A free, self-paced textbook in 7 chapters. Read a chapter, then drill it with the 169 companion flashcards using spaced repetition.
Kubernetes workloads are built from a small set of composable building blocks. The foundational unit is the Pod, which represents a single instance of a running process and may con...
Pods come and go with their changing IP addresses, so Kubernetes abstracts them behind Services, which define a logical set of Pods and a stable access policy. A Service uses label...
Applications need configuration and data, and Kubernetes offers dedicated primitives for both. ConfigMaps store non-confidential key-value pairs that Pods consume as environment va...
Kubernetes offers fine-grained control over where Pods run and how many resources they consume. The scheduler selects an optimal node for each new Pod based on resource requests, a...
A Kubernetes cluster is divided into a control plane that makes global decisions and worker nodes that actually run workloads. The control plane runs the kube-apiserver as its fron...
Kubernetes security spans authentication, authorization, admission control, runtime hardening, and network segmentation. Authorization is governed by Role-Based Access Control thro...
The kubectl command-line tool is the primary interface to the Kubernetes API, and a working knowledge of its verbs and flags is essential. kubectl get lists resources, with flags l...