This guide walks through Kubernetes Deployment controllers, showing how to generate YAML templates, manage replica counts, apply dynamic scaling with Horizontal Pod Autoscaler, and perform rolling image upgrades and rollbacks, all with practical command‑line examples.
By deploying eBPF agents as DaemonSets that hook kernel network and performance events, the Xiaohongshu observability team extended cloud‑native monitoring from the application to the kernel, delivering real‑time traffic analysis and low‑overhead continuous profiling for C++ services, aggregating data into centralized collectors for dashboards, flame‑graphs, and rapid root‑cause diagnosis.
This guide outlines practical strategies for designing and optimizing network and storage in Kubernetes clusters of over 5,000 nodes, covering overlay networks, IP pool segmentation, bandwidth allocation, load balancing, security policies, distributed storage options, performance tuning, and reliable backup solutions.
This guide explains why URL rewriting is essential for security, performance, content transformation, load balancing, session persistence, and cache optimization, and provides step‑by‑step Ingress Nginx Controller configurations to reduce, add, or set root paths for Kubernetes services.
When a new Pod is created, Kubelet coordinates with the CRI and CNI components to set up the sandbox, configure networking, pull images, create and start containers, using gRPC calls and command‑line interactions, with details varying across container runtimes such as containerd, cri‑o, and Docker.
This article explains how Kubernetes uses the device‑plugin framework to extend resources beyond CPU and memory, details the kubelet registration and allocation workflow, and walks through the relevant source code in pkg/kubelet/cm/devicemanager that builds the OCI spec.
This step‑by‑step guide explains how to use Helm to install a highly available ingress‑nginx controller on Kubernetes, covering version compatibility, replica configuration, pod anti‑affinity, load‑balancer setup with HAProxy, and verification of the deployment.
Talos Linux is a minimalist, immutable operating system built specifically for Kubernetes, offering a reduced attack surface, read‑only filesystem, and tight integration that simplifies deployment, management, and security for production clusters, edge computing, and cloud‑native development environments.
This guide details three online TiDB migration scenarios—including placement‑rule replica placement, TiCDC with BR backup, and hybrid strategies—covering preparation, network and resource requirements, configuration commands, region balancing, PD leader transfer, and post‑migration cleanup for seamless cross‑data‑center database relocation.
This guide compiles 100 practical kubectl commands covering cluster info, pod, service, deployment, storage, networking, RBAC, scaling, and many other diagnostics, helping you quickly troubleshoot and manage Kubernetes clusters with confidence.
This article explains how to use the nsenter tool to enter a container's network namespace for packet capture and other host‑level debugging, provides scripts for logging into Kubernetes nodes, shows a DaemonSet deployment for persistent access, and compares nsenter with the newer kubectl debug temporary container approach.
This article walks through upgrading the Mall‑Swarm microservice e‑commerce project to Spring Boot 3, Spring Cloud 2023, JDK 17, and related dependencies, covering architecture, version changes, permission solution migration, documentation updates, Elasticsearch usage, and deployment on Windows and Linux.
Quickwit is a Rust‑based distributed search engine that enables sub‑second queries directly on cloud object storage, and its documentation details the architecture, core concepts, installation, data ingestion, log management, tracing, deployment options, configuration, and operational best practices.
The article dissects Kubelet’s VolumeManager, detailing its asynchronous loops, the VolumeManager interface, how it is started from Kubelet.Run, the handling of Attach/Mount and Unmount operations during pod sync, the internal struct fields, and the plugin initialization process that together manage the full lifecycle of pod volumes.
This article examines Lilith Games' cloud‑native migration of the new title AFK Journey, detailing the motivations, technical challenges of containerizing stateful game servers, the adoption of OpenKruise for in‑place updates, and the measurable improvements in resource utilization, release speed, and operational costs.
This article dissects Kubelet's core data structures—podManager, podWorkers, and workQueue—explaining how they store and synchronize regular pods, static pods, and mirror pods, and detailing the lifecycle steps for pod creation, deletion, and cleanup.
OpenKruise v1.7, released in August 2024, upgrades its Kubernetes dependency to 1.28 and introduces features such as native Sidecar container support in SidecarSet, start ordinal configuration for Advanced StatefulSet, image‑preheat credential plugins, external CA injection, and structured logging, while maintaining compatibility with clusters running Kubernetes ≥ 1.18.
Learn how Kubernetes creates Pods, the role of the pause container, the sequence of init containers, main container startup, readiness and liveness probes, and detailed examples of init container configuration, execution, and troubleshooting to ensure reliable pod initialization.
This article explains how Kubernetes manages inbound traffic using Ingress and the newer Gateway API, compares their features and limitations, provides YAML examples for Ingress, GatewayClass, Gateway, and Route resources, and discusses the future direction of traffic management in cloud‑native environments.
OPPO transformed its sprawling, manually‑provisioned middleware clusters into a cloud‑native, containerized platform by building custom Kubernetes controllers, IP‑preserving StatefulSets, resource‑isolated containers, automated monitoring and self‑healing workflows, enabling rapid provisioning, efficient utilization, fault‑tolerant scaling and future serverless and service‑mesh integration.
This article examines the rapid rise of GPU virtualization as a solution for efficient GPU resource utilization in AI, big data, and high‑performance computing, detailing its concepts, implementation methods across user, kernel, and hardware layers, Kubernetes integration, real‑world use cases, challenges, and emerging research trends.
The article explains that the apparent probeCh in kubelet is actually three separate channels—livenessCh, readinessCh, and startupCh—managed by livenessManager, readinessManager, and startupManager, details the ProbeManager implementation that creates probe workers via AddPod, and shows how syncLoopIteration processes probe updates to adjust pod status.
This article explains why CoreDNS may experience DNS resolution timeouts in a Kubernetes cluster, how to analyze logs and timeout settings, locate upstream DNS problems, and apply practical solutions such as adjusting timeout values, switching upstream DNS servers, and deploying a local DNS service.
This article provides a comprehensive overview of Kubernetes (K8S), covering its origins, key problems it solves, master‑node architecture, core components such as kube‑apiserver, scheduler, controllers, node agents, and practical applications like CI/CD integration, multi‑tenant and micro‑service deployments.
The two‑year iLogtail community survey reveals that high performance, container‑friendly design, and a rich plugin ecosystem drive adoption, while users request better documentation, a more active development roadmap, and improved configuration tools to boost community participation and ecosystem growth.
This article dissects the kubelet source code, explaining how the Pod Lifecycle Event Generator (PLEG) works in both GenericPLEG and EventedPLEG modes, how events are streamed, processed, and fed into syncLoopIteration, and how the kubelet reacts to container lifecycle changes.
This article provides a comprehensive overview of Prometheus, covering its architecture, suitable and unsuitable use cases, data model with TSDB and WAL, metric types, PromQL query language, and practical examples for monitoring CPU, memory, and disk usage in Kubernetes environments.
The document introduces Joylive Agent, a Java bytecode‑enhancement framework that implements a proxyless service‑mesh architecture, detailing its microkernel design, plugin system, request abstraction, core governance features such as multi‑live routing, lane management, and providing implementation examples and Kubernetes deployment guidance.
Kubernetes 1.31 adds an alpha‑stage ‘distribute-cpus-across-cores’ option to the CPUManager static policy, allowing CPUs to be spread across physical cores for better cache locality, reduced contention, and improved performance in multi‑core and performance‑sensitive workloads.
The article dissects kubelet's podUpdateCh, explaining how it ingests pod data from file, URL, and the API server, the Linux‑only file watch, periodic full scans, merging logic, and the underlying code paths that push updates into the channel.
This guide explains how to secure container images by integrating the Trivy vulnerability scanner into the Harbor registry, covering Helm configuration, offline database setup, automated updates via cron, verification steps, and useful references for a robust cloud‑native security workflow.
The article dissects the kubelet architecture, detailing its main syncLoop control cycle, auxiliary loops, and key managers such as podManager, podWorkers, evictionManager, probeManager, and runtime components, while explaining how pod updates, PLEG mechanisms, and various channels coordinate pod lifecycle and resource handling.
This article explains the history and evolution of Docker and Containerd, compares their architectures and functions, and discusses how Containerd operates independently within cloud‑native environments such as Kubernetes.
After a power outage caused a PostgreSQL instance running in Kubernetes to fail with connection errors and an invalid primary checkpoint record, this guide explains how to diagnose missing socket files, inspect process IDs, use pg_resetwal to repair the checkpoint, and successfully restart the database.
This guide walks through installing Prometheus on a Kubernetes cluster, customizing alert rules, handling service exposure, and diagnosing common Alertmanager connection issues by inspecting CoreDNS and CNI configurations, offering practical solutions for reliable cloud‑native monitoring.
This guide walks you through configuring Harbor and Docker Registry replication, covering background considerations, creating replication repositories and rules, manual sync triggers, and reference resources, so you can keep container images up‑to‑date and secure.
This article explains how to design and implement a Kubernetes platform inspection system that combines Bash scripts and Prometheus queries to monitor cluster health, core component status, and node resources, providing actionable alerts and a flexible automation framework.
At KubeCon + CloudNativeCon 2024 in Hong Kong, JD Cloud presented its cross‑cluster, large‑scale application management practice, detailing a federated Serverless model that oversees over 10,000 nodes, improves resource utilization, simplifies multi‑cluster scheduling, and offers efficient elastic scaling solutions.
Learn step‑by‑step how to set up a production‑grade, highly available Harbor container registry on a Kubernetes cluster using Helm, covering prerequisites, architecture, chart installation, TLS certificate creation, secret management, PostgreSQL setup, and verification procedures.
This article explains how the minimalist philosophy of containers leads to missing tools, discusses early ideas of host‑based debugging, and shows how Kubernetes introduced the kubectl debug command with temporary containers to run any missing binaries directly inside pods.
This article compiles the latest 2024 IT operations interview collection, offering over 400 questions—including 108 shell script, 128 Kubernetes, 51 Docker, and 88 Jenkins queries—to help professionals bridge knowledge gaps and ace promotions, job changes, and technical interviews.
This guide explains why a default StorageClass matters in Kubernetes, shows how to set one as default, verify it, and create a PVC that automatically uses the default class, complete with command‑line examples and tips.
From zero‑to‑hero in 2021, a Shanghai tech firm designed, selected, and implemented a full‑stack Cloud‑Native DevOps solution on Alibaba Cloud, covering project management, GitFlow, CI/CD pipelines, multi‑environment image promotion, infrastructure‑as‑code, and monitoring to support hundreds of micro‑services.
To prevent service disruption caused by overly aggressive or sluggish Kubernetes liveness and readiness probes, this guide shows how to implement a custom health‑check script that periodically tests a service endpoint, exits the container on failure, and lets Kubernetes automatically restart the pod.
This tutorial walks you through creating Ceph RGW users, configuring Kubernetes secrets, deploying the CSI‑S3 driver, setting up a storage class and persistent volume claim, and verifying the integration, while highlighting experimental status and important tips for production use.
This tutorial walks through creating CephFS pools, configuring Ceph CSI drivers, setting up Kubernetes resources, and verifying static and dynamic provisioning of CephFS storage for containers, complete with command‑line examples and practical tips.
This article explains why mastering Kubernetes is key to cloud computing, outlines its rapid growth and ecosystem support, and provides practical steps, design‑pattern guidance, and community resources for effectively reading and understanding the Kubernetes source code.
This article details the design, implementation, and production rollout of a container VPC solution that leverages ipvlan for CNI, a custom IPAM integration with OpenStack/Ultron, and extensive operational fixes to achieve reliable, high‑performance networking for Kubernetes workloads across multiple clusters.
The author recounts a sudden CPU spike on a Kubernetes pod caused by excessive JVM garbage collection, walks through step‑by‑step diagnostics using top, thread inspection, jstack, and network file transfer, identifies a flawed Excel export loop, and shares the fix and lessons learned.
This article reviews five leading open‑source storage solutions for Kubernetes—OpenEBS, Rook, GlusterFS, Ceph, and LongHorn—detailing their architectures, key features, and ideal use‑cases to help readers select the most appropriate storage option for various application requirements.
Kubernetes aligns perfectly with AI inference demands by offering built‑in scalability, resource and performance optimization, seamless portability across clouds, and robust fault‑tolerance, making it a cost‑effective, high‑availability foundation for deploying large‑scale machine‑learning models.
This tutorial walks you through configuring static and dynamic Ceph RBD storage for Kubernetes, covering version compatibility, required Ceph pool setup, CSI configuration, deployment of provisioner and node plugins, and validation with a PVC and pod, all with detailed command examples.
This article explains the challenges of updating ConfigMaps and Secrets in cloud‑native environments, compares env and volume injection methods, and demonstrates how the open‑source Reloader tool can automatically watch changes and trigger rolling updates for deployments, statefulsets, and other workloads.
This guide walks you through deploying large language models with NVIDIA NIM on Volcengine's Kubernetes Engine (VKE), covering environment setup, model optimization, Helm chart deployment, monitoring integration, and the key advantages of using NIM as a cloud‑native AI micro‑service.
During a production deployment of large language model training on Kubernetes, a pod failed due to insufficient /dev/shm shared memory; the article details the root cause, explores missing pod spec parameters, and presents a complete solution using an emptyDir volume with medium: Memory and sizeLimit to configure shared memory.
This tutorial walks through the prerequisites, static and dynamic provisioning steps, and verification commands for integrating NFS storage into a Kubernetes cluster, providing complete YAML manifests and shell commands to create PVs, PVCs, Deployments, and StorageClasses.
This article provides an in‑depth tutorial on Apollo, Ctrip's open‑source distributed configuration center, covering its core concepts, architecture, four‑dimensional configuration model, client design, deployment, and step‑by‑step instructions for creating projects, adding configurations, testing dynamic updates, and running the service in Kubernetes with Docker.
This tutorial explains how to connect Kubernetes to external storage via the Container Storage Interface, covering local mode storage setup, configuration steps, verification, and best‑practice tips for reliable, persistent data management in cloud‑native environments.
This article provides a comprehensive overview of Kubernetes, detailing its cloud‑native architecture, the roles of Master and Node components, key services such as API Server, etcd, Controller Manager, Scheduler, as well as node‑level elements like Kubelet, container runtimes, and Kube‑Proxy, while also offering practical code examples and resource links.
This article introduces the Mall‑Swarm open‑source microservice e‑commerce system, outlines its 2024 video tutorial covering Spring Cloud, Kubernetes deployment, and the full tech stack, and explains how learners can access demos, study materials, and join the learning community.
A detailed reference of over 100 kubectl commands covering cluster info, pod, service, deployment, networking, storage, security, scaling, and advanced debugging to help you quickly diagnose and resolve issues in Kubernetes environments.
Kubewatch is an open‑source, lightweight Kubernetes event watcher that streams resource changes such as pod creation, deletion, and updates to various notification channels like Slack, Mattermost, and custom webhooks, and can be quickly installed and configured via Helm charts.
This article walks through a complete, reproducible setup for collecting, storing, querying, and visualizing Kubernetes logs with ClickHouse and Grafana, covering architecture choices, agent configurations (OpenTelemetry Collector, Vector, Fluent Bit), schema design, compression results, query examples, performance tuning, and dashboard integration.
This guide walks you through constructing a complete GitOps‑based CI/CD pipeline using GitLab, GitLab Runner on Kubernetes, Maven, SonarQube, Harbor, Argo CD, and Kustomize, covering code commit, build, test, image publishing, automated deployments, and advanced rollout strategies such as blue‑green and canary releases.
This article introduces ten essential Kubernetes technologies—including Helm Charts, Operators, Service Mesh, StatefulSets, CRDs, Network Policies, Pod Disruption Budgets, HPA, Persistent Volumes, and Ingress Controllers—explaining their core concepts, key capabilities, and how they improve application reliability, scalability, and security.
This guide walks you through initializing a new Kubernetes node, installing a container runtime (containerd or Docker with cri‑dockerd), configuring kernel parameters, deploying the Calico CNI plugin, and verifying the node and network components in a production‑grade cluster.
This guide walks through installing, configuring, and using Apache Superset 4.x—including Kubernetes and Docker Compose deployment, database connections, Celery async queries, security settings, and creating your first dashboard—while providing a fully LLM‑translated Chinese documentation site.
This step‑by‑step tutorial explains how to configure version control, provision an AWS EC2 instance, install Java and Jenkins, set up Docker and SonarQube, write a Jenkinsfile, and deploy the application automatically with ArgoCD on a Kubernetes cluster.
The article explains what cloud native means, outlines its four core components—containerization with dynamic orchestration, microservices, DevOps, and CI/CD—describes the advantages such as resource efficiency, rapid delivery, scalability and high availability, and discusses the learning curve, security, and operational complexities involved.
A collection of Zhihu answers debates whether adopting Kubernetes is necessary, presenting viewpoints from developers and ops leaders, highlighting cost, complexity, operational benefits, deployment commands, and practical considerations for small and large scale projects.
This article explains the purpose, architecture, configuration steps, TLS setup, validation, technical selection, controller operation, reload process, high‑availability design, customization options, and future roadmap of the Kubernetes Ingress NGINX solution for seven‑layer load balancing.
This article explains the Adapter design pattern, illustrates its real‑world analogy, demonstrates a complete Go implementation for payment processing, and shows how the pattern can be used in production scenarios such as a multi‑cloud management platform and a model‑training service, highlighting its role in unifying incompatible interfaces.
This guide walks you through planning, configuring, and deploying a production‑grade Kubernetes cluster with high performance and availability, covering host planning, HA load balancing with keepalived and HAProxy, Harbor setup, node initialization, and essential system tweaks, all illustrated with ready‑to‑run code snippets.
This article explains what an API gateway is, outlines its core functions such as routing, load balancing, security, rate limiting, aggregation and caching, and reviews ten popular gateway solutions—including Amazon API Gateway, Kong, Apigee, NGINX, Tyk, MuleSoft Anypoint, Azure API Management, IBM API Connect, Kubernetes‑native options, and Traefik—highlighting their key features and typical use cases.
Docker is a lightweight container platform that uses a client, a host daemon, and a registry to build images from Dockerfiles, push them to repositories, and run isolated containers, while integrating with Docker Swarm and Kubernetes to support modern CI/CD pipelines and micro‑service architectures.
OpenYurt v1.5 introduces a v1beta1 YurtAppSet API for multi‑region workload management, enhanced edge autonomy with smarter Yurthub caching and pod eviction, granular controller permissions, a NodeBucket resource to cut rapid‑node‑onboarding traffic, and a transparent mechanism for pods to reach the cloud kube‑apiserver.
This article compares two common frontend deployment methods—direct static file upload to a web server and containerized deployment with Docker and Kubernetes—detailing their workflows, advantages, drawbacks, and practical insights from real‑world experience.
This comprehensive course provides a deep dive into Kubernetes networking, covering core concepts, network models, policies, plugins, traffic management, security, multi‑tenant, cross‑cloud, and hybrid‑cloud designs, and offers hands‑on performance optimization techniques across more than 60 video modules.
This guide walks through deploying Apache Superset 4.x on a Kubernetes cluster with the official Helm chart, covering prerequisites, adding the Helm repository, customizing values.yaml, installing required dependencies, configuring security, OAuth, alerts, Celery workers, and loading sample data and dashboards.
Learn how Kubernetes initContainers initialize pods, use static pods for automatic pod creation, and control pod scheduling with node selectors and labels, including practical YAML examples, command-line demonstrations, and troubleshooting tips to ensure containers start in the correct order and on desired nodes.
This article explains the challenges of constructing a robust, easy‑to‑use application release platform, introduces Volcengine's lightweight solution featuring a powerful workflow engine, rich atomic services, and pipeline templates, and provides a detailed step‑by‑step guide—including workspace creation, OAM app configuration, pipeline setup, deployment, and verification—for microservice‑based full‑link gray releases.
This guide details how to use Alibaba Cloud ACK Fluid to accelerate data access, improve system stability, and ensure cache consistency across AI, big‑data, and analytics workloads by selecting appropriate ECS instances, cache media, scheduling affinity, and runtime configurations.
This article explains how to use the Kubernetes-native Argo Workflows engine to automate and scale complex gene-computing pipelines, detailing its advantages, challenges, and a step-by-step BWA alignment workflow example on Alibaba Cloud’s ACK platform.
This guide introduces the most important and frequently used kubectl commands, explaining how to retrieve version information, manage clusters, list resources, apply configurations, scale deployments, expose services, and debug pods, enabling DevOps engineers to efficiently control Kubernetes environments.
This article provides an in‑depth comparison of Kubernetes and OpenStack, covering their core features, typical use cases, architectural differences, installation complexity, ecosystem support, and guidance on selecting the right platform for specific cloud computing needs.
Amid the digital transformation era, Kubernetes has become essential for modern cloud computing, and this article demystifies its inner workings by detailing its master and node components, service discovery, storage orchestration, networking, high availability, flexible resource management, and thriving ecosystem.
The article details how Baidu’s Jarvis2.0 platform evolved from a few modules to over a thousand microservices, introducing a cloud‑native multi‑runtime architecture, automated deployment pipelines, and an xDS‑based control plane that dramatically improve deployment speed, governance efficiency, and system stability across dozens of product lines.
This article details a comprehensive DevSecOps pipeline that uses Jenkins for CI/CD, Dependency‑Track and DefectDojo for SBOM management, SonarQube and Trivy for static and container scanning, Docker for image builds, and ArgoCD with Kubernetes for automated deployments, illustrating each stage with full code examples.
This article examines Baidu's Jarvis2.0 platform, detailing how its multi‑runtime architecture, unified control plane, and automated deployment pipelines transformed a sprawling microservice ecosystem of over 1,000 services into a highly efficient, cloud‑native system that dramatically reduced release times, improved stability, and enabled seamless multi‑language support.
This article reviews a technical sharing session that explains the characteristics, advantages and drawbacks of Overlay and Underlay networking, discusses hybrid network challenges and Multus modes, and presents Kube‑OVN’s solution for seamless integration of both network types in Kubernetes environments.
This article outlines the most frequent Kubernetes pitfalls—such as missing resource requests, omitted health checks, using the :latest tag, over‑privileged containers, insufficient monitoring, default namespace misuse, weak security settings, absent PodDisruptionBudgets, lack of pod anti‑affinity, and improper load‑balancing—and provides concrete commands, YAML examples, and best‑practice recommendations to prevent them.
This guide introduces Velero, an open-source Kubernetes backup and migration tool, explains its architecture and workflow, and provides step-by-step instructions for installing the client and server, configuring object storage with MinIO, and managing backups and restores.
Learn step‑by‑step how to install NVIDIA’s GPU‑operator on a Kubernetes cluster, configure GPU nodes, deploy a Blender workload for GPU‑accelerated rendering, monitor GPU metrics, and troubleshoot common issues, enabling seamless GPU scheduling and graphics rendering in cloud‑native environments.
Version 1.0.0 of KubeAdmiral, ByteDance’s open‑source multi‑cluster orchestration engine, introduces native Kubernetes API compatibility, advanced scheduling policies, fault‑tolerant migration, global status aggregation, and extensive hybrid‑cloud support, enabling seamless management of over 210 k machines across public and private clouds.
The article explains how Helm simplifies deploying complex Kubernetes applications with a single YAML chart but cannot manage runtime operations, while Kubernetes Operators—built on custom resource definitions and webhook logic—automate tasks such as scaling, upgrades, and side‑car injection, offering higher‑level lifecycle management.
This guide walks you through Loki, a lightweight log aggregation system, covering its architecture, advantages, deployment options (All‑In‑One, Kubernetes, and bare‑metal), Promtail configuration, Helm installation, and common troubleshooting steps for reliable log collection and querying in Grafana.
This article compares popular log aggregation stacks—ELK, EFK, and the PLG combination of Promtail, Loki, and Grafana—detailing their components, architecture, and trade‑offs for cloud‑native environments such as Kubernetes.
This guide explains how to connect Dubbo microservices to Alibaba Cloud Service Mesh (ASM) to obtain mTLS, observability, and traffic management, covering prerequisites, step‑by‑step deployment, code examples, a registry‑based transition approach, and recommended best‑practice configurations.
This article walks through deploying the open‑source LLM serving tool Ollama and the Open‑WebUI interface on a Kubernetes cluster using Helm, covering GPU considerations, configuration files, service exposure, and model management with practical code examples.
This article explains how Prometheus generates and sends alerts, covering the definition of alert rules with PromQL, grouping, templating, configuring evaluation intervals, deploying a custom alert receiver in Kubernetes, and analyzing alert payloads and delivery frequency, while also detailing alert silencing and resolution behavior.
