This article introduces Sealer’s overall architecture, explains its core concepts such as CloudImage, Kubefile, and Clusterfile, details the purpose of each module within the project, and compares its workflow to Docker for building and running Kubernetes cluster images.
This article explains the concept of cloud‑native storage, why it is needed for modern containerized workloads, outlines the key challenges such as usability, performance, high availability and multi‑cloud management, compares popular solutions like OpenEBS and Rook‑Ceph, and details QingStor NeonIO's architecture, features, performance results, and ideal use cases.
This guide explains the fundamentals of Kubernetes ReplicaSet and Deployment controllers, their specifications, how to write YAML manifests, and provides step‑by‑step command‑line examples for creating, scaling, updating, and rolling back applications in a cluster.
This article explains how to use Kubernetes monitoring features such as service details, topology maps, and pod metrics to quickly identify load‑balancing imbalances, cluster scheduling bottlenecks, and resource hotspot problems, providing practical steps and visual examples for improving system reliability and performance.
Sealer is an open-source Alibaba tool for packaging, delivering, and running distributed applications as cluster images, simplifying Kubernetes cluster deployment and management on Linux systems.
This guide provides a step‑by‑step troubleshooting workflow for common Kubernetes problems across Pods, Services, and Ingresses, explaining key concepts, diagnostic commands, typical failure states, and remediation links to help operators quickly identify and resolve cluster issues.
The article explains how open‑source software, driven by effective business models and community governance, has become the foundation of cloud‑native technologies like Kubernetes, illustrating why this model thrives and how companies such as Lingque Cloud contribute to its healthy evolution.
This article explains how cloud‑native technologies enable a unified control plane for Alibaba Cloud ACK clusters and self‑built Kubernetes clusters, detailing the ACK registered‑cluster architecture, one‑way registration, non‑managed security mechanisms, step‑by‑step cluster onboarding, and consistent security governance across environments.
This article explains how Kubernetes CSI enables out‑of‑tree persistent storage by detailing the PV lifecycle—Create, Attach, Detach, Mount, Unmount, Delete—and describing the roles of core components such as apiserver, PVController, external‑provisioner, external‑attacher, and kubelet, with code examples and diagrams.
The article details how Xueersi's 1‑to‑1 quality‑efficiency team transformed their cumbersome manual test‑environment setup into a fast, containerised, Kubernetes‑driven workflow, introducing swim‑lane environments, trace‑ID coloring, and a continuous‑delivery platform to dramatically improve resource utilization and deployment speed.
The Elastic Federated Learning Solution (EFLS) is Alibaba’s open‑source platform that enables privacy‑preserving vertical and horizontal federated learning for large‑scale sparse advertising, offering data‑intersection, high‑performance C++ training, a visual console, novel aggregation algorithms, and a roadmap toward multi‑party scaling and advanced encryption.
This article explains how a container‑driven PaaS platform built on Docker and Kubernetes can centralize resource management, enable dynamic allocation, monitoring, and high‑availability across multiple data centers, while supporting microservice deployment and continuous business operations.
This article explores the evolution of modern distributed applications, outlining the core primitives required for lifecycle, networking, resource binding, and state management, and examines how Kubernetes, microservices, service meshes, Knative, Dapr, and emerging trends reshape cloud‑native architectures.
This tutorial shows how to uninstall Docker Desktop on macOS, install Hyperkit, Docker CLI, kubectl and Minikube, configure CPU/memory limits, enable Ingress, MetalLB and other add‑ons, and keep Docker images and volumes while running a local Kubernetes cluster efficiently.
This article explains the concept of progressive delivery, its industrial origins, how cloud‑native tools like Kubernetes, Traefik and Spinnaker enable automated A/B testing, canary and gray releases, and the practical benefits for developers, operations, and product teams when releasing features to millions of users.
While Docker introduced containers in 2013 and set early standards, the ecosystem has since diversified with technologies like cgroups, namespaces, OCI, CRI, and alternatives such as containerd, runc, Podman, LXC/LXD, offering varied approaches to secure, lightweight application deployment across cloud-native environments.
This roundup highlights Microsoft’s VSCode for the Web, the .NET 6 Hot Reload controversy and restoration, CockroachDB Serverless launch, IBM’s open‑source hybrid‑cloud guide, and a survey‑backed look at how Kubernetes is reshaping enterprise database management.
