IT hands-on

Kubernetes manages a cluster which contains nodes . Below is a simple diagram that summarizes its role: The nodes host pods , which run containers . Kuberne

Istio  allows all traffic going out of the service mesh.  All traffic goes through the  envoy proxy  - <i> default service proxy for istio </i> -. We could stop tra

In order to help  istio  handle network problems, we could use for example the  automatic retries . Within the  automatic reply  parameter, we could also set

Injection of  sidecar  in a  kubernetes  application, means that  istio  is going to modify the deployment's  Yaml  file of our  pods  to include a  side car

The below diagram represents the scaling down of a  statefulset  named  db1 : Before scaling down our  statefulset , we check the pods and we see that there

Kubernetes provides us with a security mechanism that makes it possible for us to limit what the programs running inside containers could do. A securit

After the client application has been authenticated and allowed to carry out its task within the kubernetes cluster, the admission controller steps in

We can combine different  ClusterRoles through the use of labels . The ClusterRole " pods " allows us to list pods , the ClusterRole " services

We can specify the minimum and maximum CPU and memory consumption for pods in the  LimitRange kubernetes object. The variable " spec.limits[].min &qu

The API server is the beating heart of the kubernetes cluster. It  manages - <i> list, delete, update, ...</i> - the kubernetes API resources - <i> pods, deployment

To keep the pods that don't have a resource limits/requests defined from consuming all the resources, we can specify default resource limits/reque

Kubernetes has two objects that allow us to have access to it from the outside.<i> Services :</i> like a loadBalancer or a layer " 4 " TCP/UDP nodePort

Instead of modifying the image of a container , we could add logging or database functionalities to it for example by running a sidecar container along

We start by creating a directory on the master node that will hold our keys and we " cd " into it. We create a private key for Albert : We then c

Kubernetes uses a service account to authenticate services and applications process with the API server . The service account can be assigned to a pod f