Maintained by a like‑minded team, covering both operations and development. Topics span Linux ops, DevOps toolchain, Kubernetes containerization, monitoring, log collection, network security, and Python or Go development. Team members: Qiao Ke, wanger, Dong Ge, Su Xin, Hua Zai, Zheng Ge, Teacher Xia.
This article explains how Kubernetes assigns unique IP addresses to Pods using Flannel as the CNI network provider and Containerd as the container runtime, covering underlying concepts like Linux bridges, VXLAN encapsulation, node IPAM, and the interactions among kubelet, CRI, and CNI plugins.
This guide walks you through Kyverno, the CNCF‑graduated Kubernetes policy engine, covering its architecture, high‑availability installation, creation of validation, mutation, generation, and cleanup policies, as well as advanced features like variables, JMESPath expressions, and integration with Helm and the Kyverno Playground.
The article analyzes a recent Tencent Cloud outage, detailing the specific API failures, contrasting the limited impact on IaaS services with widespread PaaS disruptions, and argues for multi‑cloud redundancy while critiquing sensationalist news and outdated status‑page expectations.
This article provides a comprehensive overview of etcd—including its origins, role in Kubernetes, version evolution, layered architecture, key terminology, operational commands, monitoring metrics, benchmarking procedures, disk‑performance testing, and tuning recommendations—for building reliable cloud‑native clusters.
This guide explains how to monitor Kubernetes events, differentiate normal and warning events, and use tools like kube-eventer and kube-event-exporter to collect, alert on, and analyze cluster events through webhook, Kafka, Logstash, and Elasticsearch, enabling comprehensive observability and troubleshooting.
This article explains the concept of kube‑on‑kube—creating a Kubernetes meta‑cluster to manage other clusters via declarative APIs—detailing its architecture, controller design, execution flow, and step‑by‑step code walkthrough including CRD definitions, Docker images, and deployment procedures.
This article explains how to use Java Flight Recorder (JFR) and JProfiler for low‑overhead, production‑grade performance analysis, covering JFR advantages, process discovery, file generation commands, JProfiler features, memory and CPU profiling techniques, and includes practical code examples.
Discover 13 practical Kubernetes techniques—including PreStop hooks, automatic secret rotation, ephemeral containers, custom metric autoscaling, init containers, node affinity, taints and tolerations, pod priority, ConfigMaps, debugging tools, resource requests, CRDs, and API automation—to enhance application reliability, scalability, and security in cloud‑native environments.
This guide explains why multi‑cluster deployments are needed for high‑availability, describes Istio's flat and non‑flat network models with single or multiple control planes, and provides step‑by‑step scripts to create Kind clusters, install MetalLB, configure root CAs, deploy Istio, set up gateways, and verify regional load balancing and failover.
Zadig streamlines product delivery by offering a comprehensive version management and release process that guides engineers through creating versions, configuring environments, and executing production deployments for both K8s YAML and Helm Chart projects, enhancing transparency, control, and risk reduction.
