Kubernetes – Scriptorium

[Kubernetes] Volumes

Volumes provide storage spaces for containers.

[Kubernetes] Helm

“Helm” is a package management tool for applications that run in the Kubernetes cluster.

https://helm.sh/docs/intro/using_helm/

[Kubernetes] Pod Lifecycle and Probes

Pods follow a defined lifecycle, starting in the Pending phase, moving through Running phase, and then through either the Succeeded or Failed phases.

Pod Lifecycle | Kubernetes

[Kubernetes] Scheduling

In Kubernetes, scheduling means how to make a placement decision. A Kubernetes scheduler watches a newly created pod and finds the best node of that pod.

[Kubernetes] Resources

You can configure how the Kubernetes cluster makes use of resources (such as CPU an Memory) for each pods.

[Kubernetes] Service Accounts

You can use specialized ServiceAccounts with restricted permissions to allow containers to access the Kubernetes API.

Every namespace has a default service account.
Each service account has a matching secret object, which has a token.
When a pod is created, a service account token is mounted automatically.
- The pod is accessing Kubernetes APIs using the mounted service account token.

[Kubernetes] SecurityContext

Kubernetes organizes and launches container processes. You can configure which user or group will launch the process in a docker level or in a Kubernetes level.

[Kubernetes] Commands

When you run a container in a pod, you might want to run a command at the start-up. The process consists of 2 stages – at the container (docker) level and at the Kubernetes level.