This article explains OpenYurt’s non‑intrusive architecture that extends native Kubernetes to edge scenarios, detailing its edge‑autonomy features, the challenges it solves, and the two main design approaches—kubelet reconstruction and the YurtHub proxy—along with their trade‑offs and implementation details.
This article explains the concept, benefits, and technical implementation of in‑place upgrades for Pods in Kubernetes, detailing how OpenKruise leverages kubelet image hashing, update restrictions, container status reporting, and readiness gates to achieve fast, low‑impact, and controllable rollouts.
This comprehensive guide explains how ConfigMaps and Secrets work in Kubernetes, walks through multiple ways to provide configuration to containers—including command‑line arguments, environment variables, and volume mounts—shows how to create ConfigMaps from literals, files, or directories, and demonstrates how to consume them in Pods with env, envFrom, and volume mounts, plus best‑practice tips.
The article summarizes the technical innovations of the open‑source Kube‑OVN project—including a namespace‑based subnet model, comprehensive fixed‑IP support, flexible gateway options, performance optimizations for control and data planes, extensive monitoring tools, and real‑world user cases—highlighting its relevance for modern cloud‑native networking.
The article summarizes Liu Mengxin’s June 11 talk on cloud‑native networking, covering its definition, basic requirements, open‑source CNI implementations, control‑ and data‑plane designs, and the functional, operational, security, and performance challenges faced when deploying container networks at scale.
This guide walks through systematic Kubernetes troubleshooting steps for pods stuck in Pending, Waiting, CrashLoopBackOff, or Running incorrectly, and also covers controller, service, and network debugging using kubectl commands, log inspection, validation flags, and endpoint verification.
This guide explains how adjusting the kube‑scheduler's percentageOfNodesToScore setting can improve scheduling latency and throughput in large Kubernetes clusters, covering default behavior, configuration steps, practical examples, and important considerations for different cluster sizes.
Monzo, the UK digital bank, shares how it built a Kubernetes‑based, cloud‑native platform to run over 1,600 Go‑written microservices backed by Cassandra, implements fine‑grained service isolation with network policies, and creates internal tooling to automate security and deployment at massive scale.
This article traces the evolution from early virtualization challenges to modern container technologies, explaining how LXC laid the groundwork for Docker, how Docker differs from virtual machines, and why containers have become essential for cloud‑native development and DevOps workflows.
This guide walks you through modifying Alertmanager’s configuration to deliver alerts via QQ email, DingTalk chat‑bot webhooks, and Enterprise WeChat, including SMTP settings, webhook plugin installation, and the required wechat_configs parameters for seamless integration.
This guide details a zero‑downtime migration of large ZooKeeper clusters to Kubernetes by wrapping each server in a ClusterIP service, reconfiguring clients, updating server configs, and replacing physical nodes with Pods, while outlining required network prerequisites and practical steps.
This guide walks you through adding a Kubernetes cloud in Jenkins, extracting and decoding the required certificates from the kube config, creating a client P12 file with OpenSSL, uploading the credentials, and testing the connection to ensure seamless CI/CD integration.
This article outlines the design, functional requirements, CRD definition, architecture, deployment, scaling, monitoring, fault‑tolerance, and upgrade strategies of a Zookeeper operator on Kubernetes, including code examples, service configurations, and integration with Prometheus and OAM standards.
This guide explains Kubernetes service exposure options, the challenges they address, and provides a step‑by‑step tutorial for deploying an Ingress controller, creating Ingress resources, and configuring TLS to securely expose applications within a cluster.
This guide explains how Kubernetes uses livenessProbe and readinessProbe to monitor container health, prevent traffic loss, and trigger restarts, covering probe types, implementation methods, configuration parameters, and practical examples with exec, HTTP GET, and TCP socket actions.
This article walks beginners through the full process of preparing a Kubernetes environment and deploying both PHP (WordPress) and Java (Tomcat) web applications, covering image creation, namespace setup, secrets, deployments, services, ingress configuration, and host binding.
This article describes how to collect, clean, and analyze 90,000+ GitHub issues and pull requests from the Kubernetes repository using Kubeflow, TensorFlow, and a fully automated CI/CD pipeline, then build, train, and serve a simple MLP model that classifies release‑note texts as bugs or non‑bugs.
This article details how Tubi built the Tubi Data Runtime platform on JupyterHub using Kubernetes, covering authentication with Okta SSO, custom Docker images, shared EFS storage, multi‑service support, GPU enablement, node affinity, cluster autoscaling, and monitoring with Prometheus.
This guide explains two methods for mounting Ceph RBD in Kubernetes—static PV & PVC and dynamic StorageClass—detailing secret creation, PV, PVC, and deployment configuration, and then shows how to mount CephFS directly in a deployment without separate PV/PVC, including all required YAML and commands.
This article compares monitoring metrics for CPU, memory, disk, and network between traditional KVM-based servers and Kubernetes pods, explaining why their indicators differ, how resource isolation works, and what key metrics users should watch to diagnose performance bottlenecks.
This article analyzes a recurring NotReady issue in Alibaba Cloud Kubernetes clusters, explaining how kubelet, NodeStatus, and the Pod Lifecycle Events Generator (PLEG) interact, why nodes become Ready for only three minutes after a kubelet restart, and how the underlying timeout mechanisms cause the problem.
This article outlines ten frequent Istio exceptions—from service port naming constraints and flow‑control ordering to mTLS‑induced connection drops—explaining their root causes, diagnostic steps, and practical best‑practice solutions for reliable mesh deployments.
This article explains why a typical Deployment + LoadBalancer setup can experience downtime during updates, analyzes the pod lifecycle, endpoint synchronization, iptables/ipvs and SLB interactions, and provides concrete configuration steps—including readiness probes, preStop hooks, and Service traffic policies—to achieve zero‑downtime deployments.
The article explains Kubernetes' rapid rise by detailing its history, YAML‑based declarative infrastructure, GitOps workflow, scalability features, security policies, cloud‑provider integration, extensibility through CRDs and Operators, and the vibrant community that drives continuous innovation.
This article explains the Kubernetes update mechanism, why an API update can fail due to missing resourceVersion, how patch operations differ, and the internal logic of kubectl apply and edit, providing practical guidance for choosing between update and patch in cloud‑native deployments.
This article examines why MySQL is deployed on Kubernetes, outlines the technical challenges such as service routing, monitoring isolation, storage and high‑availability, highlights the benefits of cloud‑native networking and scheduling, and reviews popular MySQL operators and their implementation details.
This article explains the complete lifecycle of a Kubernetes Pod, covering its phases, the creation workflow, init containers, lifecycle hooks, termination steps, and related kubectl commands, providing clear diagrams and example YAML manifests for practical use.
OpenYurt is Alibaba’s open‑source edge‑native extension for Kubernetes that enables zero‑intrusion, seamless cluster conversion, low‑overhead edge autonomy, and unified cloud‑edge management, and the article outlines its background, technical features, core capabilities, roadmap, and where to find the project.
This article explains how Tubi Data Runtime (TDR) streamlines data access on JupyterHub by introducing an optimized Redshift connector, custom SQL cell magic, and JupyterLab extensions for data exploration, reducing latency and resource usage while enhancing collaboration and usability for data scientists and engineers.
The article recaps a SIG Cloud‑Provider‑Alibaba webinar, detailing Alibaba’s large‑scale cloud‑native deployment challenges and how the open‑source OpenKruise project introduces extended workloads like CloneSet, Advanced StatefulSet, SidecarSet, and more to improve deployment efficiency, stability, and flexibility on Kubernetes.
This article explains the most important configuration choices for Tencent Cloud TKE—including Kubernetes version, network modes (GlobalRouter vs VPC‑CNI), container runtimes (Docker vs containerd), service forwarding (iptables vs ipvs), cluster types, node operating systems, node pools, and startup scripts—providing comparisons and practical recommendations to help users avoid common pitfalls.
Discover a curated collection of 15 Alibaba developer tools—from Java diagnostics and IDE plugins to chaos engineering, performance testing, and serverless platforms—each explained with usage scenarios, tutorials, and acquisition links, helping backend engineers streamline development, enhance reliability, and accelerate deployment.
This article compiles essential DevOps interview questions covering version control differences between Git and SVN, MySQL master‑slave replication mechanics, Kafka versus traditional MQ, Kubernetes service types, pod communication, health checks, resource limits, link types, and permanent mounting techniques.
This article details the evolution of Zhihu's deployment platform, covering its early physical‑machine system, the transition to container orchestration with Kubernetes, and the implementation of blue‑green, canary, and pre‑release strategies that enable fast, reliable continuous deployment.
TCOS 2.0, the container operating system from Transwarp, expands compatibility to Windows, ARM, MIPS, and domestic platforms, adds GPU heterogeneous scheduling, HPA autoscaling, enhanced local storage management, and improved monitoring, providing a robust foundation for big data, AI, and cloud-native applications.
This article examines the rising trend of serverless containers, their application value, architectural design for cloud‑native Kubernetes, key challenges such as startup latency and scalability, and how Alibaba Cloud's Serverless Kubernetes and ECI solutions address these issues while offering a free learning course.
This guide details a complete GitLab‑based CI/CD workflow—from issue creation and feature‑branch handling through build, test, code‑analysis, Docker image creation, and Kubernetes deployment—illustrating pipeline configuration, variable management, and trigger rules for reliable end‑to‑end project delivery.
The Istio 1.6 release introduces a fully migrated Istiod architecture, streamlined installation and upgrade processes, expanded observability features, native support for virtual‑machine workloads via WorkloadEntry, and several network enhancements including improved secret handling and experimental Service API support.
This article explains the challenges of traditional Deployment and StatefulSet IDs, introduces OpenKruise and its five enhanced controllers, details the installation process via Helm, and demonstrates how Advanced StatefulSet enables parallel pod startup and in‑place updates for faster, more reliable workloads.
This guide walks through preparing the environment, installing required tools, configuring firewalls, setting up host files, deploying Nginx with Keepalived for high‑availability, installing Docker, MySQL, and finally installing K3s and Rancher using Helm, including certificate creation and troubleshooting steps.
This guide explains how to set up Istio across multiple Kubernetes clusters using a multi‑control‑plane topology, covering CA secret creation, control‑plane installation, DNS configuration, sample application deployment, ServiceEntry and DestinationRule creation, and cross‑cluster traffic routing verification.
OpenKruise v0.5.0 introduces CloneSet maxSurge rollout and SidecarSet volume‑merge capabilities, addressing native Kubernetes limitations by allowing expand‑then‑shrink deployments, in‑place upgrades, and seamless sidecar injection without volume conflicts for large‑scale cloud‑native applications.
The article explains how cloud‑native environments influence container image construction and reviews several Dockerfile‑free tools such as KO, Jib, and s2i, as well as Dockerfile‑based alternatives like Kaniko and Makisu, highlighting their use cases, advantages, and limitations.
This article explains how Istio injects sidecar containers into user‑space Pods using the istio‑sidecar‑injector component, covering automatic and manual injection methods, the underlying MutatingAdmissionWebhook configuration, the initContainer and sidecar containers added, and the associated ConfigMap and volume setups.
This article details the background, initial ECS‑based deployment, performance bottlenecks during rapid user growth, and the comprehensive cloud‑native migration—including DNS load balancing, managed Kubernetes, CDN acceleration, RDS/Redis replacement, and NAS/OSS storage—resulting in significant scalability and operational improvements for the Smart Citizen Pass mini‑program.
This article explores the history and principles of Prometheus monitoring, offers guidance on version selection, highlights its limitations, details common Kubernetes exporters, shows Grafana dashboard setups, and provides in‑depth strategies for exporter aggregation, golden metrics, multi‑cluster scraping, GPU monitoring, timezone handling, memory optimization, capacity planning, and rate calculations.
This tutorial walks you through setting up a complete Kubernetes development environment on CentOS, covering prerequisite installations, Docker CE setup, kubelet/kubeadm/kubectl configuration, master node initialization, network add‑ons, node joining, and common troubleshooting tips.
This guide walks through setting up a private Kubernetes environment, configuring namespaces and service accounts, modifying Eureka for IP registration, preparing Docker and Harbor authentication, creating StatefulSet and Service manifests, and automating continuous deployment with a Python script, enabling a fully functional Spring Cloud Eureka service in a resource‑constrained cluster.
This guide walks through setting up a complete CI/CD pipeline for a SpringBoot micro‑services project using Jenkins, Docker, Harbor, GitLab, and Python scripts to build, package, and deploy containers onto a Kubernetes cluster, covering environment installation, configuration, and testing steps.
This guide provides a comprehensive overview of the kubectl command‑line tool, covering its syntax, core components, common commands, output formatting options, custom columns, server‑side printing, sorting, and practical examples for everyday Kubernetes cluster operations.
This article evaluates six popular container CI/CD pipelines—Heroku, Azure DevOps, GitLab CI/CD, AWS Elastic Beanstalk, Google Cloud Build, and Jenkins X—detailing their configurations, advantages, limitations, pricing, and personal assessments to help teams choose the most suitable solution for their workflow.
This article details how Tongcheng‑eLong transitioned from Docker‑Host deployments to a Kubernetes‑based platform for hundreds of storage and compute services, covering network integration, IP management, service synchronization, storage strategies, operator development, monitoring, logging, and the challenges and future plans they encountered.
This article examines the challenges of large‑scale deep‑learning model training on Kubernetes, analyzes performance bottlenecks caused by Alluxio‑FUSE integration, and presents a series of configuration and system‑level optimizations that dramatically improve data‑access speed and overall training throughput.
