This article explains the A2A (Agent‑to‑Agent) protocol, AgentCard format, service discovery, JSON‑RPC communication, task lifecycle, credential protection, and provides a step‑by‑step Go SDK demo for building and invoking multi‑agent systems on the AgentRun cloud‑native platform.
Kubernetes introduced mutable PersistentVolume node affinity to enable flexible online volume management, allowing administrators to adjust node selectors when storage moves across zones or upgrades, but the feature remains alpha, requires careful coordination, and may introduce scheduling race conditions.
By dissecting CoreDNS’s source code, this article reveals how its minimalist, plugin‑driven architecture serves as a lightweight DNS runtime for Kubernetes, detailing startup flow, Corefile processing, the plugin Handler interface, request chaining via the responsibility‑chain pattern, and the design advantages that suit dynamic cloud‑native environments.
This article explains the evolution from Pika, a RocksDB‑backed Redis‑compatible KV store, to ZestKV’s serverless, storage‑compute separated architecture, detailing design shortcomings, core components, multi‑tenant support, elastic scaling, performance benchmarks, and future roadmap.
This guide explains why image pull authentication is essential in Kubernetes, describes common errors like ErrImagePull, and provides eight practical solutions—from creating Docker registry secrets with kubectl to leveraging cloud IAM integrations, Kustomize, Helm, External Secrets Operator, and CI/CD automation—plus troubleshooting tips and security best practices.
This article explains the fundamentals of the WebSocket protocol, its evolution in AI scenarios, and provides detailed, step‑by‑step guidance on implementing full‑link observability using OpenTelemetry APIs and LoongSuite probes, including code samples for Java, Go, and Python.
This guide shows how to configure Envoy Gateway's URLRewrite filter to transform request prefixes, replace full paths, and rewrite hostnames, providing step‑by‑step YAML examples, kubectl commands, and validation screenshots for microservice integration on Kubernetes.
This guide presents a comprehensive Kubernetes storage learning roadmap, covering core concepts, static and dynamic provisioning, common storage backends, StatefulSets, CSI drivers, operational best practices, security, and emerging solutions, with hands‑on tasks to reinforce each stage.
Learn a step‑by‑step solution to deploy a production‑grade RocketMQ cluster on Kubernetes, covering architecture design with StatefulSets, Helm chart or native YAML configurations, persistent storage, external access, monitoring, security hardening, and one‑click installation commands.
This article demonstrates how to use the Kubernetes Java client to retrieve metrics, manage resources, work with custom resource definitions, and operate both typed and untyped APIs, providing code examples for creating, listing, updating, deleting, and watching Kubernetes objects.
This comprehensive guide explains the fundamentals of CNI plugins, details Calico's architecture and network modes, walks through installation via manifest or Tigera Operator, covers configuration of CIDR blocks, IPIP/VXLAN encapsulation, network policies, and provides step‑by‑step instructions for full deployment and clean uninstallation in Kubernetes clusters.
Kubernetes 1.30 introduces the recursiveReadOnly mount option, turning previously imperfect read‑only volume mounts into fully recursive read‑only mounts, while explaining compatibility requirements, required component versions, and usage examples with YAML manifests.
This article introduces Knative Eventing concepts and core components, then demonstrates three practical usage patterns—Source‑to‑Sink, Channel and Subscription, and Broker and Trigger—through step‑by‑step examples, Kubernetes manifests, and command‑line operations, highlighting event flow, filtering, and reply handling.
This article provides a comprehensive guide to Kubernetes Service networking, covering container network models, intra‑ and inter‑node pod communication, Service‑Pod relationships, Service types (ClusterIP, NodePort, LoadBalancer, ExternalName), CoreDNS resolution, kube‑proxy operating modes, source IP preservation strategies, and Ingress handling.
Facing the complexities of running stateful services like Elasticsearch and ClickHouse in production, Bilibili’s infrastructure team detailed their migration to Kubernetes, describing the architectural design, custom operators, storage provisioning with LVM, network configuration, high‑availability strategies, observability, and the resulting cost, quality, and efficiency gains.
The article examines how CMDB can be combined with cloud‑native container architectures by leveraging Kubernetes init containers, lifecycle hooks (PostStart and PreStop), and an event‑monitoring‑to‑MQ pipeline, discussing the technical rationale, implementation details, advantages, and challenges of each approach.
This article explains why a Huawei OBS CSI plugin loses its s3fs process after a restart, causing "Transport endpoint is not connected" errors, and provides a step‑by‑step solution using client‑go to rebuild the mount and trigger kubelet remount via a liveness probe.
