Reviews
Displaying 1 of 1 review
October 14, 2022
I really liked how this book explains so much things involved with running proper Kubernetes environments and not just how to run a specific type of application by utilizing specific in-built Kubernetes components like deployments, services and so on.
The book touches on a lot of important topics related to running Kubernetes in enterprise environments and will certainly be an eye opener for people who never worked with a proper production Kubernetes environment.
Each of the topics is presented in a way that shows an overview and goes in depth on how to actually use example open-source tooling to find solutions to enterprise challenges and gives you practice on setting up this tooling with basic configurations. This is a brilliant way to approach the topic which makes you aware of how to approach different challenges, what tools to use to solve them and how to start using those tools.
Having said that, there are some nitpicks that make the reading/learning experience somewhat downgraded:
- some of the lab exercises provided in the book will not work properly, because the authors are using a specific version of tool X and the latest version of tool Y and the latest version of tool Y doesn't support that older version of tool X (this was apparent at least with Istio + Kiali and Kubernetes + Tekton),
- it would be nice if there were some suggestions of other tools that could solve the same problem, the book is opinionated towards using specific software (which is especially apparent with the product OpenUnison which is made by the company the author works in) - which you cannot really avoid when dealing with the extensive cloud native tooling landscape,
- only some of the quizzes at the end of chapters contain answers.
The authors also provided the book labs in form of videos, which is helpful in case you fail to get it working yourself, but these do not reflect all of the chapters.
The book touches on a lot of important topics related to running Kubernetes in enterprise environments and will certainly be an eye opener for people who never worked with a proper production Kubernetes environment.
Each of the topics is presented in a way that shows an overview and goes in depth on how to actually use example open-source tooling to find solutions to enterprise challenges and gives you practice on setting up this tooling with basic configurations. This is a brilliant way to approach the topic which makes you aware of how to approach different challenges, what tools to use to solve them and how to start using those tools.
Having said that, there are some nitpicks that make the reading/learning experience somewhat downgraded:
- some of the lab exercises provided in the book will not work properly, because the authors are using a specific version of tool X and the latest version of tool Y and the latest version of tool Y doesn't support that older version of tool X (this was apparent at least with Istio + Kiali and Kubernetes + Tekton),
- it would be nice if there were some suggestions of other tools that could solve the same problem, the book is opinionated towards using specific software (which is especially apparent with the product OpenUnison which is made by the company the author works in) - which you cannot really avoid when dealing with the extensive cloud native tooling landscape,
- only some of the quizzes at the end of chapters contain answers.
The authors also provided the book labs in form of videos, which is helpful in case you fail to get it working yourself, but these do not reflect all of the chapters.
Displaying 1 of 1 review