1.
Getting Started with
Kubernetes
Tiffany Jernigan
Senior Developer Advocate
VMware
tiffanyfayj

2.
T I F F A N Y F A Y J
DOCKER
People started containerizing applications

3.
T I F F A N Y F A Y J
Containers made it easy to build and scale
cloud-native applications

4.
T I F F A N Y F A Y J
People needed an easier way to manage
large clusters with many containers

5.
T I F F A N Y F A Y J
T I F F A N Y F A Y J

6.
T I F F A N Y F A Y J
Open source container
management platform
Helps you run
containers at scale
Gives you primitives
for building
modern applications
WHAT IS KUBERNETES?

7.
T I F F A N Y F A Y J
A SINGLE EXTENSIBLE API
SCALE PERFORMANCE BREADTH

8.
T I F F A N Y F A Y J

9.
T I F F A N Y F A Y J
ON-PREMISES CLOUD
KUBERNETES CAN BE RUN ANYWHERE

10.
CONCEPTS
T I F F A N Y F A Y J

11.
T I F F A N Y F A Y J
NODES
• When you deploy Kubernetes, you get a cluster. These
clusters consist of nodes.
• Virtual or physical machines

12.
T I F F A N Y F A Y J
OBJECTS

13.
T I F F A N Y F A Y J
OBJECTS
Pods
• Basic execution unit of a Kubernetes application
• Will not reschedule on failure
Deployment
• Allows scaling, rolling updates, rollbacks
• Delegates pod management to ReplicaSets
ReplicaSet
• Maintains a stable set of replica Pods running at any
given time

14.
T I F F A N Y F A Y J
OBJECTS
StatefulSet
• Used to manage stateful applications
• Manages deployment
DaemonSet
• Creates an instance of a pod on each worker node
Job
• Runs pod(s) until completion
CronJob
• Creates Jobs on a repeating schedule

15.
T I F F A N Y F A Y J
CLUSTER COMPONENTS

16.
T I F F A N Y F A Y J
NODES
API server
controller
manager
scheduler
etcd
cloud controller
manager
kubelet
kube-proxy
container
runtime
control plane worker

17.
T I F F A N Y F A Y J
CONTROL PLANE
API server
controller
manager
scheduler
etcd
cloud controller
manager

18.
T I F F A N Y F A Y J
WORKER NODES
kubelet
kube-proxy
container runtime

19.
T I F F A N Y F A Y J
SERVICES

20.
T I F F A N Y F A Y J
SERVICES
• Services give us a stable endpoint to connect to a pod or a
group of pods
• Maps a fixed IP address to a logical group of pods
• Different types:
• ClusterIP, NodePort, LoadBalancer, ExternalName
• There are more kinds and flavors of services, but we won’t
get into those today

21.
T I F F A N Y F A Y J
NETWORKING

22.
T I F F A N Y F A Y J
KUBERNETES NETWORK MODEL
• TL;DR: our cluster (nodes and pods) is one big flat IP network
• In detail:
⁃ all nodes must be able to reach each other, without NAT
⁃ all pods must be able to reach each other, without NAT
⁃ pods and nodes must be able to reach each other,
without NAT
⁃ each pod is aware of its IP address (no NAT)
• Kubernetes doesn't mandate any other particular
implementation

23.
T I F F A N Y F A Y J
CONTAINER NETWORK INTERFACE (CNI)
• Has a well-defined specification for network plugins
https://github.com/containernetworking/cni/blob/master/SP
EC.md#network-configuration
• When a pod is created, Kubernetes delegates the network
setup to CNI plugins (it can be a single plugin, or a
combination of plugins, each doing one task)

24.
T I F F A N Y F A Y J
SECURITY

25.
T I F F A N Y F A Y J
SECURITY
• Namespaces
• Service accounts
• Role-based access control (RBAC)
• Secrets
• And there’s a lot more
• https://kubernetes.io/docs/reference/access-authn-authz/

26.
T I F F A N Y F A Y J
COMMUNICATION WITH K8S API
• kubectl
• CLI tool used to interface with the Kubernetes API
• ~/.kube/config
• Kubeconfig file is used for securely accessing your
cluster

27.
DEMO
T I F F A N Y F A Y J

28.
T I F F A N Y F A Y J
SOME OTHER THINGS TO LOOK INTO
• ConfigMaps
• Volumes
• Autoscaling

29.
T I F F A N Y F A Y J
A FEW TOOLS TO MANAGE STACKS
• Shell scripts invoking kubectl
• YAML resource manifests committed to a repo
• Carvel carvel.dev
• Kustomize (YAML manifests + patches applied on top)
https://github.com/kubernetes-sigs/kustomize
• Helm (YAML manifests + templating engine)
https://github.com/kubernetes/helm

30.
T I F F A N Y F A Y J
LINKS AND RESOURCES
• https://kubernetes.io/
• https://tanzu.vmware.com/
• https://container.training/ - @jpetazzo’s awesome workshops
• https://kubernetes.io/community/ - Slack, Google Groups,
meetups
• Free Training:
• https://kube.academy/
• https://kubernetes.io/docs/tutorials/
• https://labs.play-with-k8s.com/

31.
tiffanyfayj
Special thanks to:
Jérôme Petazzoni
@jpetazzo
THANK YOU!