Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

KCNA > Kubernetes Fundamentals > Flashcards

Kubernetes Fundamentals Flashcards

1
Q

Name Kubernetes control-plane services

A

etcd
kube-scheduler
kube-api-server
kube-controller-manager
cloud-controller-manager(optional)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Role of the Kubernetes control-plane?

A

Brains of kubernetes. Manages cluster and control critical functions like deployment, scheduling, self-healing, scaling.
Administrative traffic
Configuration
System control
Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What’s inside every worker node?

A

kubelet
kube-proxy
container runtime

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What kubelet is responsible for?

A

It talks to kube-api-server and container-runtime to handle the final stage of starting containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What kube-proxy is responsible for?

A

Handles inside and outside communication of your cluster. It tries to rely on os networking capabilities to do so.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What container runtime is responsible for?

A

Responsible for running containers on worker nodes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What’s the most popular container runtime?

A

containerd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Deprecated container runtime, since when?

A

Docker, since 1.24

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What happens to worker nodes when control plane is not available?

A

Apps on worker nodes will keep running but scaling, scheduling new apps and some other functionality will be missing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Is kubernetes namespace suitable for strong isolation?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How to divide cluster into multiple virtual clusters?

A

with namespaces

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

A database that holds state of the cluster?

A

etcd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Is etcd an official part of Kubernetes?

A

No, it is an independent project

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Centerpiece of kubernetes. All components interact with it.

A

kube-api-server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

User access kubernetes cluster through it

A

kube-api-server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Chooses a worker that can fit a new workload based on CPU etc.

A

kube-scheduler

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Contain control loops that manage the state of the cluster

A

kube-controller-manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Optional control plane service that allows to interact with cloud providers API

A

cloud-controller-manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Server nodes types

A

Control plane node(s)
Worker nodes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Cloud providers with kubernetes

A

Amazon (EKS)
Google (GKE)
Microsoft (AKS)
DigitalOcean (DOKS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Kubernetes distributions

A

OpenShift
Rancher
k3s
VMWare Tanzu

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

cluster installers(production grade)

A

kubeadm
kops
kubespray

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

test “clusters”

A

minikube
kind
microk8s

24
Q

Communicating with cluster is impossible without it

A

kube-api-server

25
Q

kube-api is implemented as a ___ interface that is exposed over ___

A

RESTful, HTTPS

26
Q

Three stages request has to go through before processing

A

Authentication
Authorization
Admission Control

27
Q

How kubernetes users are managed

A

always externally

28
Q

Admission controller can’t block it

A

requests to read objects

29
Q

An ___ is a piece of code that intercepts requests to the Kubernetes API server prior to persistence of the object, but after the request is authenticated and authorized.

A

admission controller

30
Q

admission controller can be

A

validating
mutating
or both

31
Q

Common ways of authentication in kubernetes

A

digital signed certificate X.509
external identity management system
service account for technical users

32
Q

During this stage It is decided what the requester is allowed to do

A

Authorization

33
Q

One of available Authorization methods in kubernetes

A

Role-based access control (RBAC)

34
Q

kubernetes wrapper around container

A

Pod

35
Q

Smallest compute unit in kubernetes

A

Pod

36
Q

a plugin interface which enables kubelet to use a wide variety of container runtimes, without the need to recompile

A

Container Runtime Interface(CRI)

37
Q

lightweight and performant implementation to run containers. Arguably the most popular container runtime right now. It is used by all major cloud providers for the Kubernetes As A Service products.

A

containerd

38
Q

was created by Red Hat and with a similar code base to containerd closely related to podman and buildah.

A

CRI-O

39
Q

a runtime that only contains the absolutely essentials to run containers

A

containerd
CRI-O

40
Q

container runtime sandboxing tools

A

gvisor
Kata containers

41
Q

A secure runtime that provides a lightweight virtual machine, but behaves like a container.

A

Kata containers

42
Q

Made by Google, provides an application kernel that sits between the containerized process and the host kernel.

A

gvisor

43
Q

Four networking problems in kubernetes

A

Container-to-container communications
Pod-to-pod communications
Pod-to-service communications
External-to-service communications

44
Q

How External-to-Service communications is solved

A

It is implemented by the kube-proxy and packet filter on the node.

45
Q

How Pod-to-Service communications is solved

A

It is implemented by the kube-proxy and packet filter on the node.

46
Q

How Pod-to-Pod communications is solved

A

This can be solved with an overlay network.

47
Q

How Container-to-Container communications is solved

A

This can be solved by the Pod concept

48
Q

Kubernetes networking requirements

A

All pods can communicate with each other across nodes.
All nodes can communicate with all pods.
No Network Address Translation (NAT).

49
Q

container networking and security solutions

A

Project Calico
Weave
Cilium

50
Q

DNS server add-on which can provide service discovery and name resolution inside the cluster

A

core-dns

51
Q

Does pods have ip address?

A

Yes every pod gets its own ip address

52
Q

What if you create NetworkPolicy without a controller that will implement it?

A

it will have no effect

53
Q

___ act as cluster internal firewalls

A

NetworkPolicy

54
Q

how to control the traffic flow at the IP address or port level

A

use Network Policies

55
Q

scheduling

A

the process of automatically choosing the right (worker) node to run a containerized workload on.

KCNA (6 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions