Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

KCNA > Kubernetes Fundamentals > Flashcards

Kubernetes Fundamentals Flashcards

(55 cards)

Start Studying
1
Q

Name Kubernetes control-plane services

A

etcd
kube-scheduler
kube-api-server
kube-controller-manager
cloud-controller-manager(optional)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Role of the Kubernetes control-plane?

A

Brains of kubernetes. Manages cluster and control critical functions like deployment, scheduling, self-healing, scaling.
Administrative traffic
Configuration
System control
Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What’s inside every worker node?

A

kubelet
kube-proxy
container runtime

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What kubelet is responsible for?

A

It talks to kube-api-server and container-runtime to handle the final stage of starting containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What kube-proxy is responsible for?

A

Handles inside and outside communication of your cluster. It tries to rely on os networking capabilities to do so.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What container runtime is responsible for?

A

Responsible for running containers on worker nodes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What’s the most popular container runtime?

A

containerd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Deprecated container runtime, since when?

A

Docker, since 1.24

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What happens to worker nodes when control plane is not available?

A

Apps on worker nodes will keep running but scaling, scheduling new apps and some other functionality will be missing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Is kubernetes namespace suitable for strong isolation?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How to divide cluster into multiple virtual clusters?

A

with namespaces

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

A database that holds state of the cluster?

A

etcd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Is etcd an official part of Kubernetes?

A

No, it is an independent project

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Centerpiece of kubernetes. All components interact with it.

A

kube-api-server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

User access kubernetes cluster through it

A

kube-api-server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Chooses a worker that can fit a new workload based on CPU etc.

A

kube-scheduler

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Contain control loops that manage the state of the cluster

A

kube-controller-manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Optional control plane service that allows to interact with cloud providers API

A

cloud-controller-manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Server nodes types

A

Control plane node(s)
Worker nodes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Cloud providers with kubernetes

A

Amazon (EKS)
Google (GKE)
Microsoft (AKS)
DigitalOcean (DOKS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Kubernetes distributions

A

OpenShift
Rancher
k3s
VMWare Tanzu

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

cluster installers(production grade)

A

kubeadm
kops
kubespray

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

test “clusters”

Study These Flashcards
A

minikube
kind
microk8s

24
Q

Communicating with cluster is impossible without it

Study These Flashcards
A

kube-api-server

25
kube-api is implemented as a ___ interface that is exposed over ___
RESTful, HTTPS
26
Three stages request has to go through before processing
Authentication Authorization Admission Control
27
How kubernetes users are managed
always externally
28
Admission controller can't block it
requests to read objects
29
An ___ is a piece of code that intercepts requests to the Kubernetes API server prior to persistence of the object, but after the request is authenticated and authorized.
admission controller
30
admission controller can be
validating mutating or both
31
Common ways of authentication in kubernetes
digital signed certificate X.509 external identity management system service account for technical users
32
During this stage It is decided what the requester is allowed to do
Authorization
33
One of available Authorization methods in kubernetes
Role-based access control (RBAC)
34
kubernetes wrapper around container
Pod
35
Smallest compute unit in kubernetes
Pod
36
a plugin interface which enables kubelet to use a wide variety of container runtimes, without the need to recompile
Container Runtime Interface(CRI)
37
lightweight and performant implementation to run containers. Arguably the most popular container runtime right now. It is used by all major cloud providers for the Kubernetes As A Service products.
containerd
38
was created by Red Hat and with a similar code base to containerd closely related to podman and buildah.
CRI-O
39
a runtime that only contains the absolutely essentials to run containers
containerd CRI-O
40
container runtime sandboxing tools
gvisor Kata containers
41
A secure runtime that provides a lightweight virtual machine, but behaves like a container.
Kata containers
42
Made by Google, provides an application kernel that sits between the containerized process and the host kernel.
gvisor
43
Four networking problems in kubernetes
Container-to-container communications Pod-to-pod communications Pod-to-service communications External-to-service communications
44
How External-to-Service communications is solved
It is implemented by the kube-proxy and packet filter on the node.
45
How Pod-to-Service communications is solved
It is implemented by the kube-proxy and packet filter on the node.
46
How Pod-to-Pod communications is solved
This can be solved with an overlay network.
47
How Container-to-Container communications is solved
This can be solved by the Pod concept
48
Kubernetes networking requirements
All pods can communicate with each other across nodes. All nodes can communicate with all pods. No Network Address Translation (NAT).
49
container networking and security solutions
Project Calico Weave Cilium
50
DNS server add-on which can provide service discovery and name resolution inside the cluster
core-dns
51
Does pods have ip address?
Yes every pod gets its own ip address
52
What if you create NetworkPolicy without a controller that will implement it?
it will have no effect
53
___ act as cluster internal firewalls
NetworkPolicy
54
how to control the traffic flow at the IP address or port level
use Network Policies
55
scheduling
the process of automatically choosing the right (worker) node to run a containerized workload on.

KCNA (6 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions