Kubernetes for Developers

This is my personal quick guide to study for the CKAD. It contain my notes from the training Kubernetes for Developers from CNFN/Linux Foundation, other pages or guides to study for CKAD and the book Kubernetes Cookbook.

Chapters

1. Chapter 1: Introduction
2. Chapter 2: Kubernetes Architecture
3. Chapter 3: Build
4. Chapter 4: Design
5. Chapter 5: Deployment Configuration
6. Chapter 6: Security
7. Chapter 7: Exposing Applications
8. Chapter 8: Troubleshooting

For each chapter there is a README with the notes from the training and other pages, the PDF files for the Labs for each chapter, a solution.sh script with the solutions to the Labs from the training and, for some chapters, some aditional files used for the Labs.

General Tips

Setup

For the test use Google Chrome and install the PSI Chrome Extension

alias k=kubectl
alias kg='kubectl get'
alias kc='kubectl create'
alias kd='kubectl delete'

# Optional:
source <(kubectl completion bash)
export KUBE_EDITOR=nano # or vi, or vim

According to some comments, the autocompletion is set by default. Set/use the editor you feel conformatble with

Nano Cheat Sheet

Vi Cheat Sheet

API Resources

kubectl api-resources

API Resources Shortname

NAME	SHORTNAMES
configmaps	cm
endpoints	ep
events	ev
namespaces	ns
nodes	no
persistentvolumeclaims	pvc
persistentvolumes	pv
pods	po
replicationcontrollers	rc
serviceaccounts	sa
services	svc
daemonsets	ds
deployments	deploy
replicasets	rs
cronjobs	cj
networkpolicies	netpol
podsecuritypolicies	psp

kubectl explain

kubectl explain deployment
kubectl explain deployment --recursive
kubectl explain deployment.spec.strategy

Cluster information

kubectl cluster-info
kubectl get nodes
kubectl get all --all-namespaces

Set Context & Namespace

kubectl config current-context
kubectl config get-contexts

kubectl config use-context <namespace-name>
kubectl config current-context

Set Namespace

kubectl config set-context --current --namespace=<namespace-name>

kubectl config set-context --current --namespace=default

Check configuration

kubectl config view --minify
kubectl config view --minify | grep namespace

Generators

Append -o yaml --export to getting an existing resource:

kubectl get po nginx -o yaml --export

Or append to kubectl run NAME --image=IMAGE the parameters --dry-run -o yaml and one of the followings to create a Pod, Deployment, Deployment + Replica Set + Service, Job or Cron Job:

Pod

Append --restart=Never

kubectl run nginx --image=nginx --dry-run -o yaml --restart=Never

Deployment

Append --restart=Always or don't use it, as it's the default value.

kubectl run nginx --image=nginx --dry-run -o yaml

Deployment + Replica Set + Service

To have a Replica Set append --replicas=N, to have a Service append --port=PORT --expose.

kubectl run nginx --image=nginx --dry-run -o yaml --restart=Always --port=80 --expose --replicas=5

Remember --restart=Always is optional as it's the default value.

Job

Append --restart=OnFailure --command -- COMMAND.

kubectl run sleepy --image=busybox --dry-run -o yaml --restart=OnFailure --command -- /bin/sleep 3

Cron Job

Append --restart=OnFailure --schedule="SCHEDULE" --command -- COMMAND.

kubectl run sleepy --image=busybox --dry-run -o yaml --restart=OnFailure --schedule="*/2 * * * *" --command -- /bin/sleep 3

Service Generator

kubectl create service nodeport mysvc --tcp=80 --node-port=8080 --dry-run -o yaml 

The 3rd parameter (i.e. nodeport) is the service type, the options are: clusterip, externalname, loadbalancer & nodeport.

The port can be a duplet like --tcp=5678:8080 where ports are port:targetPort. The --node-port is optional and only for nodeport type.

kubectl cheatsheet

Go to kubernetes.io -> Reference -> kubectl CLI -> kubectl Cheat Sheet

kubectl commands reference

Go to kubernetes.io -> Reference -> kubectl CLI -> kubectl Commands -> kubectl Command Reference

kubectl run to generate resources

Go to kubernetes.io -> Reference -> kubectl CLI -> kubectl Usage Conventions -> Scroll down to Best Practices -> Generators

Shell into a container

Go to kubernetes.io -> Tasks -> Monitoring, Logging, and Debugging -> Get a Shell to a Running Container

kubectl exec -it shell-demo -- /bin/bash
kubectl exec shell-demo env
kubectl run busybox --image=busybox -it --rm -- env

Using port forwarding

Go to kubernetes.io -> Tasks -> Access Applications in a Cluster -> Use Port Forwarding to Access Applications in a Cluster

Create pod

kubectl create namespace myns
kubectl run nginx --image=nginx --restart=Never -n myns

To allow traffic in a port, append: --port=80

kubectl create namespace myns
kubectl run nginx --image=nginx --restart=Never --port=80 -n myns

To create the pod and service, append the flag --expose but the service will be of type ClusterIP.

kubectl create namespace myns
kubectl run nginx --image=nginx --restart=Never --port=80 --expose -n myns

To check the pod, get the pod IP and use a temporal pod to access the pod service:

kubectl get pod -o wide # get the IP
kubectl run busybox --image=busybox -it --rm --restart=Never -- wget -O- $IP:80

Change pod image

kubectl set image pod/nginx nginx=nginx:1.8
kubectl describe po nginx

kubectl get pods -w
# Or
watch -n 5 kubectl get pods

Get pod information

kubectl describe pod nginx
kubectl logs nginx

# From previous instance, when the pod crashed
kubectl logs nginx -p

Create a Service

To create the pod and the service check the command above, however this will create a ClusterIP service.

To create a service for an existing Pod or Deployment use kubectl expose:

kubectl expose pod nginx --type=NodePort --port=80
# Or
kubectl expose deployment ngonx --type=NodePort --port=80

Or use kubectl create service but the pod/deployment need to have the label app: NAME. If the pod was created with kubectl run it has the label run: NAME, so make sure to change the label or create it with the flag --label='app=NAME' , or edit the service to change the selector.

kubectl run nginx --image=nginx --restart=Never --labels='app=nginx' --port=80
kubectl create service nodeport nginx --tcp=80 --node-port=31000
curl http://localhost:31000
# Or from a node
clusterIP=$(kubectl get svc nginx -o jsonpath='{$.spec.clusterIP}')
curl http://${clusterIP}:31000

Linux Foundation Resources

List of resources from Linux Foundation (current version)

CKAD Candidate Handbook | here

CKAD Exam Tips | here

CKAD FAQ | here

Sources

• Kubernetes for Developers Labs: https://lms.quickstart.com/custom/862120/LFD259-labs_V2019-08-19.pdf
• Kubernetes for Developers Solution: https://training.linuxfoundation.org/cm/LFD259/LFD259_V2019-08-19_SOLUTIONS.tar.bz2
• dgkanatsios/CKAD-exercises: https://github.com/dgkanatsios/CKAD-exercises
• Training CKAD with test from Udemy
• Tips to prepare for CKAD: https://youtu.be/rnemKrveZks