README.md

Episode 096 : Grokking Kubernetes : kube-scheduler

• Hosted by @mauilion
• Recording date: 2019-11-01

Table of Contents

• 00:00:00 - Welcome to TGIK!
• 00:00:00 - Week in Review

Week in Review

• Contour 1.0 release!
• VMWorld EU
• New Octant.dev website
• Pod labels via status
• Kube Docs survey
• A Kubernetes crime story
• How to write a kubectl plugin
• kubernetespodcast.com
• Nividia Operator

Show Notes

• Show Outline:

  • The parts and the config reference

    • kubelet tgik.io/086

      • client/server auth
      • cri and all the other c*i integrations
      • kubelet api https://github.com/kubernetes/kubernetes/blob/master/pkg/kubelet/server/server.go
      • configz
      • metrics
      • theory of operation
        • For exec: https://erkanerol.github.io/post/how-kubectl-exec-works/
      • static pods
      • PLEG

    • kube-proxy tgik.io/090

    • https://kubernetes.io/docs/reference/command-line-tools-reference/kube-proxy/

      • auth to apiserver
      • iptables
      • ipvs
      • services
      • theory of operation
        • kubernetes/enhancements#536
        • https://kubernetes.io/docs/tutorials/services/source-ip/
      • configz
      • metrics

    • kube-controller-manager tgik.io/093

      • init code
      • controller code
      • control loops!
        • attachdetach
        • bootstrapsigner
        • cloud-node-lifecycle
        • clusterrole-aggregation
        • cronjob
        • csrapproving
        • csrcleaner
        • csrsigning
        • daemonset
        • deployment
        • disruption
        • endpoint
        • endpointslice
        • garbagecollector
        • horizontalpodautoscaling
        • job
        • namespace
        • nodeipam
        • nodelifecycle
        • persistentvolume-binder
        • persistentvolume-expander
        • podgc
        • pv-protection
        • pvc-protection
        • replicaset
        • replicationcontroller
        • resourcequota
        • root-ca-cert-publisher
        • route
        • service
        • serviceaccount
        • serviceaccount-token
        • statefulset
        • tokencleaner
        • ttl
        • ttl-after-finished
      • disabled by default:
        • bootstrapsigner
        • endpointslice
        • tokencleaner
      • ⚠️can be skipped!⚠️
      • theory of operation
      • leader election!
      • metrics

    • kube-scheduler

      • https://kubernetes.io/docs/concepts/scheduling/kube-scheduler/
      • auth to apiserver
      • theory of operation
      • https://kubernetes.io/docs/concepts/extend-kubernetes/poseidon-firmament-alternate-scheduler/
      • ⚠️can be skipped!⚠️ (So not a security thing!)
      • leader election!
      • direct scheduling
      • multiple schedulers!
      • configurable!
      • metrics

    • kube-apiserver

      • auth to etcd
      • auth to kubelet
      • access patterns.
      • theory of operation
      • ha
      • kubectl get --raw /metrics
      • Exploring the API.
        • kubectl explain
        • openapi stuffs
        • api reference docs

  • General systems stuff.

    • show direct scheduling!
    • The ways that each are configured/configurable.
    • The access patterns for each.
    • The authentication mechanisms for each.
    • What even is edge vs level triggered?
    • What is a watch?
    • Why is all this so darn stable?

Reference Links

• kubectl sudo like auth
• keps
• Tim Hockin reconciliation presentation
• kube-csr
• Bryan's Webinar on Octant