Articles tagged with #Kubernetes
A curated list of engineering series, deep dives, and notes related to #Kubernetes.
Building a Custom Kubernetes Operator in Java: The Kubernetes Capstone
Build a complete, functional Kubernetes Custom Operator in Java with Custom Resources, Informer watchers, and Observe-Diff-Act reconciliation loops.
Production Debugging and Operations: Event Loops, Pending Pods, and OOMKilled Analysis
Master production Kubernetes debugging: Pod failure states (Pending, CrashLoopBackOff, OOMKilled), event inspection, previous container logs, and finalizers.
Spring Boot Externalized Configuration, Profiles, and Production Observability
Master Spring Boot configuration hierarchy, relaxed property binding, profile management, and production health probes with Spring Boot Actuator.
Extending Kubernetes: Custom Resource Definitions (CRDs) and the Operator Pattern
Master Kubernetes extensibility: Custom Resource Definitions (CRDs), OpenAPI v3 schemas, Custom Controllers, and the Operator Pattern.
Cluster Security & Authorization: RBAC, ServiceAccounts, and Admission Webhooks
Master Kubernetes security: Authentication (ServiceAccounts), RBAC Authorization (Roles, RoleBindings), and Admission Webhooks.
Kubernetes Scheduler Internals: Filtering (Predicates), Scoring (Priorities), and Affinities
Master kube-scheduler internals: Filtering (predicates), Scoring (priorities), Node/Pod Affinities, Taints & Tolerations, and Image Locality.
Configuration and Secrets Management: ConfigMaps, Secrets, and Volume Mount Mechanics
Master Kubernetes configuration management: ConfigMaps, Secrets, environment variable injection vs volume mount atomic symlink live-reloading.
Dynamic Storage Provisioning: PersistentVolumes, PVCs, StorageClasses, and CSI gRPC
Master Kubernetes storage provisioning: StorageClasses, PersistentVolumeClaims (PVCs), PersistentVolumes (PVs), Access Modes, and CSI gRPC calls.
CoreDNS, Service Discovery, and Ingress Controller Architecture
Master Kubernetes service discovery: CoreDNS naming conventions, ClusterIP vs NodePort vs LoadBalancer, Ingress Controllers, and Gateway API.
Service Proxies Under the Hood: Virtual IPs, kube-proxy iptables, and IPVS Routing
Master Kubernetes Service proxies: ClusterIP Virtual IPs, kube-proxy iptables probability rules (-m statistic), IPVS hash tables, and eBPF routing.
The Kubernetes Pod Networking Model: Flat IP-per-Pod Networks and CNI Plugins
Master the Kubernetes Pod Networking Model: IP-per-Pod rules, NAT-less cross-node routing, CNI plugin execution, and VXLAN vs BGP overlay encapsulation.
Stateful Workloads: StatefulSets, Stable Network Identities, and Ordered Scaling
Master Kubernetes StatefulSets: Ordinal indexing (pod-0, pod-1), Headless Service DNS identities, dedicated volumeClaimTemplates, and ordered scaling.
Controllers Deep Dive: ReplicaSets, Deployments, and Rolling Update Mechanics
Master Kubernetes workload controllers: Deployment vs ReplicaSet hierarchies, zero-downtime Rolling Updates, maxSurge, maxUnavailable, and instant rollbacks.
The Atomic Unit of Scheduling: Why Kubernetes Uses Pods Instead of Containers
Discover why Kubernetes schedules Pods instead of containers: co-location guarantees, shared netns/IPC, sidecars, and init container mechanics.
Informers, Listers, and the HTTP/2 Watch API: Efficient State Synchronization
Master client-go controller architecture: Reflectors, DeltaFIFO queues, SharedInformers, in-memory Indexers, WorkQueues, and HTTP/2 Watch streams.
The Reconciliation Loop Engine: Observe, Diff, and Act Mechanics
Master the Kubernetes reconciliation loop engine: Observe-Diff-Act mechanics, level-triggered vs edge-triggered architectures, and controller pseudocode.
Declarative Desired State vs Imperative Commands: The Kubernetes Operating Philosophy
Master the Kubernetes operating philosophy: Imperative vs Declarative configuration, spec vs status field separation, and idempotent state reconciliation.
The Kubelet and Container Runtime Interface (CRI): How Nodes Execute Pods
Explore the Kubelet node agent and Container Runtime Interface (CRI): RuntimeService gRPC methods, PodSandbox creation, and pause container mechanics.
etcd Internals: Raft Consensus, MVCC Key-Value Storage, and Watch Streams
Master etcd internals: Raft consensus quorum math, MVCC bbolt B+ tree storage, revision counters, compaction, and gRPC watch streams.
Kubernetes Control Plane Architecture: API Server, etcd, Scheduler, and Controller Manager
Master Kubernetes architecture: API Server, etcd distributed storage, Scheduler node placement, Controller Manager loops, and Kubelet node agents.
Why Single-Host Docker Fails at Scale: The Distributed Orchestration Problem
Discover why single-host Docker setups fail at scale: host failure domains, manual port allocation conflicts, stateful failover, and scheduling bottlenecks.
Mastering Kubernetes & Distributed Orchestration: Series Introduction & Learning Roadmap
Discover what you will learn in this 20-part series on Kubernetes Internals. Build a custom Kubernetes Operator and master control plane mechanics.