K8s Objects¶
Kubernetes object types: Nodes, Namespaces, Pods, ReplicaSets, Deployments, DaemonSets, etc. - 2023100413053333 K8s Node - 2023100413055050 K8s Namespace - 2023100413062626 K8s Pod - Replication controller - ReplicationController no longer a recommended controller - 2023100413063232 K8s ReplicaSet - 2023100413063636 K8s Deployment - 2023100413064141 K8s DaemonSet - 2023100413065252 K8s Label - 2023100618413333 K8s Arbitrary strings - 2023100618164444 K8s Operators and controllers
Multi-tenancy objects¶
- 2023100413055050 K8s Namespace
- Kubernetes objects may be created in a namespace or cluster-scoped
- Users can be limited by the object verbs allowed per namespace.
- Two objects cannot have the same Name: value in the same namespace.
- context
- It is a combination of: cluster name, namespace, user
- For examples you can have a development cluster and production cluster. all information located here ~/.kube/config.
- Resource Limits - You can request a minimum amount of resources reserved for pod - You can set resource limit per-pod, per-namespaces. - per-namespaces resource limits have priority over PodSpec resource limits
- Pod Security Policies
- Deprecated
- Pod Security Admission
- beta feature, is used to restrict pod behavior in an easy-to-implement and easy-to-understand manner.
- leverage profiles: Privileged, Baseline, and Restricted policies.
- Network Policies
- Ingress and Egress traffic can be limited according to namespaces and labels
References¶
- LinuxFoundationX LFS158x.1. Chapter 8. Kubernetes Building Blocks
- https://trainingportal.linuxfoundation.org/courses/kubernetes-for-developers-lfd259 Kubernetes Architecture