Administration overview¶
Knative has a comprehensive set of tools and capabilities to administer your Kubernetes clusters. This article provides a overview of Knative features, capabilities, and resources of interest to Kubernetes Administrators, and is organized by the following areas:
- Installation
- Configuration
- Monitoring and Observability
- Security and Access Control
- Updates and Maintenance
Installation¶
Use the Installation Roadmap for guidance on installing Knative using the resources and tool choices that best fit your needs. You can install using YAML resources, manifests, or CLI tools that include the Knative operator.
The Knative Operator is a custom controller that extends the Kubernetes API to install Knative components as well as configure your Kubernetes infrastructure accommodating tasks such as installing, deployment, scaling, updates, and recovery.
You can install Knative either by using YAML files or the Knative Operator. The Knative Operator is installed with the Knative Operator CLI plugin, or by using manifest resources.
You can configure customized Knative Serving can customized Eventing resources.
| Concepts and Procedures | Reference |
|---|---|
| Install Serving with YAML Install Eventing with YAML Install by using the Knative Operator Install by using the Knative Operator CLI plugin Configuring Knative using the Operator Configuring Knative Serving CRDs Configuring Knative Eventing CRDs Install Knative Backstage plugin |
Knative Serving installation files Knative Eventing installation files |
Configurations¶
Knative provides comprehensive optimization capabilities for the Serving and Eventing components and settings for administering your clusters.
For the Serving component, you can configure autoscaling, high availability, load balancing, authentication, domains, gateways, and other settings.
For the Eventing component, you can configure Brokers that facilitate the routing and management of events. You can configure and process event data with Apache Kafka. You can also install and configure Istio for your traffic management and telemetry needs.
| Concepts and Procedures | Reference |
|---|---|
| Install Istio for Knative Supported Autoscaler Types Configuring private Services Configuring ingress class Configuring certificate class Configuring custom domains Configuring HTTP Tag resolution Configuring Activator capacity Exclude namespaces from the Knative webhook Configuring high-availability components Configuring the ingress gateway Configuring domain names Configuring Kafka features Channel types and defaults Configure Broker defaults Configure Channel defaults Configure Apache Kafka Channel defaults Configure event source defaults Configure Sugar Controller Configure KEDA Autoscaling of Knative Kafka Resources Knative reference mapping Transport Encryption Sender Identity Eventing with Istio |
Administrator configuration options Configuring metrics Configuring targets Configuring scale to zero Configuring concurrency Configuring the requests per second (RPS) target Configuring scale bounds Additional autoscaling configuration for Knative Pod Autoscaler Configure Deployment resources Feature and extension flags Configure the Defaults ConfigMap |
Monitoring and Observability¶
Both the Serving and Eventing components are well maintained with logging, tracing, and metric collections.
| Concepts and Procedures | Reference |
|---|---|
| Request traces Collecting logs Configuring logging Configuring Request logging Collecting metrics Accessing CloudEvent traces Collecting logs Configuring logging Collecting metrics |
Service metrics Metrics Reference |
Security¶
Knative provides robust security and access control measures with the certificate manager, networking TLS certificates, domain and cluster encryption, and application security.
| Concepts and Procedures | Reference |
|---|---|
| Install cert-manager Using a custom TLS certificate for DomainMapping Configure cert-manager integration Configure external domain encryptio> Configure cluster-local domain encryption Configure Knative system-internal encryption Installing Security-Guard Security-guard quickstart Security-Guard example alerts Transport Encryption Sender Identity Verifying Knative Images |
Using extensions enabled by QPOptions About Security-Guard |
Updates and Maintenance¶
In addition to updates, Knative provides several configurations for maintaining your clusters in optimal condition including resources, volume, traffic, and load balancing.
| Concepts and Procedures | Reference |
|---|---|
| About upgrading Knative Checking your Knative version Upgrading with kubectl Upgrading with the Knative Operator Uninstalling Knative About Revisions Configure resource requests and limits Volume Support Traffic management Configuring gradual rollout of traffic to Revisions Deploying from private registries About load balancing Configuring target burst capacity |
Developer configuration options |