Michael Hausenblas

A Handbook for the Cloud Native Practitioner

Learning Modern Linux

Stefan Schimanski

Developing Cloud Native Applications

Programming Kubernetes

Sébastien Goasguen

Kubernetes Cookbook: Building Cloud Native Applications

David Wood

Luke Ruth

Marsha Zaidman

Describes the Linked Data model, offering practical techniques and examples exploring the concepts of HTTP URIs, RDF, and the SPRQL query language.

Linked Data

If you’re looking to develop native applications in Kubernetes, this is your guide. Developers and AppOps administrators will learn how to build Kubernetes-native applications that interact directly with the API server to query or update the state of resources. AWS developer advocate Michael Hausenblas and Red Hat principal software engineer Stefan Schimanski explain the characteristics of these apps and show you how to program Kubernetes to build them. You’ll explore the basic building blocks of Kubernetes, including the client-go API library and custom resources. All you need to get started is a rudimentary understanding of development and system administration tools and practices, such as package management, the Go programming language, and Git. Walk through Kubernetes API basics and dive into the server’s inner structure Explore Kubernetes’s programming interface in Go, including Kubernetes API objects Learn about custom resources—the central extension tools used in the Kubernetes ecosystem Use tags to control Kubernetes code generators for custom resources Write custom controllers and operators and make them production ready Extend the Kubernetes API surface by implementing a custom API server

Developing Cloud-Native Applications

Andrew Martin

Want to run your Kubernetes workloads safely and securely? This practical book provides a threat-based guide to Kubernetes security. Each chapter examines a particular component's architecture and potential default settings and then reviews existing high-profile attacks and historical Common Vulnerabilities and Exposures (CVEs). Authors Andrew Martin and Michael Hausenblas share best-practice configuration to help you harden clusters from possible angles of attack. This book begins with a vanilla Kubernetes installation with built-in defaults. You'll examine an abstract threat model of a distributed system running arbitrary workloads, and then progress to a detailed assessment of each component of a secure Kubernetes system. Understand where your Kubernetes system is vulnerable with threat modelling techniques Focus on pods, from configurations to attacks and defenses Secure your cluster and workload traffic Define and enforce policy with RBAC, OPA, and Kyverno Dive deep into sandboxing and isolation techniques Learn how to detect and mitigate supply chain attacks Explore filesystems, volumes, and sensitive information at rest Discover what can go wrong when running multitenant workloads in a cluster Learn what you can do if someone breaks in despite you having controls in place

Hacking Kubernetes

This practical book shows you how to attack and defend the popular container orchestrator, Kubernetes. Based on their combined 10 years of hands-on experience in designing, running, and attacking Kubernetes-based workloads and clusters, authors Andrew Martin and Michael Hausenblas equip cloud native security practitioners like you with the tools you need to be successful. You'll learn about Kubernetes default configurations, how to exploit them, and then defend against the attacks! The book takes a hands-on approach and teaches you what it takes to run Kubernetes securely, both on a strategic as well as an operational level.

Threat-Driven Analysis and Defense

If your organization is preparing to move toward a cloud-native computing architecture, this cookbook shows you how to successfully use Kubernetes, the de-facto standard for automating the deployment, scaling, and management of containerized applications. With more than 80 proven recipes, developers, system administrators, and architects will quickly learn how to get started with Kubernetes and understand its powerful API. Through the course of the book, authors Sébastien Goasguen and Michael Hausenblas provide several detailed solutions for installing, interacting with, and using Kubernetes in development and production. You'll learn how to adapt the system to your particular needs and become familiar with the wider Kubernetes ecosystem. Each standalone chapter features recipes written in O'Reilly's popular problem-solution-discussion format. Recipes in this cookbook focus on: Creating a Kubernetes cluster Using the Kubernetes command-line interface Managing fundamental workload types Working with services Exploring the Kubernetes API Managing stateful and non-cloud native apps Working with volumes and configuration data Cluster-level and application-level scaling Securing your applications Monitoring and logging Maintenance and troubleshooting.

Building Cloud Native Applications

Kubernetes Cookbook

Whether you're new to Linux or have some experience, this practical book shows you how to master various tasks with this operating system—not just system administration. Cloud native professionals including developers, architects, DevOps practitioners, and site reliability engineers will learn how to use and program Linux in different modern environments, from embedded systems such as the Raspberry Pi to the virtual machine of your cloud provider of choice. Along the way, you'll gain hands-on experience with modern terminals, shells, and commands, use Linux networking, and learn how to manage your workloads, all with the goal of implementing modern Linux observability. You'll also understand how to run Linux applications in modern ways by using containers, systemd, modern filesystems, and immutable distros such as Flatcar and Bottlerocket. With this book, you will: Use Linux as a modern programming environment, not just as an admin tool Learn critical components such as the kernel, terminal multiplexer, human-friendly shells, and portable scripting Become familiar with access control, from file permissions to capabilities Understand the role of filesystems as a fundamental building block in Linux Gain hands-on experience with the Linux networking stack and tooling Learn how to apply modern operating system observability to manage your workloads Share data using SSH, rsync, and cloud sync mechanisms

Michael Hausenblas

Books

Your next favorite book is out there