Container Orchestration Flashcards

(100 cards)

1
Q

What is the ‘lift and shift’ approach in cloud migration?

A

Moving unchanged infrastructure and software from on-premise to the cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Why is the lift and shift approach used?

A

To reduce Total Cost of Ownership (TCO).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a major drawback of the lift and shift approach?

A

It carries forward flaws to cloud hosting.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

When is the lift and shift approach suitable?

A

For mission-critical systems with predictable usage patterns.

Internal utilities that won’t require autoscaling.

In emergency situations like data center lease termination.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are cloud-native applications?

A

Applications redesigned to leverage cloud-specific features.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are examples of cloud-native features?

A

Elastic computing, CaaS, autoscaling, high availability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What benefits do cloud-native applications provide?

A

Operational flexibility, resource abstraction, automated replication, and self-healing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What enables automatic application management in the cloud?

A

Container technology.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the function of container orchestration?

A

Connects, replicates, and scales containerized workloads using declarative APIs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How do containers differ from virtual machines in terms of resource requirements?

A

Containers are lighter on resource requirements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How fast do containers start compared to VMs?

A

Containers start in milliseconds; VMs in minutes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a benefit of container images compared to VM images?

A

Easier to make, reuse, and update.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How do containers and VMs differ in terms of OS?

A

VMs run their own OS; containers share the host OS kernel.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What type of virtualization do containers use?

A

OS-level virtualization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What isolation level do containers provide?

A

Process-level isolation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a Docker bridge network?

A

A software bridge allowing communication between containers on the same network, isolated from others.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What extra feature does a user-defined Docker bridge network provide?

A

Automatic service discovery via container name resolution.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What underpins most container technology today?

A

Linux namespaces and cgroups.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What do namespaces provide in containers?

A

Isolated workspace per container.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What do cgroups do?

A

Limit resources (CPU, memory, disk) for containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the types of Windows container isolation?

A

WSL2 containers, process isolation, Hyper-V isolation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What does treating a container like a VM cause?

A

Problems with lifecycle control, scaling, and logs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What does container lifecycle management now represent?

A

Application lifecycle management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What orchestration challenges arise with containers?

A

Networking, service discovery, persistent storage, failover, scheduling, autoscaling, external exposure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is Kubernetes?
A container and cluster management platform providing solutions to all orchestration challenges.
26
What is the Kubernetes Control Plane?
Centralized cluster manager accessible via API, includes kube-apiserver, kube-scheduler, controller-manager.
27
What is etcd in Kubernetes?
A highly available key-value store for desired cluster state.
28
What is the role of kube-scheduler?
Schedules workloads onto nodes based on available resources.
29
What does kubelet do?
Manages container runtime and persistent volumes on each node.
30
What is the Container Runtime Interface (CRI)?
The interface through which Kubernetes interacts with container runtimes.
31
How does Kubernetes handle persistent storage?
Through Persistent Volumes (PVs) and Persistent Volume Claims (PVCs).
32
What probes manage failover and recovery?
Liveness and readiness probes.
33
What handles Kubernetes networking between pods?
Network plugins implementing the Container Network Interface (CNI).
34
What does kube-proxy do?
Sets up forwarding rules (iptables/IPVS) for service discovery.
35
What component provides DNS in Kubernetes?
An add-on DNS service deployed in the data plane.
36
How does Kubernetes expose services externally?
Via NodePort, LoadBalancer, or Ingress.
37
What is a Kubernetes Pod?
A group of tightly coupled containers, smallest unit of replication.
38
How do containers within the same pod communicate?
Through localhost, sharing the same network namespace.
39
How do pods communicate across nodes?
Using Pod IPs and a software network bridge.
40
What is the issue with Pod IPs?
They are dynamic, complicating stable networking.
41
What does a ClusterIP service do?
Assigns a stable virtual IP to a backend set of pods.
42
How does kube-proxy load balance?
Round robin or random fashion to backend pod IPs.
43
What is a NodePort service?
Exposes a service on a static port on each node’s IP.
44
What does a LoadBalancer service do?
Provisions an external load balancer for cluster services.
45
What is Ingress in Kubernetes?
What is a Kubernetes Deployment?
46
What is a Kubernetes Deployment?
A wrapper around a ReplicaSet, handles pod replication and revisions.
47
How does Kubernetes enhance Secret security?
Restricts access to only necessary pods and nodes.
47
What is a Secret in Kubernetes?
A base64-encoded, access-controlled config alternative to ConfigMaps.
47
What is a ConfigMap?
Decouples config data from applications.
48
What is a StatefulSet?
Manages stateful applications, providing unique persistent identities.
49
What service is used with StatefulSets?
Headless Services (no cluster IP, only DNS entries).
50
What is a PersistentVolume?
A provisioned storage resource, separate from containers.
51
What is a PersistentVolumeClaim?
A pod’s request for a PersistentVolume.
52
How are volumes mounted in containers?
Through VolumeMounts, into the container’s filesystem.
53
What are ephemeral volumes?
Temporary storage that disappears with the pod/container.
53
What is the role of an API Gateway?
Controls access to API endpoints at the cluster’s edge.
54
What functions do reverse proxy servers serve in Kubernetes?
HTTP request handling, rate limiting, traffic encryption, and filtering.
54
What is KrakenD?
A community edge security tool offering declarative reverse proxy config.
54
What are commercial alternatives to KrakenD?
Kong, NGINX Plus.
55
Why is edge security important?
Centralizes security, relieving developers of security logic.
56
What is autoscaling in Kubernetes?
Dynamically adjusting the number of pod replicas based on usage metrics.
56
What is the goal of declarative configuration in cloud-native environments?
To describe the desired state, enabling automated convergence to that state.
56
Why is treating containers like VMs discouraged?
Leads to inefficient lifecycle management and scaling limitations.
56
What does the gateway-api do?
Manages routing and access control for external traffic into the Kubernetes cluster.
57
What is the purpose of the cloud controller manager?
Integrates Kubernetes with the underlying cloud provider for services like load balancing.
58
What is a StorageClass in Kubernetes?
Defines how dynamic storage should be provisioned by the cloud/storage provider.
58
What is the smallest schedulable unit in Kubernetes?
A Pod.
58
How are pods grouped for load balancing in Kubernetes?
By Services.
58
What is etcd's fault-tolerance model?
Leader-follower protocol for crash fault tolerance.
58
What is a volumeClaimTemplate?
Used in StatefulSets to dynamically provision storage per pod.
58
What are endpoint slices?
Kubernetes' mechanism to scale service endpoints efficiently.
59
What differentiates Headless Services from ClusterIP services?
Headless Services do not have a virtual IP, enabling direct Pod DNS entries.
59
What ensures the desired state is maintained in Kubernetes?
Controllers continuously reconcile actual state to match desired state.
59
Why do StatefulSets retain storage after deletion?
To preserve state and allow for data recovery.
59
What does CRI stand for?
Container Runtime Interface.
59
What does CNI stand for?
Container Network Interface.
60
Why is observability important in cloud-native applications?
Enables monitoring and debugging by tracking resource usage and behavior.
61
What is the role of a reverse proxy in edge security?
Controls, filters, and monitors incoming HTTP requests to internal services.
61
What is circuit breaking in edge proxies?
Stops trying a failing service temporarily to avoid cascading failures.
61
What is response aggregation in reverse proxies?
Combines responses from multiple services into a single response.
61
How does Kubernetes manage workloads across nodes?
Through the kube-scheduler and node-specific kubelets.
61
What tools allow access to the Kubernetes API server?
CLI tools like kubectl and external controllers.
61
What is the benefit of declarative API usage in Kubernetes?
Simplifies orchestration by defining "what" should happen instead of "how."
61
How are liveness and readiness probes defined?
Through configuration in pod specs to monitor application health.
61
What is the function of the controller manager in Kubernetes?
Runs controllers that regulate cluster state changes.
61
What does high availability in Kubernetes entail?
Workloads are replicated across nodes, with failover and self-healing mechanisms.
61
What are the types of Kubernetes workloads?
Deployments, StatefulSets, Jobs, CronJobs, DaemonSets.
61
What is the 'OS of the cloud'?
Kubernetes, due to its orchestration and automation capabilities.
61
What does Kubernetes use to track the actual vs desired state?
Control loops run by controllers.
62
How does the kubelet contribute to persistent storage?
Manages volume attachment/mounting and CSI communication.
62
How does Kubernetes allow for infrastructure abstraction?
Through interfaces like CRI, CNI, and CSI.
62
How does Kubernetes decouple compute and storage?
Through volume abstractions like PVs and PVCs.
62
What are some additional security measures beyond Kubernetes secrets?
Encryption vaults and identity management systems.
62
What is the value of base64 encoding in secrets?
Obfuscates values for transport, but does not encrypt them.
62
Why are headless services important in StatefulSets?
They provide stable DNS names for pods without virtual IPs.
62
Why are containers considered almost-native performance?
Due to minimal abstraction over the host OS.
62
What makes a network plugin compatible with Kubernetes?
Adherence to the CNI specification.
62
What makes a container runtime compatible with Kubernetes?
Implementation of the CRI.
62
What Kubernetes concept ensures only specific nodes receive secrets?
Secret management and access control via node targeting.
62
What type of storage is required for databases in Kubernetes?
Persistent, non-ephemeral storage with StatefulSet and PVCs.