Kubernetes - An Enterprise Guide - Third Edition: Master containerized application deployments, integrate enterprise systems, and achieve scalability

Enhance your Kubernetes skills with Istio integration, security best practices, advanced CI/CD techniques, and effective monitoring using Prometheus and Grafana. Gain expertise in multitenancy, secrets management, and global load balancing to optimize deployments, improve security, and streamline operations in enterprise environments.

Key Features

• Practical insights on running Kubernetes in enterprise environments, backed by real-world experience
• Strategies for securing clusters with runtime security, direct pod mounting, and Vault integration for secrets management
• A dual-perspective approach that covers Kubernetes administration and development for a complete understanding

Book Description

Kubernetes – An Enterprise Guide, Third Edition, provides a practical and up-to-date resource for navigating modern cloud-native technologies. This edition covers advanced Kubernetes deployments, security best practices, and key strategies for managing enterprise workloads efficiently.

The book explores critical topics such as virtual clusters, container security, and secrets management, offering actionable insights for running Kubernetes in production environments. Learn how to transition to microservices with Istio, implement GitOps and CI/CD for streamlined deployments, and enhance security using OPA/Gatekeeper and KubeArmor.

Designed for professionals, this guide equips you with the knowledge to integrate Kubernetes with industry-leading tools and optimize business-critical applications. Stay ahead in the evolving cloud landscape with strategies that drive efficiency, security, and scalability.

What you will learn

• Manage secrets securely using Vault and External Secret Operator
• Create multitenant clusters with vCluster for isolated environments
• Monitor Kubernetes clusters with Prometheus and visualize metrics using Grafana
• Aggregate and analyze logs centrally with OpenSearch for deeper insights
• Build a CI/CD developer platform by integrating GitLab and ArgoCD
• Deploy applications in an Istio service mesh and enforce security with OPA and GateKeeper
• Secure container runtimes and prevent attacks using KubeArmor

Who this book is for

This book is designed for DevOps engineers, developers, and system administrators looking to deepen their knowledge of Kubernetes for enterprise environments. It is ideal for professionals who want to enhance their skills in containerization, automation, and cloud-native deployments. While prior experience with Docker and Kubernetes is helpful, beginners can get up to speed with the included Kubernetes bootcamp, which provides foundational concepts and a refresher for those needing it.

Table of Contents

1. Docker and Container Essentials
2. Deploying Kubernetes Using KinD
3. Kubernetes Bootcamp
4. Services, Load Balancing, and Network Policies
5. External DNS and Global Load Balancing
6. Integrating Authentication into Your Cluster
7. RBAC Policies and Auditing
8. Managing Secrets
9. Building Multitenant Clusters with vClusters
10. Deploying a Secured Kubernetes Dashboard
11. Extending Security Using Open Policy Agent
12. Node Security with Gatekeeper
13. KubeArmor Securing Your Runtime
14. Backing Up Workloads
15. Monitoring Clusters and Workloads
16. An Introduction to Istio
17. Building and Deploying Applications on Istio
18. Provisioning a Multitenant Platform
19. Building a Developer Portal

Marc Boorshtein has been a software engineer and consultant for 20 years and is currently the CTO (Chief Technology Officer) of Tremolo Security, Inc. Marc has spent most of his career building identity management solutions for large enterprises, U.S. Government civilian agencies, and local government public safety systems.

Scott Surovich has been involved in the industry for over 25 years and is currently the Global Container Engineering Lead at a tier 1 bank as the Global on-premises Kubernetes product owner architecting and, delivering cluster standards, including the surrounding ecosystem. His previous roles include working on other global engineering teams, including Windows, Linux, and virtualization.