This article analyzes Kubernetes security threats from cloud, cluster, and container perspectives, enumerates high‑risk permissions, default privileged accounts, and insecure configurations, and provides concrete hardening steps such as least‑privilege RAM policies, etcd encryption, RBAC tightening, and workload isolation measures.
Baidu processes trillions of web items by building a deep‑content‑understanding pipeline that tackles massive compute cost and latency through elastic resource pooling, Python‑based model‑service frameworks, multi‑stage scheduling, HTAP storage, and batch‑compute optimizations, enabling real‑time and offline AI services at web scale.
This article explains how to build a Spring Boot‑based service registry that replicates Nacos' core features—service discovery, health‑checking, and dynamic configuration management—by creating server‑side registration APIs, scheduled heartbeat checks, client registration logic, and database‑backed configuration storage.
This article explains the new sidecar feature in Kubernetes 1.28 that adds a restartPolicy field to init containers, describes its behavior, provides usage examples, discusses when to adopt it, outlines migration steps, lists known issues, and invites community feedback.
This article explains the core functions of the Kubernetes Deployment controller, describes how rolling updates and canary releases work, provides a sample Deployment YAML, and demonstrates common kubectl commands for inspecting, updating, and rolling back deployments in a cloud‑native environment.
This article explains how to use a Dockerfile to customize Docker images, covering the purpose of each instruction such as FROM, RUN, COPY, ADD, CMD, ENTRYPOINT, ENV, VOLUME, EXPOSE, and WORKDIR, and provides practical examples and best‑practice tips for building efficient, minimal images.
Didi’s ride‑hailing R&D team addresses efficiency and stability challenges of a large micro‑service ecosystem by unifying a Go stack, common framework, and data models, using eBPF traffic recording for automated regression testing, and applying AIOps alert filtering, knowledge‑graph root‑cause analysis, and a localization robot for rapid fault recovery, while targeting full CI/CD automation with static analysis, service‑mesh observability, and chaos engineering.
Kubernetes 1.27 introduces a beta‑level StatefulSet PVC retention policy that lets users choose when PersistentVolumeClaims created by a StatefulSet are kept or removed, offering four configurable scenarios—Retain or Delete on deletion and scaling—along with practical examples and activation steps.
This article summarizes a speaker’s insights from GOPS 2023 on the challenges of large‑scale container cloud operations and presents a comprehensive intelligent‑ops framework—including health scoring, automated pod anomaly detection, smart scaling, and multi‑center disaster recovery—to improve visibility, efficiency, and reliability in Kubernetes environments.
To enable Bilibili’s cloud‑native migration, the team built a RemoteStateBackend that moves Flink’s keyed state to the Taishan KV store, using deterministic KeyGroup placement, per‑shard snapshots, asynchronous write batching, off‑heap caching with Bloom‑filter filtering, and a fixed‑size memory model, which together reduce checkpoint overhead, improve disk utilization, and accelerate rescaling for more than one hundred production jobs.
This article explains how Kubernetes uses the List/Watch API and the Informer client library to monitor resources, compares direct HTTP Watch with Informer, provides Go code examples for pod controllers, shared informers, custom CRD controllers, and introduces higher‑level frameworks such as controller‑runtime and Kubebuilder.
This article explains the concepts, architecture, configuration, and practical use cases of Kubernetes volume snapshots, including how to define snapshot classes, create snapshots, clone PVCs, and perform consistent backups across different storage providers and clusters.
This article explains the architecture of Prometheus V2, detailing its on‑disk block layout, chunk and index formats, the inverted index mechanism, and how queries locate and retrieve time‑series data, while also covering in‑memory structures and practical usage patterns.
Koordinator v1.1 introduces load‑aware scheduling with workload‑type awareness, percentile‑based resource aggregation, cgroup v2 support, a new LowNodeLoad descheduler plugin for load‑aware rebalancing, expanded performance collectors, ServiceMonitor integration, and detailed configuration examples, aiming to improve latency‑sensitive workloads and overall cluster resource efficiency.
The article chronicles Ximalaya's journey from early Docker-based Java project templates to a mature Kubernetes-driven container platform, detailing development principles, health‑check strategies, deployment workflows, middleware integration, and lessons learned about scaling, automation, and collaborative engineering.
This article introduces common container network scenarios and explains how various Kubernetes CNI plugins—Kube‑OVN, Antrea, Cilium, Calico, Flannel, Submariner, and others—implement these functions, guiding users on selecting and deploying the appropriate plugin with tools like Kubekey for multi‑cluster and policy needs.
KubeAI, GetApp’s cloud‑native AI platform, unifies data set management, notebook‑based and task‑driven model training, automated versioning and deployment, and workflow orchestration, delivering up to 65% faster model iteration and up to 90% lower resource costs for AI teams.
