This guide walks developers through rapidly onboarding a SpringBoot 3 and Vue‑based e‑commerce system, covering project overview, setup, core features, technology stack, business logic, deployment, and extending the code for new requirements.
This guide details how to automate the full lifecycle of Flink tasks—including environment setup, integration, building, deployment, and task control—using GitLab, Tekton CI/CD, serverless containers on Alibaba Cloud, and Kubernetes, all orchestrated via Feishu cards.
This guide explains how to set up Prometheus and Grafana, create recording‑rules, import ready‑made Kubernetes component dashboards, and fine‑tune them for effective monitoring and visualization of a cloud‑native cluster.
This article provides a comprehensive analysis of Argo Workflows 3.6, covering its enhanced scheduling, UI improvements, controller stability and security upgrades, OSS artifact garbage collection, dynamic template references, expanded expression library, and CLI usability, along with practical YAML examples for each feature.
This article explains how Kubernetes Extended Resources let you define custom resource types, describes the creation, synchronization, and scheduling workflow, highlights the non‑real‑time allocatable status behavior, and discusses practical limitations and the role of Device Plugins and Operators.
This article introduces Jianmu, a lightweight open‑source no‑code/low‑code CI/CD platform for DevOps, explains how to try it online, details Docker‑Compose and Kubernetes deployment methods with required system specifications, and walks through creating and executing the first hello‑world project.
The article examines how native Kubernetes scheduling based solely on resource requests leads to waste and imbalance, compares the open‑source crane‑scheduler and koord‑scheduler architectures, explains practical configuration of Koordinator, and provides step‑by‑step testing procedures to achieve load‑aware scheduling.
This comprehensive tutorial walks you through planning, preparing hardware, choosing deployment methods, and step‑by‑step installation of a highly available Kubernetes cluster using kubeadm and manual binary packages, covering system initialization, certificate generation, component configuration, CNI networking, and cluster verification.
This guide walks you through essential kubectl commands for checking cluster status, inspecting resources, retrieving detailed object information, monitoring logs, managing configurations, labeling, and performing create, update, and delete operations, empowering you to efficiently view, troubleshoot, and control Kubernetes workloads.
This guide walks you through setting up a comprehensive Kubernetes monitoring solution—covering component metrics collection, configuring HAProxy for network access, exposing metrics from kube-proxy, Calico, and kube-state-metrics, and integrating everything into Prometheus for reliable cluster health visibility.
This guide introduces Docker’s architecture, advantages over virtual machines, key components such as Daemon, Images, Containers, CLI, Dockerfile, Compose and Swarm, then explains Kubernetes fundamentals, its architecture, core objects like Pods, Volumes, Deployments, Services, Namespaces, and how they interact through the API.
This article outlines the multifaceted challenges of cross‑cloud container service migration—including data security, service interruption, compatibility, and storage complexities—and demonstrates how Alibaba Cloud ACK's Backup Center can address these issues through comprehensive backup, selective restoration, and automated resource adjustments.
This article provides an in‑depth tutorial on Apollo, Ctrip’s open‑source distributed configuration center, covering its concepts, features, four‑dimensional model, client architecture, deployment steps, SpringBoot integration, Kubernetes deployment, and practical testing scenarios for real‑time configuration updates.
This article provides a comprehensive overview of Argo Workflows 3.6, covering its core architecture, primary use cases, and detailed explanations of new capabilities such as enhanced CronWorkflow scheduling, UI improvements, controller optimizations, OSS artifact garbage collection, dynamic template references, expression library updates, and CLI usability enhancements.
This article explains the core Kubernetes Node lifecycle—including registration, status updates, lease management, heartbeat mechanisms, and health monitoring—detailing how kubelet interacts with the API server, configuration options, and node-controller behavior for handling failures and graceful node shutdown.
This article examines the challenges and benefits of running stateful services such as Redis on Kubernetes, presents Kuaishou’s practical experience with cloud‑native migration, evaluates risks and performance impacts, and details the custom workloads, operators, federation and KubeBlocks solutions that enable large‑scale, reliable stateful service orchestration.
This guide walks you through installing the OB‑Operator, preparing Kubernetes prerequisites, deploying the operator and an OceanBase cluster, and verifying the deployment, providing practical commands and configuration examples for a production‑ready setup.
Learn how to deploy stateful databases such as MySQL, PostgreSQL, and MongoDB on Kubernetes by mastering StatefulSets, PersistentVolumes, PVCs, StorageClasses, and related best practices for storage, scaling, backup, monitoring, and disaster recovery.
This guide explains how ACK One enables fast, Git‑free distribution of Kubernetes application resources from a single fleet cluster to multiple target clusters, covering the required CRDs, policy definitions, step‑by‑step YAML examples, and migration from single‑cluster to high‑availability multi‑cluster deployments.
This guide explains what Node Exporter is, why it’s essential for enterprise monitoring, how to deploy and configure it on Kubernetes, and how to visualize its metrics in Grafana, providing a complete step‑by‑step solution for robust cloud‑native observability.
This article explains how Kubernetes, through the Kubelet and CRI components such as containerd and cri‑o, pulls container images, stores them on the node, and performs periodic garbage collection based on configurable age and disk‑usage thresholds.
This article explains TiDB’s distributed relational database architecture, compares Kubernetes‑based and physical‑machine deployments, and describes Zhihu’s platform‑driven approach—including TiDB Operator, TiUP, self‑service tooling, monitoring, backup, security, and FinOps—to enable efficient database management for both developers and DBAs.
Kubernetes v1.31 fixes a long‑standing bug where deleting a PVC did not always free the underlying storage, by making the PersistentVolume reclaim policy reliably enforced as a default beta feature, and provides guidance for upgrading and remediation on older versions.
This guide walks you through installing Grafana via Helm, configuring its values, deploying the service, verifying the deployment, and adding a Prometheus data source, enabling a fully functional monitoring dashboard for servers and networks.
This article describes how Huolala built a cloud‑native AI development platform called Dolphin to overcome low model delivery efficiency and poor compute‑resource utilization, detailing its architecture, one‑stop workflow, resource‑pooling, observability, and future roadmap for scaling AI across the company.
This article explains why pod scheduling is critical in Kubernetes and walks through practical techniques such as node selectors, affinity/anti‑affinity rules, taints and tolerations, priority classes, preemption, and custom scheduling strategies, complete with real YAML examples and command‑line demos.
This article provides a step‑by‑step tutorial on Apollo, Ctrip’s open‑source distributed configuration center, covering its core concepts, features, architecture, four‑dimensional model, project creation, Maven dependencies, Spring Boot configuration, test controllers, various runtime scenarios, cluster and namespace usage, and deployment on Kubernetes with Docker.
This article introduces OpenYurt, a CNCF‑sandbox cloud‑native edge solution built on Kubernetes, explains its autonomous edge capabilities, multi‑region workload and service models, traffic‑optimisation features, and outlines the enterprise‑grade ACK Edge product with real‑world deployment scenarios and case studies.
This article details the end‑to‑end architecture of a high‑traffic business middle platform, covering business and technical design, Kong API Gateway, SpringBoot microservices, Dockerfile creation, MyCat‑MySQL sharding, cold/hot data strategies, DevOps pipelines, Kubernetes deployment, and operational monitoring.
Koordinator is a QoS‑based Kubernetes scheduler that boosts efficiency and reliability for latency‑sensitive services and batch jobs, offering fine‑grained resource coordination, flexible priority classes, load‑aware scheduling, and integrated monitoring tools to maximize cluster utilization.
This guide walks you through the fundamentals of Prometheus, its architecture, and detailed Helm‑based deployment and validation steps on a Kubernetes cluster, enabling reliable monitoring for cloud‑native environments.
This article explains how Kubernetes manages and schedules GPU resources by introducing the Device Plugin framework, the Container Device Interface (CDI), Node Feature Discovery (NFD), and the GPU Operator, detailing their workflows, APIs, and practical usage with NVIDIA GPUs.
This article provides concise answers to common DevOps interview questions, covering Linux boot processes, Kubernetes container execution, Git operations, Jenkins pipelines, DNS, networking, monitoring with Prometheus and Grafana, databases, SQL indexing, and collaboration and leadership scenarios.
This article details a comprehensive engineering practice for optimizing AI inference services at ZhiZhuan, covering background analysis, selection of TorchServe over alternatives, GPU/CPU performance tuning, custom handlers, Torch‑TRT integration, and deployment on Kubernetes, with measured improvements in throughput and resource utilization.
This article compares a cloud‑provider’s closed‑source Batch compute service with the open‑source, serverless Argo Workflows platform, demonstrating how each can orchestrate multi‑stage containerized data‑processing pipelines, detailing configuration, job definitions, dependency handling, and operational trade‑offs.
This article presents a comprehensive list of 17 in‑depth DevOps interview questions asked by a Swedish company, covering Linux boot processes, Kubernetes internals, Git workflows, Jenkins pipelines, networking, monitoring, databases, Docker, and soft‑skill topics to help candidates prepare effectively.
This guide explains how to deploy the Dify LLMOps platform on Alibaba Cloud Container Service for Kubernetes (ACK), configuring cloud databases, enabling high‑availability replicas, setting up elastic scaling, and exposing the service via Ingress to create a production‑grade, scalable AI application environment.
This article provides an in‑depth tutorial on Apollo, Ctrip's open‑source distributed configuration center, covering its concepts, features, architecture, four management dimensions, client design, Maven integration, SpringBoot implementation, testing procedures, and deployment on Kubernetes with Docker.
This article explains the concept of R&D efficiency, introduces container technology and its isolation mechanisms, and details how containers—through micro‑service decomposition, automated CI/CD pipelines, and dynamic orchestration—can dramatically improve development speed, quality, and operational cost in modern software engineering.
This article details the engineering practice of optimizing TorchServe‑based AI inference services, covering background challenges, framework selection, GPU‑accelerated Torch‑TRT integration, CPU‑side preprocessing improvements, and deployment on Kubernetes to achieve higher throughput and lower resource consumption.
This guide introduces nine commonly used kubectl commands—get, create, edit, delete, apply, describe, logs, exec, and cp—explaining their purposes, providing practical examples, and offering tips to help system administrators streamline Kubernetes resource management and troubleshooting.
This guide explains what Kubernetes VPA is, its architecture, version compatibility, step‑by‑step installation, certificate setup, manifest generation, practical VPA configuration, validation procedures, performance testing, and known limitations, enabling you to optimize pod resources in cloud‑native clusters.
The article details the design and deployment of 360's AI Compute Center, covering GPU server selection, high‑performance networking, Kubernetes‑based cluster management, advanced scheduling, training and inference acceleration techniques, and a comprehensive AI development platform with visualization and fault‑tolerance features.
This guide explains the core concepts of Linux namespaces and Cgroups, shows how Kubernetes pod specifications use CPU requests and limits, and provides step‑by‑step commands and parameter details for configuring Cgroup settings to restrict container CPU consumption.
This article explains why, in containerized Java applications, the JVM flag -XX:+ExitOnOutOfMemoryError is generally preferred over -XX:+HeapDumpOnOutOfMemoryError, detailing the trade‑offs, operational benefits, and how Kubernetes probes and monitoring can ensure fast failure, rapid recovery, and user‑transparent service continuity.
Tencent’s X‑Stor is a cloud‑native, multi‑model NoSQL database that consolidates heterogeneous data stores, improves resource utilization, and scales to petabytes and billions of requests, as detailed in a VLDB paper describing its architecture, workload management, and performance advantages over MongoDB, Redis, and ArangoDB.
This tutorial walks you through connecting a test machine, downloading and installing Istio 1.8.6, configuring environment variables, deploying the BookInfo sample application, verifying pods and services, setting up inbound traffic, exposing dashboards, and introduces Istio’s core traffic‑management capabilities.
This guide explains what Kubernetes Horizontal Pod Autoscaler (HPA) is, how it works, its key features, and provides step‑by‑step configuration, verification, and scaling policy details with practical code examples for cloud‑native applications.
This article explains how Kubernetes leverages the Linux kernel security mechanisms Seccomp, AppArmor, and SELinux together with Pod Security Standards and the built‑in admission controller to enforce fine‑grained security policies for container workloads in cloud‑native environments.
This article details the design and implementation of 360’s AI Computing Center, covering server selection, network topology, Kubernetes scheduling, training and inference acceleration, and the AI platform’s core, visualization, and fault‑tolerance capabilities for large‑scale AI workloads.
Kubernetes v1.31 "Elli", released after the project’s ten‑year anniversary, introduces 45 enhancements—including 11 stable, 22 beta and 12 alpha features—spanning AppArmor GA, nftables support, multi‑Service CIDR, a new DRA API, image‑as‑volume, CPUManager improvements, and several deprecations and removals to streamline the platform.
This article details how a solo engineer built and operated a SaaS platform on AWS using Kubernetes, covering infrastructure overview, automatic DNS, TLS, load balancing, CI/CD rollouts, autoscaling, caching, secret management, monitoring, logging, error tracking, and cost‑effective operations.
When Kubernetes certificates expire, the cluster becomes unusable; this guide explains how to check certificate expiration, renew the affected certificates with kubeadm, verify the updates, and restart control‑plane components to bring the cluster back online, including HA considerations.
This guide explains what the Kubernetes Metrics Server is, its key use cases such as autoscaling, health checks, and cost optimization, and provides step‑by‑step Helm commands to install, configure, and verify it in a cloud‑native cluster.
This article compares kubeadm and binary installations, evaluates network plugins, storage solutions, Helm, CI/CD tools, ingress controllers, monitoring platforms, observability frameworks, and Istio, providing practical guidance for selecting the most suitable components in a Kubernetes environment.
This tutorial explains how to use cert‑manager with a configured ClusterIssuer to automatically request, view, and clean up TLS certificates for both direct Certificate resources and Ingress objects in Kubernetes, including step‑by‑step commands, code examples, and best‑practice tips.
This article introduces MetalLB, an open‑source load‑balancing solution for self‑managed Kubernetes clusters, explains its deployment requirements, operating principles, Layer 2 and BGP modes, and provides step‑by‑step installation and verification instructions using Kubernetes manifests, Helm, and Kustomize.
Learn how to configure a Kubernetes Ingress controller to expose and route external web services into your cluster, covering prerequisites, Service and Ingress resource creation, verification via curl and browser, and reference documentation, enabling unified network management in cloud‑native environments.
This guide walks you through the fundamentals of cert-manager in Kubernetes, explaining the difference between Issuer and ClusterIssuer, and provides step‑by‑step commands to create self‑signed, CA, and ACME issuers, verify them, and reference official documentation for secure certificate automation.
This guide explains how enterprises can overcome IDC data‑center capacity limits by leveraging Alibaba Cloud ACK One registration clusters to achieve flexible, cost‑effective elastic scaling, detailing architecture, registration steps, node‑pool creation, virtual nodes, multi‑level scheduling, and associated command‑line examples.
This article presents a comprehensive overview of high‑availability design patterns and best‑practice recommendations for Alibaba Cloud Container Service for Kubernetes (ACK), covering common error scenarios, single‑cluster and multi‑cluster architectures, workload resilience, monitoring, and real‑world case studies.
This article shares Soul's two‑year practice of using the cloud‑native Envoy proxy for high‑performance, high‑throughput, and highly available traffic management across north‑south and east‑west flows, covering architecture, dynamic service discovery, load balancing, health checks, WASM extensions, service‑mesh integration, Redis proxying, and future directions.
This guide explains how enterprises can overcome IDC data‑center capacity limits by registering on‑premises Kubernetes clusters to Alibaba Cloud ACK One, detailing architecture, resource‑elastic benefits, step‑by‑step integration, node‑pool creation, GPU script setup, virtual node deployment, and multi‑level scheduling with concrete commands.
This article explains the fundamentals of Service Mesh and Istio, covering their architecture, control‑plane and data‑plane components, deployment modes, key capabilities such as traffic control and security, and the interaction workflow that enables modern cloud‑native microservice environments.
This article explains the architecture, components, and operational flow of a CSI driver using NFS as a concrete example, covering CSI fundamentals, sidecar containers, dynamic volume provisioning, pod creation, and the role of the Linux VFS in exposing remote storage to applications.
The presentation outlines Alibaba Cloud's ACK container service observability framework, covering its architecture, key capabilities such as eBPF‑based tracing, GPU profiling, network diagnostics, storage monitoring, and FinOps integration, and demonstrates how these features support AI workloads, large‑scale production stability, and automated incident response.
This guide walks you through installing Krew, the kubectl plugin manager, then shows step‑by‑step offline installation of the ingress‑nginx plugin and demonstrates key commands for inspecting backends, certificates, and generated Nginx configurations, empowering efficient Kubernetes cloud‑native operations.
