Service
A Service gives a stable virtual IP and DNS name to a changing set of Pods, with types ClusterIP, NodePort, and LoadBalancer. CKA networking tasks include exposing workloads and debugging endpoints.
All CKA Terms
Pod
A Pod is the smallest deployable unit in Kubernetes, wrapping one or more containers that share network and storage.
kubectl
kubectl is the command-line client used to inspect and control a Kubernetes cluster through the API server.
kubeadm
kubeadm is the official tool for bootstrapping a Kubernetes cluster and performing control-plane version upgrades.
etcd
etcd is the distributed key-value store that holds all Kubernetes cluster state.
Control Plane
The control plane is the set of components — API server, scheduler, controller manager, and etcd — that manage the cluster's desired state.
kubelet
The kubelet is the node agent that starts and monitors the Pods assigned to its node.
Deployment
A Deployment manages a replicated, self-healing set of Pods and supports rolling updates and rollbacks.
Service
A Service gives a stable virtual IP and DNS name to a changing set of Pods, with types ClusterIP, NodePort, and LoadBalancer.
Ingress
An Ingress routes external HTTP and HTTPS traffic to Services based on host and path rules, and requires a running Ingress controller.
NetworkPolicy
A NetworkPolicy specifies which connections are allowed to and from Pods, defaulting to deny once a Pod is selected.
CoreDNS
CoreDNS is the default in-cluster DNS server that resolves Service and Pod names to addresses.
PersistentVolumeClaim
A PersistentVolumeClaim (PVC) is a Pod's request for storage that binds to a PersistentVolume, often provisioned dynamically through a StorageClass.
StorageClass
A StorageClass defines a class of storage and enables dynamic provisioning of PersistentVolumes on demand.
Taints and Tolerations
Taints and Tolerations are a scheduling pair: a taint repels Pods from a node unless the Pod carries a matching toleration, giving fine control over placement.
RBAC
Role-Based Access Control (RBAC) grants permissions through Roles and ClusterRoles bound to users or ServiceAccounts.