This article explains the key components of the Kubernetes master control plane, the mechanisms of Replication Controllers and ReplicaSets, and the role of kube-proxy in providing service IPs and load balancing across the cluster.
This guide details how to install and configure an NFS server, set up dynamic PersistentVolume provisioning using an NFS StorageClass, and deploy a Redis workload on Kubernetes with appropriate ConfigMaps, PVCs, and Deployment specifications.
This guide walks through installing NFS, configuring PersistentVolumes, PersistentVolumeClaims, and StorageClasses in Kubernetes, explains their key fields and lifecycle, demonstrates dynamic provisioning with an NFS provisioner, and shows how to use the resulting PVC in a pod.
Alibaba's Big‑Taobao team describes how shifting data‑assembly logic to front‑end Function‑as‑a‑Service transformed engineers into business partners, cut integration costs, boosted development speed, and required careful cost‑benefit analysis, incremental migration, traffic safety measures, and a low‑code orchestration platform to ensure stable, scalable adoption.
This article explains how Kubernetes secures its API Server through authentication and authorization, covering user types, authentication methods such as client certificates, bearer tokens, OIDC, and static token files, and then details the RBAC model, role bindings, and service account usage for fine‑grained access control.
The article details Ant Group’s AntMonitor observability platform, covering its development timeline, holographic monitoring capabilities, integrated performance analysis, efficient data integration, built‑in AI‑driven analytics, Monitoring‑as‑a‑Service, and the underlying high‑performance time‑series database and cloud‑native architecture that support massive real‑time data processing.
This article walks through building a custom Kubernetes admission controller in Go that blocks namespace deletion, covering theory of mutating and validating webhooks, detailed code examples, Docker image creation, TLS certificate generation, Kubernetes manifests, deployment steps, and verification of the protection in action.
This article examines the rapid growth of DevOps integrated platforms in China, analyzes the strengths and weaknesses of existing tools, outlines essential capabilities for an enterprise DevOps platform, and proposes a future architecture centered on lightweight IDE integration, containerized services, and comprehensive measurement.
This article explains the fundamentals of DevOps, outlines the full lifecycle including CI/CD and monitoring, compares popular tools for code hosting, pipelines, service discovery and observability, and provides tailored toolchain recommendations for startups, mid‑size and large enterprises based on maturity and scale.
The article analyzes the pain points of cloud‑native application delivery, explains how GitOps—using Kubernetes as a declarative platform and Git as a single source of truth—addresses configuration drift, and demonstrates a practical GitSecOps pipeline built with ArgoCD, Tekton, Kustomize, and SOPS for secure CI/CD.
The article introduces RoP 0.2.0, a redesign of RocketMQ on Pulsar that eliminates message loss, duplicate consumption, and partial partition consumption, adds ACL authentication, partition expansion for higher throughput, native RocketMQ management APIs, refactors MessageID and routing models, and outlines future features such as tracing, delayed messages, and advanced monitoring.
This guide explains what Kubernetes ephemeral containers are, why they’re useful for debugging, how to enable the feature gate, and provides step‑by‑step commands to create, attach to, and manage temporary containers within a pod.
Pika, a disk‑based KV database fully compatible with the Redis protocol, was created by 360 to cut storage costs, has been adopted by major Chinese internet firms, and is now an OpenAtom open‑source project aiming to become a global benchmark for cloud‑native KV databases.
This article explains how SuperEdge extends native Kubernetes with a service‑group mechanism that provides topology‑aware service routing at the edge, compares it with the upstream Kubernetes service‑topology feature, and details the controller, wrapper, cache, and handler implementations with code examples.
This article explains how to back up a Kubernetes cluster by comparing etcd snapshot backups, resource‑level backups with tools like Velero, PX‑Backup and Kasten, and provides practical commands for creating snapshots, schedules, PVC migrations, and hook configurations.
This article analyzes the most influential DevOps trends for 2021, including the rise of DevSecOps, AI‑driven AIOps, infrastructure automation, chaos engineering, serverless adoption, hybrid cloud, GitOps, and edge computing, backed by market forecasts and expert predictions.
This article explains why image pre‑warming is essential for large Kubernetes clusters, describes OpenKruise’s architecture and custom resources (NodeImage, ImagePullJob) that enable cluster‑wide, sidecar, and resource‑pool image pre‑pulling, and outlines upcoming enhancements that combine pre‑warming with in‑place upgrades.
This article provides a comprehensive overview of KubeVirt, a Kubernetes plugin that enables virtual machine management alongside containers, covering its background, technical selection, core concepts, CRDs, component architecture, common operations, storage and networking options, SDK usage, and integration into a private cloud platform.
