Contents

System access

• Access Overview

Remote CLI access

• Remote CLI Access
• Configure Container-backed Remote CLIs
• Use Container-backed Remote CLIs and Clients
• Install Kubectl and Helm Clients Directly on a Host
• Configure Remote Helm Client

GUI access

• Access the Kubernetes Dashboard

API access

• REST API Access

Application management

• Helm Package Manager
• Deploy via FluxCD

Local Docker registry

• Local Docker Registry Authentication and Authorization
• Use an Image from the Local Docker Registry in a Container Spec
• Delete Image Tags in the Docker Registry

NodePort usage restrictions

• NodePort Usage Restrictions

Certificate Management

• Certificate Management
• External CA and Ingress Controller Example
• Internal CA and NodePort Example
• Issuers in Distributed Cloud

Vault secret and data management

• Vault Overview
• Vault Aware
• Vault Unaware

Secure Inter-host Pod-to-pod Network Traffic for Services

• Inter-host Pod-to-pod Security Overview
• Protect Inter-host Pod-to-pod Traffic of Services
• Unprotect Inter-host Pod-to-pod Traffic at Specific Ports of Services
• Unprotect Inter-host Pod-to-pod Traffic of Specific Services
• Turn off Inter-host Pod-to-pod Traffic Protection in the Cluster

Using Kata Containers runtime

• Kata Containers Overview
• Specify Kata Container Runtime in Pod Spec
• Known Kata Container Limitations

Adding persistent volume claims

• About Persistent Volume Support

RBD Provisioner

• Create ReadWriteOnce Persistent Volume Claims
• Mount ReadWriteOnce Persistent Volumes in Containers

Ceph File System Provisioner

• Create ReadWriteMany Persistent Volume Claims
• Mount ReadWriteMany Persistent Volumes in Containers

Optimize application performance

• Use Kubernetes CPU Manager Static Policy’s Guaranteed QoS class with exclusive CPUs
• Use Kubernetes CPU Manager Static Policy with application-isolated cores

Add an Additional Network Interface to a Container

• Add an Additional Network Interface to a Container
  • “interface-creating” plugin types
  • “meta” plugin types
  • “ipam” plugin types
• SR-IOV plugin
  • Create Network Attachment Definitions
  • Use Network Attachment Definitions in a Container
• Host-device Plugin
• Macvlan Plugin
• Ipvlan Plugin
• Bridge Plugin
• Point-to-Point Plugin
• VLAN Plugin
• Tuning Plugin
• Bandwidth Plugin
• Source-Based Routing Plugin
• Virtual Routing and Forwarding Plugin
• Bond Plugin
  • Example: Launch a daemonset Bonding Two Host Interfaces in Active-backup mode
  • Example: Launch a Pod With a Bonded SR-IOV Interface in 802.3ad (LACP) Mode

Metrics Server

• Metrics Server

Tools

• vRAN Tools