Kubernetes – An Enterprise Guide - Marc Boorshtein, Scott Surovich

Kubernetes – An Enterprise Guide

Effectively containerize applications, integrate enterprise systems, and scale applications in your enterprise
Buch | Softcover
578 Seiten
2021 | 2nd Revised edition
Packt Publishing Limited (Verlag)
978-1-80323-003-0 (ISBN)
44,85 inkl. MwSt
Master core Kubernetes concepts important to enterprises from security, policy, and management point-of-view. Learn to deploy a service mesh using Istio, build a CI/CD platform, and provide enterprise security to your clusters.

Key Features

Extensively revised edition to cover the latest updates and new releases along with two new chapters to introduce Istio
Get a firm command of Kubernetes from a dual perspective of an admin as well as a developer
Understand advanced topics including load balancing, externalDNS, global load balancing, authentication integration, policy, security, auditing, backup, Istio and CI/CD

Book DescriptionKubernetes has taken the world by storm, becoming the standard infrastructure for DevOps teams to develop, test, and run applications. With significant updates in each chapter, this revised edition will help you acquire the knowledge and tools required to integrate Kubernetes clusters in an enterprise environment.

The book introduces you to Docker and Kubernetes fundamentals, including a review of basic Kubernetes objects. You'll get to grips with containerization and understand its core functionalities such as creating ephemeral multinode clusters using KinD. The book has replaced PodSecurityPolicies (PSP) with OPA/Gatekeeper for PSP-like enforcement. You'll integrate your container into a cloud platform and tools including MetalLB, externalDNS, OpenID connect (OIDC), Open Policy Agent (OPA), Falco, and Velero. After learning to deploy your core cluster, you'll learn how to deploy Istio and how to deploy both monolithic applications and microservices into your service mesh. Finally, you will discover how to deploy an entire GitOps platform to Kubernetes using continuous integration and continuous delivery (CI/CD).

What you will learn

Create a multinode Kubernetes cluster using KinD
Implement Ingress, MetalLB, ExternalDNS, and the new sandbox project, K8GBConfigure a cluster OIDC and impersonation
Deploy a monolithic application in Istio service mesh
Map enterprise authorization to Kubernetes
Secure clusters using OPA and GateKeeper
Enhance auditing using Falco and ECK
Back up your workload for disaster recovery and cluster migration
Deploy to a GitOps platform using Tekton, GitLab, and ArgoCD

Who this book is forThis book is for anyone interested in DevOps, containerization, and going beyond basic Kubernetes cluster deployments. DevOps engineers, developers, and system administrators looking to enhance their IT career paths will also find this book helpful.

Although some prior experience with Docker and Kubernetes is recommended, this book includes a Kubernetes bootcamp that provides a description of Kubernetes objects to help you if you are new to the topic or need a refresher.

Marc Boorshtein has been a software engineer and consultant for 20 years and is currently the CTO (Chief Technology Officer) of Tremolo Security, Inc. Marc has spent most of his career building identity management solutions for large enterprises, U.S. Government civilian agencies, and local government public safety systems. Scott Surovich has been involved in the industry for over 25 years and is currently the Global Container Engineering Lead at a tier 1 bank as the Global on-premises Kubernetes product owner architecting and, delivering cluster standards, including the surrounding ecosystem. His previous roles include working on other global engineering teams, including Windows, Linux, and virtualization.

Table of Contents

Docker and Container Essentials
Deploying Kubernetes using KinD
Kubernetes Bootcamp
Services, Load Balancing, ExternalDNS, and Global Balancing
Integrating Authentication into Your Cluster
RBAC Policies and Auditing
Deploying a Secured Kubernetes Dashboard
Extending Security Using Open Policy Agent
Node Security with Gatekeeper
Auditing Using Falco, DevOps AI, and ECK
Backing Up Workloads
An Introduction to Istio
Building and Deploying Applications on Istio
Provisioning a Platform

Erscheinungsdatum
Verlagsort Birmingham
Sprache englisch
Maße 75 x 93 mm
Themenwelt Mathematik / Informatik Informatik Software Entwicklung
Mathematik / Informatik Informatik Theorie / Studium
ISBN-10 1-80323-003-7 / 1803230037
ISBN-13 978-1-80323-003-0 / 9781803230030
Zustand Neuware
Haben Sie eine Frage zum Produkt?
Mehr entdecken
aus dem Bereich