Soul's container cluster cost governance case study details their approach to optimizing resource utilization through Kubernetes-based solutions, addressing challenges like resource fragmentation and implementing strategies such as SNAS for elastic scaling and HPA+CronHPA coordination to achieve significant cost reductions.
The article examines the scheduling performance and tight coupling issues of Kubernetes DRA before version 1.30, explains the original workflow involving PodSchedulingContext and DRA driver, and then details the latest design that introduces ResourceClaimParameters and ResourceSlice to let the scheduler handle complex device constraints internally.
Debugging Kubernetes components is challenging due to version mismatches, service dependencies, and IDE limitations; this guide outlines two practical methods—log‑based analysis with redeployed services and direct IDE debugging—while detailing environment setup, local and remote development workflows, and testing procedures.
This article explains the fundamental principles of Docker containerization and Kubernetes orchestration, covering containerization, image layering, core components, declarative APIs, Pods, Services, Namespaces, ConfigMaps, Secrets, Volumes, and their combined advantages and challenges for enterprise‑level system design.
This article dissects Kubelet's Pod admission pipeline, explaining how syncLoopIteration gathers pod data, how HandlePodAdditions invokes canAdmitPod, and how six registered admit handlers—Eviction, System Allowlist, Resource Allocation, Predicate, AppArmor, and Shutdown—evaluate each pod with concrete code examples and decision logic.
Learn step‑by‑step how to install Jetstack’s open‑source cert-manager on a Kubernetes cluster using Helm, from prerequisites and chart download to configuring TLS settings and deploying the service, ensuring secure inter‑service communication in cloud‑native environments.
This article explains the Open Container Initiative (OCI) standards—Image-spec, Distribution-spec, and Runtime-spec—detailing how code is built into OCI images, pushed to registries, and executed via Kubernetes components such as kubelet, containerd/CRI‑O, and runc or kata‑containers, ensuring portable, interoperable containers.
Learn how to configure Ingress‑Nginx in a running Kubernetes cluster for secure mTLS and HTTPS communication, covering prerequisites, certificate creation, deployment of HTTP and mTLS services, Ingress rules, SSL passthrough setup, and verification steps with practical kubectl and OpenSSL commands.
This article compares the classic ELK stack, the container‑friendly EFK stack, and the emerging PLG stack (Promtail + Loki + Grafana), outlining their components, architecture, and trade‑offs for log collection, storage, and visualization in Kubernetes deployments.
This guide provides a step‑by‑step tutorial for installing MiniKube on RHEL 8, covering system updates, required dependencies, Docker and kubectl installation, MiniKube binary setup, cluster startup, verification, and optional add‑ons, ensuring a functional local Kubernetes environment.
This article details the evolution of a high‑traffic API automation testing platform, covering challenges such as multi‑environment isolation, execution speed, quality assessment, and stability, and explains how the team leveraged Kubernetes, Rancher, Tekton, precise testing, and modern reporting to dramatically improve efficiency and reliability.
The article outlines four ways to extend the Kubernetes scheduler—Scheduler Extender, Scheduler Framework, deploying multiple schedulers, and a WebAssembly‑based plugin model—detailing their mechanisms, configuration steps, advantages, and drawbacks.
This article provides a step‑by‑step tutorial on Apollo’s concepts, features, model, namespace handling, client design, high‑availability considerations, project creation, configuration management, Spring Boot client implementation, testing across environments, clusters and namespaces, and deployment on Kubernetes with Docker.
This article explains how the kubectl command interacts with the Kubernetes control plane, detailing one‑way HTTPS requests and two‑way WebSocket communications, and walks through the full execution flow of a kubectl exec command across kube‑api‑server, kubelet, and the CRI runtime.
This tutorial walks you through preparing two Ubuntu servers, configuring Docker, installing Rancher 2.6.9, deploying a Kubernetes master and worker nodes via Rancher’s UI, and validating the cluster with an Nginx workload, all with detailed commands and screenshots.
Cloud native architecture, a modern design paradigm leveraging containers, microservices, CI/CD, and infrastructure-as-code, enables flexible, scalable, and automated applications; this article explores its definition, evolution, core technologies, maturity models, benefits, challenges, and best practices for enterprises transitioning from traditional systems.