OpenYurt v0.5.0 introduces a Kubernetes‑native, non‑intrusive standard for managing edge devices, leveraging CRDs to integrate platforms like EdgeX Foundry, and provides components such as yurt‑edgex‑manager and yurt‑device‑controller that enable seamless, declarative edge device lifecycle management within Kubernetes clusters.
Alibaba’s AServer access gateway, handling billions of users and millions of QPS, transitioned from a monolithic tengine‑based system to a cloud‑native, containerized architecture with Kubernetes, Pilot, and Envoy, improving operational complexity, dynamic routing, traffic isolation, and scalability for massive e‑commerce traffic.
This guide explains how to install and configure k0s, a lightweight Kubernetes distribution, using k0sctl for both standard and high‑availability clusters, covering binary deployment, offline image handling, custom CNI integration, HA load‑balancer setup, certificate management, backup, and advanced features such as etcd replacement and user management.
This article explains how to use Tekton, a cloud‑native CI/CD framework, to sync its component images to a Tencent Cloud container registry, generate an image‑mapping JSON, and deploy Tekton via GitHub Actions, Python scripts, and Kubernetes resources.
The DeWu community runs all Go services in Kubernetes, using CoreDNS/Etcd for native discovery, Istio’s Envoy sidecar for L4/L7 load-balancing and gRPC support, and a Dubbo-go refactor that switches to Nacos-based IP publish-subscribe, all unified under a dual-gateway (Java JWT gateway and Istio Ingress) architecture.
This article explains the internal components of the kubelet, details the CRI architecture, outlines the roles of the Runtime and Image services, and provides code examples of the gRPC API definitions, helping readers grasp how Kubernetes manages containers and images.
In his 2021 Open Source AceCon keynote, Chen Kai examines the evolution of open‑source and cloud‑native technologies, outlines three primary open‑source business models, analyzes the impact of public‑cloud providers, and proposes ways to sustain open‑source ecosystems through technical innovation, viable commercial strategies, and balanced governance.
After discovering a suspicious process on one of our self‑built Kubernetes nodes, we traced the intrusion to a misconfigured kubelet that exposed the API, allowing attackers to run a Monero mining script, and we outline the investigation steps and hardening measures to prevent similar breaches.
This guide walks you through the core kubectl syntax, common subcommands, global flags, output formats, and practical examples, enabling you to efficiently manage Kubernetes resources from the command line.
This guide walks through the history, core features, installation methods, configuration, PromQL queries, exporter setup, Grafana integration, and alerting with Alertmanager for Prometheus, providing practical commands and examples for building a complete monitoring solution in cloud‑native environments.
This article provides a comprehensive overview of Kubernetes architecture, covering its core components, multi‑center deployment, service discovery mechanisms, pod resource sharing, common CNI plugins, load‑balancing layers, isolation dimensions, network model principles, and detailed IP address classifications.
This guide explains how to prepare large‑scale Kubernetes clusters on public clouds by expanding node quotas, tuning kernel parameters, configuring high‑availability etcd, adjusting kube‑apiserver limits, and applying pod‑level resource and affinity best practices.
This article details how vivo AI's research institute created a hybrid‑cloud AI computing platform by integrating on‑premise bare‑metal servers with Alibaba Cloud ACK, using Kubernetes, Calico, and Terway to achieve elastic GPU resources, advanced storage features, and cost‑effective scaling for deep‑learning workloads.
After integrating Kubernetes into Probius, this guide shows how to pull pod metrics from Prometheus using the query_range API, process them with a Python client, and visualize CPU, memory, bandwidth, and IOPS data in Probius via ECharts, completing a seamless container‑monitoring feature.
This article explains how Spinnaker enables continuous delivery in Kubernetes environments by describing its role, deployment workflow, micro‑service architecture, pipeline design across DEV and UAT namespaces, and practical best‑practice recommendations for secure and efficient CD operations.
This guide walks through installing k0s, a certified Kubernetes distribution, using k0sctl for automated, customizable deployments—including binary installation, offline image handling, CNI plugin switching, HA setup with external load balancers, backup, restore, and advanced features like etcd replacement and user management.
The article examines Docker’s evolution from a pioneering container platform to its current struggles, highlighting how funding pressures, strategic missteps, a contentious relationship with Kubernetes, and leadership conflicts led to missed commercial opportunities and a precarious future for the company.
This article provides a detailed analysis of the kubelet CRI pod creation workflow, using the dockershim implementation as an example, and includes step‑by‑step code walkthroughs of SyncPod, sandbox creation, and the interactions between kubelet, CRI shim, Docker, and CNI.
This article explains the fundamentals of Kubernetes and Docker, covering container concepts, Linux namespaces and cgroups, Docker's evolution, and a detailed overview of Kubernetes' master‑node architecture and its core components for managing containerised workloads.
Recent tech headlines cover Apple’s former materials chief under criminal investigation, Facebook’s massive outage, Google’s Android 12 launch, the Forbes Cloud 100 rankings, a Linux Foundation report showing a 455% rise in Kubernetes certifications, and a new cloud‑native training course.
This tutorial introduces Knative, explains its architecture and core components, and provides a detailed, image‑rich walkthrough for deploying Knative on Alibaba Cloud, testing a sample serverless application, and managing the cluster via CloudShell.
This article explains the common pain points of locating anomalies in Kubernetes environments and presents a multi‑layer monitoring framework—trace, metrics, events, and alerts—along with best‑practice scenarios such as network performance, DNS issues, full‑link stress testing, external MySQL access, and multi‑tenant architectures.
This article explains the Kubernetes pod lifecycle, the meaning of the Terminating state, detailed pod creation and deletion processes, and the eviction mechanisms of both kube‑controller‑manager and kubelet, offering troubleshooting steps and best practices to resolve pods that remain stuck in Terminating.
This article explains the problem of inaccurate /proc information in container environments, introduces LXCFS as a FUSE‑based solution that maps cgroup data to /proc, and provides step‑by‑step instructions for installing, mounting, and using LXCFS with Docker and Kubernetes.
This article provides a comprehensive overview of Apache Flink's major releases from version 1.7 to 1.14, detailing new APIs, state management improvements, Kubernetes integration, SQL and Table API enhancements, checkpointing advances, and performance optimizations that together illustrate the platform's evolution for both streaming and batch processing workloads.
This article explains how to configure protected environments and manual approval jobs in GitLab CI/CD pipelines to control production deployments, illustrates YAML examples for deployment protection and approval stages, and introduces GitOps concepts and their benefits for modern cloud‑native infrastructure management.
This article shares a collection of powerful kubectl commands and tips—including API debugging, status‑based pod filtering and deletion, node‑specific pod listing, distribution counting with awk, and proxy usage—to help experienced Kubernetes users work more efficiently and avoid manual API client coding.
This article presents a collection of powerful kubectl commands and techniques—including API inspection, status‑based pod filtering, node‑specific pod listing, distribution counting with awk, and proxy usage—to help Kubernetes users troubleshoot and manage clusters more efficiently.
This article compares nine widely used open‑source service‑mesh frameworks, explains their core features and typical use cases, and provides practical criteria to help DevOps teams select the most suitable mesh for their micro‑service deployments on Kubernetes or other platforms.
This article provides a comprehensive overview of the Cloud Native Computing Foundation (CNCF), its origins, definition of cloud‑native, the full technology stack, member organizations, key historical milestones, 2019 survey statistics, and a technical comparison between the SpringCloud + CloudFoundry and container + Kubernetes ecosystems.
A recent incident revealed that a misconfigured kubelet and missing firewall rules allowed an attacker to hijack a node in a self‑built Kubernetes cluster for Monero mining, prompting a detailed post‑mortem and a set of hardening recommendations.
This article explains how OpenKruise extends Kubernetes with PodUnavailableBudget to protect application availability during voluntary disruptions, compares it with native PodDisruptionBudget, and provides practical YAML examples for stateless, stateful, and single‑instance workloads.
This article explains the limitations of Docker's default JSON‑file logging, introduces S6‑based container log redirection, compares Kubernetes logging approaches at pod, node, and cluster levels, and presents a full‑stack architecture using Filebeat, Kafka, Elasticsearch, and Logstash for reliable, rotatable log collection.
This article introduces Cilium, the eBPF‑based Kubernetes CNI that replaces kube‑proxy, explains its security and scalability advantages over traditional iptables, and provides step‑by‑step guidance for deploying Cilium, testing its connectivity, and using Hubble for deep network visualization integrated with Grafana and Prometheus.
Inclavare Containers, the first open‑source container runtime for confidential computing, became a CNCF sandbox project in September 2021, integrates with Kubernetes and Docker, offers zero‑trust, remote attestation, OCI compatibility, and aims to standardize secure cloud‑native workloads across clouds.
This tutorial explains why Kubernetes controllers are essential for pod reliability, details the concepts and specifications of DaemonSet, Job, and CronJob, provides step‑by‑step YAML examples and kubectl commands, and demonstrates rolling updates and scheduled tasks in a cloud‑native environment.
This article explains the role of the Pod Lifecycle Event Generator (PLEG) in Kubelet, why the “PLEG is not healthy” error causes nodes to become NotReady, common failure scenarios, and a step‑by‑step troubleshooting method that ultimately resolves the issue by upgrading systemd.
After deploying a new cluster, a 502 error appeared when logging in because traffic to Redis’s 7000 port was intercepted by Istio’s sidecar, which routed it to a BlackHoleCluster; the article details the root cause, Istio’s listener and cluster configurations, and three practical remediation methods.
A 2021 survey reveals that Spring remains the leading Java backend platform, with 75% of developers using core modules, over 80% adopting modern architectures, and growing interest in Kotlin, Spring Native, and Kubernetes integration, highlighting its extensive ecosystem and productivity benefits.
After a Longhorn component crash caused PersistentVolume mount errors in Kubernetes, this guide walks through diagnosing the issue, upgrading e2fsck to handle newer filesystem features, running fsck to repair the volume, and finally recreating the pod to restore normal operation.
This article explains how Prometheus relabeling works, covering the purpose of relabeling, hidden and meta labels, the various actions such as replace, keep, drop, labelmap, labelkeep, labeldrop, and hashmod, and provides concrete configuration examples for common monitoring scenarios.
Monitoring ensures Kubernetes applications run smoothly, and while Prometheus is a popular open‑source solution, this article examines six viable alternatives—Grafana, cAdvisor, Fluentd, Jaeger, Telepresence, and Zabbix—detailing their key features, strengths, and use‑cases for effective cluster observability.
This article explains the motivation behind choosing Loki over heavyweight ELK/EFK stacks for container‑cloud logging, outlines Loki's lightweight architecture and components, provides step‑by‑step deployment instructions on OpenShift/Kubernetes, and demonstrates how to query logs using the LogQL language and HTTP API.
This article explains how to configure Kubernetes liveness, readiness, and startup probes using exec, HTTP, and TCP checks, demonstrates practical YAML examples, shows how probes affect pod lifecycle events, and provides best‑practice recommendations to avoid common pitfalls.
During a Kubernetes deployment, the old pod is terminated while the new one starts, and by adding a preStop hook and properly configuring terminationGracePeriodSeconds, you can ensure graceful shutdown, propagate SIGTERM to all processes, avoid traffic loss, and handle signal forwarding for multi‑process containers.
This guide walks through deploying Kong and its UI Konga on Kubernetes, covering configuration of PostgreSQL, handling common initialization errors, correcting environment variables, and ensuring successful startup with detailed YAML and Docker commands.
The article explains the history of containers, the role of Docker and Kubernetes, why Kubernetes is deprecating Docker's dockershim, the timeline for the change, its impact on users, and the steps required to migrate to OCI‑compatible runtimes such as containerd or CRI‑O.
This article introduces Loki, a lightweight log aggregation system for Kubernetes, explains its background and motivations, details its simple architecture and core components (Distributor, Ingester, Querier), discusses scalability and storage options, and provides step‑by‑step deployment instructions with example YAML and shell commands.
This article explains how to create a non‑intrusive Kubernetes admission webhook that injects custom volumes and volume mounts into Knative pods, covering the underlying admission control concepts, Go implementation, TLS setup, deployment manifests, and verification steps.
A 2021 Spring ecosystem survey shows that Spring Data, Spring Security, Spring WebMVC, Kotlin adoption, API importance, modern architectures, Spring Native, and Kubernetes integration dominate developer choices, highlighting Spring's continued dominance in enterprise Java development.
