A collection of kubernetes-related diagrams
A collection of diagrams explaining kubernetes, extracted from our
===
The diagrams are realized using PlantUML, so they're basically text and can be adjusted easily.
Note that the diagrams don't use UML notation. They are rather box and line diagrams.
Relationship between Deployment, Pod and Container.
Simplified - leaves out ReplicaSets for brevity.
Relationship between Pod and Node.
Traffic flow from Cloud LoadBalancer via Service to Pods running on Nodes.
Traffic flow from Cloud LoadBalancer via Service to Pods running on Nodes. Including different address IP address ranges and ports:
Progress of a requests from the ingress controller's service to the actual pod, illustrating the role of the ingress
resource.
Flow from user API server request to response: check authn via identity provider, then authz via RBAC.
A simplified display of resources involved in RBAC and their correlations.
Note that
Permission
is not a k8s resource, but a list of rules inside the (Cluster-)roles that make up a kind of permission.Subject
can be a serviceAccount, user or groupConnection from Pod to PSP via RBAC (Role, RoleBinding, ServiceAccount).
A diagram to help debugging Kubernetes PodSecurityPolicies.
Diagrams describing the general concepts of gitOps and distinguishing it from "ciOps".
See also our
There are different options when implementing GitOps. Some of them are depicted bellow.
CI Server writes image version to GitOps Repo.
CI Server read-only on GitOps Repo; GitOps Operator writes image version to GitOps Repo.
Infra as Code stays in app repo, CI Server writes to GitOps repo.
See cloudogu/gitops-patterns for more details on GitOps and diagrams.