Programming, architecture, application development, message queues, middleware, databases, containerization, big data, image processing, machine learning, AI, personal growth.
This article explains the end‑to‑end path that an external HTTP or HTTPS request follows—from the client through DNS resolution, load balancer, ingress controller, service routing, and finally to the target container inside a Kubernetes pod—while also covering optional variations and the underlying network components.
Distributed leader election ensures a single node performs exclusive tasks in high‑availability systems, with common implementations like Etcd, Kafka, Elasticsearch, and Zookeeper using algorithms such as Paxos, Raft, and ZAB, while Kubernetes provides the Lease resource to manage leader election via a distributed lock.
This article walks through the complete Kubernetes workflow from a user‑submitted Deployment request to the creation and scheduling of the resulting Pod, detailing the roles of the control‑plane components, node services, admission webhooks, and the various plugins involved.
This article explains how Kubernetes CustomResourceDefinitions (CRDs) let users create custom resources, how Operators add behavior to those resources, and provides a step‑by‑step Kubebuilder tutorial for scaffolding, generating, and running a simple Foo operator.
This article reviews container fundamentals, explains Docker’s architecture and Linux namespaces, cgroups, capabilities, and security mechanisms, then surveys recent developments such as containerd, CRI‑O, rootless containers, alternative runtimes like Podman, Kata, gVisor, and emerging WebAssembly‑based approaches, highlighting trends up to 2023.
This article explains how JVM heap, metaspace, and other non‑heap memory interact with Kubernetes pod memory requests and limits, demonstrates practical experiments with different heap sizes, and provides guidelines for configuring container‑aware JVM flags and pod resources to prevent crashes and evictions.
This article explains the purpose and phases of Kubernetes Admission Controllers, outlines their security, governance, and configuration management benefits, and provides a step‑by‑step guide—including TLS certificate creation, a Go HTTPS webhook server, and MutatingWebhookConfiguration YAML—to inject a sidecar container into pods.
This article explains the JSON Patch standard (RFC 6902), detailing its purpose, structure, supported operations, ordering and atomicity rules, and provides concrete code examples for add, remove, replace, move, copy, and test operations, including edge‑case handling.
The article analyzes how Cilium’s eBPF‑based architecture, advanced network policies, cluster‑wide traffic control, and observability tools like Hubble solved performance, security, and scalability challenges that Flannel and kube‑proxy could not meet in production Kubernetes environments.
This article explains how Kubernetes uses CPU requests and limits to schedule pods, allocate CPU proportionally, calculate minimal request units, and provides practical guidelines for setting appropriate request and limit values based on workload characteristics and monitoring data.