This guide walks you through setting up a Loki logging cluster for production, covering the native architecture, key configuration differences, storage with boltdb‑shipper on S3, Redis caching, ruler setup, and adapting the Docker‑Compose deployment to Kubernetes.
This article explains Kubernetes container networking fundamentals, covering pod-to-pod communication, Linux network namespaces, veth pairs, bridges, and the various CNI plugins such as Flannel and Calico that enable cross‑host networking with overlay, routing, and underlay modes.
This article provides a detailed overview of Docker’s evolution, the role of containerd, runc, and CRI in modern container runtimes, explains how Docker delegates container lifecycle management to containerd‑shim, and offers step‑by‑step instructions for installing, configuring, and using containerd with its CLI tools on Linux.
This article recounts a real‑world Service outage, explains the purpose and principles of Kubernetes Services, details typical and selector‑less configurations, compares all Service types (ClusterIP, LoadBalancer, NodePort, ExternalName, Headless), and dives into the iptables‑based implementation used by kube‑proxy, complete with rule examples and performance considerations.
This article explains the background, features, and implementation details of OpenKruise's WorkloadSpread, showing how it distributes Pods across zones, node types, and CPU architectures, compares it with existing solutions, and provides concrete YAML examples for elastic and topology‑aware scheduling.
This article walks through the Kubernetes kubelet source code responsible for pod creation, detailing the syncLoop, syncLoopIteration, SyncHandler interface, pod operations, dispatchWork, UpdatePod, and the final SyncPod steps, providing code snippets and explanations to help developers understand the underlying mechanisms.
This guide explains how to use Velero to back up and restore Kubernetes clusters, covering its principles, backup types, storage configuration, installation of Velero and MinIO, and step‑by‑step commands for creating, testing, and recovering a MySQL workload.
This article explains the motivations behind choosing Loki over ELK for container‑cloud logging, details Loki's lightweight architecture—including Distributor, Ingester, and Querier components—covers deployment steps on OpenShift/Kubernetes with YAML manifests, and demonstrates LogQL query syntax for efficient log retrieval.
This article explains how Tigera’s Calico integrates the open‑source WireGuard VPN with Azure Kubernetes Service using Azure CNI, detailing packet flow, encryption benefits, configuration steps, MTU handling, and RPF considerations to achieve secure, high‑performance intra‑cluster communication.
This article provides a comprehensive overview of Kubernetes, covering its core features, resource‑estimation examples, evolution of service deployment models, the relationship between cloud and Kubernetes, cloud‑native principles, and a detailed look at its historical background and architectural components.
This guide walks you through preparing three Ubuntu 18.04 machines, building the yurtctl tool from the OpenYurt source, and using its init and join commands to create a control‑plane node, add cloud‑node and edge‑node workers, and verify component status in a fully functional OpenYurt cluster.
The article walks through diagnosing why a second Kubernetes cluster ignored the upload‑size setting, shows how to inspect the nginx‑ingress‑controller deployment, identify the --configmap argument, and fix the issue by updating the referenced ConfigMap name to nginx‑configuration.
This article explains how Kaniko, a Google‑open‑source tool, enables building and pushing container images without a privileged Docker daemon by comparing traditional Docker methods, highlighting security concerns, and providing a step‑by‑step demonstration with commands and verification in a Kubernetes‑friendly environment.
This session explains why Kubernetes monitoring is essential for end-to-end observability, describes the five data sources and layers it covers, and walks through discovering and locating architecture, performance, resource, scheduling, and network issues using topology, anomaly detection, and correlation techniques.
The second‑edition Kube‑OVN survey collected 267 valid responses from diverse industries, revealing increased container deployment on virtual machines, a rise in public‑cloud usage, a jump in Kube‑OVN adoption to 40%, growing demand for IPv6/dual‑stack and multi‑tenant networking, and user expectations centered on KubeVirt, VPC enhancements, and eBPF integration.
This comprehensive tutorial walks through preparing a CentOS 7 host, configuring hostnames, disabling swap and firewalls, installing Docker and Kubernetes components with kubeadm, setting up the master and worker nodes, deploying the flannel network plugin, testing with nginx, and installing the Kubernetes dashboard, all with detailed commands and troubleshooting tips.
This guide walks beginners through a structured learning path for Kubernetes, covering fundamentals, core components, key objects, controllers, storage, networking, resource management, security, cluster operations, backup, logging, monitoring, DevOps practices, and deeper topics like architecture, source code, and operator development.
