Kubernetes is an open source container cluster manager that provides workload abstractions like pods, deployments, and services. It supports multiple virtual clusters on the same physical cluster through namespaces. Key resources include secrets for storing sensitive information like TLS certificates, persistent volumes for storage, and private registries. Kubernetes can be installed on-premises or in the cloud using tools like Kops on AWS or kubeadm for laptop development.

1. Kubernetes In 2 Hours
PhuLeTV - DevOps Lead

2. Agenda
• What is K8s
• Pod – Deployment – Statfulset – Service
• Namespace
• Secret TLS
• Storage
• Private Registry
• How to install and sample

3. What is Kubernetes
Oh no …
Today is deployment
day, again!
• K8s is an abbreviation
• Open source container cluster manager
• Cloud ready

4. What is Kubernetes
Oh no …
Today is deployment
day, again!

5. Workload
Today is deployment
day, again!
Pod = the smallest and simplest unit in the Kubernetes object model
Deployment = keep a set of pods
Service = is a REST object, is a simple Endpoints API that is updated
whenever the set of Pods in a Service changes.
StatefulSet = keep a set of pods, maintains a sticky identity for each of
their Pods.

6. Workload
K8s Cluster
Node
Pod
Node
Pod
Service
http://172.31.0.2:81
Deployment.
yaml
browser
kubectl
StatfulSet.yaml

7. Service vs StatefulSet
Today is deployment
day, again!

8. Namespace
Oh no …
• Kubernetes supports multiple virtual clusters backed by the same physical
cluster.
• Namespaces are intended for use in environments with many users
spread across multiple teams, or projects.
• Namespaces provide a scope for names.
• Names of resources need to be unique within a namespace, but not
across namespaces.

9. Secret TLS
Oh no …
Today is deployment
day, again!
apiVersion: v1
data:
ca.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0
ca.key: LS0tLS1CRUdJTiBQUklWQVRFIE
kind: Secret
metadata:
creationTimestamp: 2018-09-08T14:46:33Z
name: printtext-tls
namespace: default
resourceVersion: "2492112"
selfLink: /api/v1/namespaces/default/secrets/printtext-tls
uid: fae77b5e-b375-11e8-9810-02efd033106c
type: Opaque

10. Secret TLS
Oh no …
Today is deployment
day, again!
Or:
kubectl create secret generic printtext-
tls
--from-file=ca.crt --from-file=ca.key

11. Secret TLS
Oh no …
Today is deployment
day, again!
Use secret as environment variable:
apiVersion: v1
kind: Pod
metadata:
name: secret-env-pod
spec:
containers:
- name: mycontainer
image: redis
env:
- name: SECRET_USERNAME
valueFrom:
secretKeyRef:
name: mysecret
key: username
- name: SECRET_PASSWORD
valueFrom:
secretKeyRef:
name: mysecret
key: password
restartPolicy: Never

12. Storage
Persistent Volume
Label A
Physical
Storage
- NFS
- AWS
EBS
Pod
Volumes:
- PVC
name
StorageClass
Persistent Volume
Claim:
Pod
Volumes:
- PVC
name
Persistent Volume
Label B
Users
Admins
selector
storageClass
Name

13. Private Registry
Oh no …
Today is deployment
day, again!

14. How To Install and Sample
Oh no …
Today is deployment
day, again!
ON AWS:
• Using Kops
ON Laptop:
1. Use “kubeadm”
2. Why not minikube ?
3. At least 4GB RAM in your virtual machine.

15. THANK YOU
www.nashtechglobal.com