This article introduces KubeVirt as a Kubernetes plugin for managing virtual machines, compares it with OpenStack and other solutions, explains its CRDs, components, storage and networking options, and provides detailed code examples and SDK usage for deploying and operating VMs in a cloud‑native environment.
OpenKruise’s Advanced DaemonSet extends native Kubernetes DaemonSet with sophisticated rollout controls—node‑level canary selectors, partition‑based quantity pacing, surging updates, and pause capabilities—enabling safe, fine‑grained, high‑availability deployments across massive, heterogeneous clusters, illustrated with concrete YAML examples and API definitions.
This guide explains the difference between Kubernetes UserAccounts and ServiceAccounts, shows how default and custom ServiceAccounts create associated secrets, demonstrates mounting credentials in pods, adds image pull secrets, and walks through RBAC concepts with Roles, ClusterRoles, and bindings to restrict a user to a specific namespace.
Facing monolithic bottlenecks, Alibaba’s Xianyu marketplace embarked on a four‑year serverless transformation—building a Dart FaaS layer, unifying Flutter and backend via the Nexus API, standardizing tooling with GCLI, and cutting development effort by ~30 % and bugs by ~20 %, while tackling Java heterogeneity, environment consistency, and security, and now aims to complete the migration within months.
This tutorial walks you through setting up an NFS‑backed PersistentVolume and PersistentVolumeClaim in a Kubernetes cluster, creating the necessary YAML files, verifying the resources, and mounting the volume in an Nginx pod to serve static content.
This guide explains how Kubernetes uses livenessProbe and readinessProbe to monitor container health, prevent traffic loss, and trigger restarts, covering probe types, implementation methods, configuration parameters, and practical examples with exec, HTTP GET, and TCP socket actions.
This article explains the purpose, structure, and examples of Kubernetes Custom Resource Definitions (CRDs), including validation and status fields, and demonstrates how to create and manage CRDs and their controllers through step-by-step commands and diagrams.
The joint online Serverless course, launched by the Serverless team, Tencent Cloud University and Cloud+ community, offers a February 6 live session with expert Chen Tao covering Serverless architecture and static‑site deployment, interactive Q&A, giveaways, and a concise four‑step guide to install, create, deploy, and invoke applications using the Serverless Framework.
This article provides a detailed walkthrough of the Kubernetes Job controller source code, explaining the flow from kube‑controller‑manager initialization through key functions such as NewJobController, Run, worker, syncJob, and manageJob, and illustrates how informers, workqueues, and expectations coordinate job lifecycle management.
At a Shenzhen Elastic Community meetup, ByteDance senior engineer Huang Yangfeng detailed how his team built an Elasticsearch service platform on Kubernetes—addressing isolation and performance‑analysis challenges, outlining a roadmap for cross‑region recovery, monitoring, and automation, and sharing insights on ecosystem growth and community needs.
The article traces the shift from physical‑server deployments to container‑cloud platforms, defines a newly coined “container ops pattern”, explains its core scenarios, compares declarative and imperative workflows, dissects Kubernetes API objects, controllers, and interfaces (CRI, CSI, CNI), and outlines the master‑node architecture that underpins modern cloud‑native operations.
Alibaba’s Xianyu team replaced costly JNI‑style Java calls with the AliMesh sidecar service‑mesh, decoupling heterogeneous Dart services from Java back‑ends, simplifying code, and achieving modest overhead—under 20 % CPU rise and roughly 1 ms extra latency—while delivering stable, maintainable production performance.
This article explains Kubernetes native NetworkPolicy, covering its purpose, supported CNI plugins, detailed field definitions, default behaviors, example policies, and historical changes, providing a comprehensive guide for configuring pod communication rules in a cloud‑native environment.
This article examines the emerging challenges for I&O teams in 2023, proposes a five‑step strategy for building effective AI‑enhanced automation centers, and outlines how DevOps, containerization, and serverless computing can accelerate AI adoption while improving flexibility, scalability, and operational efficiency.
This tutorial explains how to integrate CephFS storage into Kubernetes by detailing both static and dynamic PersistentVolume configurations, providing YAML examples, command-line steps, and troubleshooting tips for successful multi‑pod read‑write access.
This article traces the evolution of DevOps from its early roots in agile development and the challenges faced by developers and operations teams, through community formation, industry adoption, and the rise of cloud‑native technologies that have shaped modern continuous delivery practices.
This article debunks the ten most frequent Docker misconceptions—ranging from platform limitations and development workflow constraints to debugging and database usage—by explaining why they are inaccurate and providing practical solutions such as using custom Dockerfiles, volume mounts, remote debugging, and proper container management commands.