Enterprises adopt hybrid multi‑cloud architectures driven by high‑profile security incidents and regulatory demands, leveraging Kubernetes multi‑cluster capabilities such as disaster recovery, latency reduction, isolation, fault containment, and vendor‑lock‑in avoidance, with solutions like Federation v1/v2 and KubeSphere illustrated through real‑world case studies.
This guide explains how kubectl interacts with the Kubernetes API, walks through command‑completion setup, custom column output, multi‑cluster and namespace switching, and shows how to extend kubectl with plugins such as kubectx, krew, and custom scripts, boosting productivity for cloud‑native workflows.
The article examines Docker’s shift to paid subscriptions, its missed partnership with Kubernetes, internal management conflicts, and how these strategic missteps have reshaped its role in the cloud‑native ecosystem, while exploring the future prospects under new leadership.
This article explains the classic three‑ and five‑state process models, Linux task_struct states, orphan and zombie processes, and how Docker and Kubernetes handle process IDs, providing practical solutions to prevent and clean up zombie processes in container environments.
This article analyzes why a company's Kubernetes clusters were constantly on the brink of failure and presents a comprehensive solution covering CI/CD pipeline reconstruction, federated monitoring with Prometheus, centralized logging via Elasticsearch, documentation centralization, and clarified request routing to achieve high reliability.
The article investigates a puzzling Kubernetes issue where using hostPort caused MySQL traffic to be redirected to the wrong pod, explains how iptables rules inserted by the CNI portmap plugin override Service rules, and provides reproducible experiments and practical recommendations to avoid such problems in production.
This article details how the Fluid CNCF project combined with JindoRuntime was used to overcome storage‑compute separation bottlenecks in an autonomous‑driving machine‑learning platform, achieving up to 300% faster training, reduced OSS bandwidth pressure, and higher GPU utilization through distributed caching on Kubernetes.
This guide explains how kubectl interacts with the Kubernetes API, demonstrates command‑completion setup for Bash, Zsh and macOS, shows how to view resource specifications, use custom‑column output, switch clusters and namespaces via kubeconfig or kubectx, and extend functionality with plugins such as krew.
This guide compares node-exporter, metric-server, and kube-state-metrics, explains their different focuses, and provides step‑by‑step instructions to deploy metric‑server, verify its API, and use kubectl top to monitor node and pod resource usage in a Kubernetes cluster.
GitOps automates infrastructure management by applying DevOps best practices such as version control, pull requests, and CI/CD pipelines to declarative infrastructure code, enabling reliable, observable, and secure deployments especially in Kubernetes‑based cloud‑native environments.
This article explains Kubernetes core concepts—including pods as container groups, how ReplicaSets maintain desired replica counts, Deployment's rolling update mechanism, and StatefulSet's approach to managing stateful services with persistent storage—providing a comprehensive guide for cloud‑native deployments.
This tutorial walks through preparing three CentOS 7.6 nodes, installing and configuring containerd, setting up kubeadm, kubelet, and kubectl, initializing a Kubernetes v1.22.1 control plane, adding worker nodes, deploying the Flannel CNI plugin, installing the Kubernetes Dashboard, and providing cleanup commands, all with detailed commands and configuration files.
This article explains what an error‑tracking system is, introduces Sentry, and provides a step‑by‑step guide to deploying Sentry on Kubernetes using Helm, OpenEBS storage, PostgreSQL, and configuring projects and alerts for effective monitoring.
This article explains how Kubernetes nodes schedule pods based on total capacity, why lacking resource reservations can cause node failures and cluster avalanches, and provides step‑by‑step guidance on configuring Node Allocatable, kube‑reserved, system‑reserved, and eviction settings to ensure stable cluster operation.
This guide outlines essential steps for scaling large Kubernetes clusters on public clouds, covering node quota adjustments, kernel parameter tuning, etcd high‑availability setup, API server and pod configurations, and best‑practice recommendations to ensure stable performance as node counts grow.
This article explains the principles behind Knative Autoscaler, compares Knative Pod Autoscaler (KPA) with Kubernetes Horizontal Pod Autoscaler (HPA), and provides step‑by‑step configuration and demo instructions for achieving true serverless scaling on Kubernetes.
