Kubernets Flashcards
Definitions and terms that make up the Kubernet cluster architecture
What is Kubernetes?
A container orchestration platform for automating deployment, scaling, and operations of application containers across clusters of hosts.
What are Pods in Kubernetes?
The smallest deployable unit in Kubernetes, consisting of one or more containers that share network and storage.
What is a distributed key-value store?
A highly available and consistent database that stores configuration data, metadata, and state for distributed systems.
What is the Control Plane in Kubernetes?
The set of components that manage the Kubernetes cluster, including scheduling, controllers, and API access.
What is Kube-apiserver?
The front-end component of the Kubernetes control plane that exposes the Kubernetes API and processes REST requests.
What is etcd?
A distributed key-value store used by Kubernetes to store cluster state and configuration data reliably.
What does kube-scheduler do?
A control plane component that assigns newly created pods to available nodes based on resource requirements and constraints.
What is kube-controller-manager?
A component that runs controller processes to regulate the cluster state, such as managing nodes, endpoints, and replication.
What is cloud-controller-manager?
A Kubernetes component that integrates with cloud provider APIs to manage cloud-specific resources such as load balancers and storage.
What are Kubernetes nodes?
The worker machines in a Kubernetes cluster that run containerized applications and are managed by the control plane.
What is Kubelet?
A node agent that ensures containers in a pod are running and communicates with the Kubernetes control plane.
What does kube-proxy do?
network component that maintains the network rules for service discovery and routing in nodes
What is a container runtime?
Software responsible for running containers, such as Docker, containerd, or CRI-O, within Kubernetes nodes.
What are the features of Kubernetes?
Self-healing, Secret and configuration management, load balancing, automatic rollback and rollout, automatic bin packaging, storage orchestration.
FCCJSC — Kubernets Best Practices
- F – File validation: Ensure input files are verified before processing
- C – Credential path configuration: Secure and correctly configure paths to credentials
- C – Compound error handling: Gracefully manage multiple errors without leaking sensitive data
- J – JSON construction best practices: Sanitize and validate JSON structures before use
- S – Shell command validation: Avoid injection by validating and sanitizing shell input
- C – Code readability through consistent parsing: Use clear and consistent parsing logic to prevent misinterpretation
PM-TOSS- Serverless Security
- P – Permissions: Minimize them
- M – Monitor function layers
- T – Third-party security tools
- U – Update dependencies
- S – Snyk and other scanning tools
- S – Sanitize event inputs