This tutorial explains why CORS is needed for modern web applications, outlines common scenarios such as front‑end/back‑end separation and third‑party API integration, and provides a complete Ingress Nginx configuration with code examples to enable cross‑origin requests in a Kubernetes cluster.
This comprehensive guide walks you through the origins, architecture, core components, and practical workflows of Kubernetes, explaining how Pods and Deployments work together, how the control plane orchestrates resources, and how to create, manage, and troubleshoot containerized applications at scale.
This article explains how the TAI platform leverages Kubernetes and Volcano to tackle fault, efficiency, and usability challenges in large‑model training and inference, detailing custom resources, automated fault detection, and advanced scheduling strategies that boost resource utilization and performance.
This tutorial walks through setting up a local k3d cluster, installing Higress, and using its AI plugins—including AI Proxy, AI JSON formatter, AI Agent, and AI Statistics—to integrate and observe Alibaba Cloud's Qwen large language models across various use cases such as weather and flight queries.
This article dissects Kubelet's ImageManager and ImageGCManager, detailing their interfaces, implementation structs, pull‑policy handling, parallel image pulling, GC policy thresholds, and the step‑by‑step execution flow that governs image lifecycle on a node.
This article explains the fundamentals of DNS, its role as an application‑layer protocol, and how Kubernetes generates and manages each pod's /etc/resolv.conf through kubelet, covering nameserver, search, ndots options, dnsPolicy choices, and custom dnsConfig examples.
This article introduces three major log management stacks—ELK, EFK, and PLG (Promtail + Loki + Grafana)—explaining their components, deployment scenarios, and provides a detailed comparison of their storage, indexing, and visualization approaches, especially in Kubernetes environments.
The article surveys open‑source GPU sharing and virtualization approaches for AI workloads, comparing soft isolation, CUDA‑level isolation, NVIDIA MPS, driver‑level isolation, GPU pooling and deep‑learning memory sharing, and highlights their architectures, isolation guarantees, and performance trade‑offs.
This article explores how Kubernetes enables AI workloads at the edge, detailing the challenges of edge environments, the need for sensors and data processing, hybrid VM‑container solutions, and future AI use cases that drive local, real‑time insights.
This guide walks through exposing the nginx‑ingress metrics port, configuring static scrape jobs, and using a ServiceMonitor CRD to dynamically collect ingress metrics with Prometheus in a Kubernetes cluster, including all required YAML snippets and verification steps.
In an interview, Alibaba Cloud’s distributed cloud‑native platform lead explains how distributed cloud‑native addresses elasticity, high‑availability, and multi‑cluster management challenges, outlines the evolution of ACK One, and forecasts its role in AI and edge computing for modern enterprises.
This article explains Kubernetes' container networking fundamentals, covering the basic network requirements, IPAM implementation with node CIDR allocation, Linux veth and bridge mechanisms, overlay solutions like VXLAN, and the role of BGP for cross‑cluster pod reachability.
Learn how to implement safe, incremental releases using Canary deployment with the Ingress Nginx Controller, covering traffic-splitting strategies based on headers, cookies, and service weight, detailed annotation configurations, and practical YAML and curl examples for verification.
The article outlines a comprehensive, bottom‑up learning path for containers, covering Linux container fundamentals, images, runtimes, managers, orchestrators, and non‑Linux implementations, while clarifying common misconceptions, explaining how runtimes like runc work, and comparing Docker, containerd, and Kubernetes.
This article explains the NodeLocal DNSCache solution for Kubernetes, describing how it reduces CoreDNS load, improves DNS query performance, and provides step‑by‑step deployment instructions with configuration examples and command‑line snippets for both IPTABLES and IPVS proxy modes.
This guide walks through integrating a Ceph cluster with a Kubernetes cluster to use Ceph as backend storage, covering prerequisites, pool and secret creation, StorageClass definition, PVC and pod deployment, and detailed troubleshooting steps for common errors.
This article explains how Spring Boot handles graceful shutdown in Kubernetes, manual Actuator shutdown, SIGTERM handling, Tomcat graceful termination, and Logback log flushing, providing detailed code examples, configuration snippets, and the underlying shutdown hook mechanisms that ensure resources are released cleanly.