This guide explains MySQL’s fundamentals, describes a master‑slave high‑availability architecture, and provides a complete step‑by‑step tutorial for deploying the cluster on Kubernetes using ConfigMaps, Services, a StatefulSet, dynamic PVCs, and verification commands.
This article explains the Open Application Model (OAM), its core concepts of Components, Application Configuration and Traits, and demonstrates a visual platform that lets users create, configure, version, and publish a multi‑component application (nginx, tomcat, redis) on Kubernetes with detailed screenshots and a GitHub demo repository.
This article provides a comprehensive overview of Kubernetes, explaining its core concepts, advantages, key features, typical use cases, and the new capabilities introduced in version 1.18, while also linking to related tutorials and practical deployment guides for building scalable, resilient cloud‑native applications.
This article explains the difference between SecurityContext and PodSecurityPolicy, demonstrates how to create service accounts, define a non‑privileged PSP, enable it in a cluster, bind it with RBAC, and apply the policy to Pods, Deployments and system components in Kubernetes.
This article explains the challenges of operating many Kubernetes clusters in private‑cloud environments and presents a declarative, operator‑driven Kube‑On‑Kube architecture that dramatically cuts deployment, upgrade, and user provisioning time while remaining cloud‑native and infrastructure‑agnostic.
This article provides a detailed overview of Istio’s architecture, explaining the roles and interactions of its data plane, control plane, and core components such as Envoy sidecar, Pilot, Mixer, Citadel, Galley, sidecar‑injector, and ingress gateway within a Kubernetes‑based service mesh.
This article details Tongcheng‑Elong's journey from bare‑metal to a Kubernetes‑based cloud‑native platform, describing its architecture, the challenges of isolation, scheduling, resource utilization and promotion, and the engineering solutions—including custom scheduling, CPU binding, IP fixation, and over‑commit strategies—implemented to improve efficiency and reliability.
This article details CTrip's evolution of Redis management—from early single‑instance deployments and custom CRedis client, through automated scaling, containerization with Kubernetes, secondary scheduling algorithms, Intel Optane integration, and hybrid‑cloud deployment—highlighting operational challenges, solutions, and performance outcomes.
This article provides a comprehensive introduction to Istio, explaining what a service mesh is, its core components and functions, the challenges it addresses in microservice architectures, and practical steps for adopting Istio in production environments.
This article explains what a service mesh is, outlines the operational challenges of microservice architectures, and details how Istio’s data‑plane and control‑plane components provide traffic control, security, and observability to simplify cloud‑native deployments.
This article traces the history of backend architecture from monolithic systems through distributed designs, Docker containers, microservices, Spring Cloud, and Kubernetes, culminating in a detailed overview of cloud‑native Service Mesh technologies such as Istio and their key capabilities.
This article explains why Kubernetes was chosen, describes the overall architecture, high‑availability master design, multi‑IDC cluster deployment, logging, monitoring, service exposure, image building, lifecycle hooks, CI/CD, multi‑cluster management, encountered challenges, and future plans for operators and automated scaling.
This article explains how to use infrastructure‑as‑code techniques on Kubernetes to automate the deployment and CI/CD pipelines of .NET Core microservices, detailing the role of k8s.yaml files, Jenkinsfiles, and related automation tools.
This guide walks through Kubernetes deployment methods—including blue‑green, canary, and rolling updates—explaining their concepts, showing how to define Deployments with kubectl, and providing step‑by‑step command examples and YAML configurations for practical implementation.
This article offers a pictorial introduction to Kubernetes, explaining what containers are, when to use orchestration, why Kubernetes stands out, and detailing its core architecture—including master components, pods, controllers, services, and ingress—providing a clear, beginner-friendly overview of container orchestration in cloud-native environments.
This article shares an Alibaba technical expert's perspectives on Kubernetes—its role as the future operating system, practical learning strategies, detailed troubleshooting cases, and a free e‑book download—offering a comprehensive guide for engineers seeking to master cloud‑native orchestration.
This article explains OPPO's cloud storage journey, covering distributed storage fundamentals, the architecture of its block storage platform, the role of Kubernetes and the Container Storage Interface, sidecar components, and the operational benefits of containerizing storage in a cloud‑native environment.
This guide explains GitLab CI/CD fundamentals, including continuous integration, delivery, deployment, .gitlab-ci.yml configuration, runner setup, pipeline stages, Auto DevOps, and Kubernetes deployment, with practical code examples and visual walkthroughs for automating software delivery.
This article explains how to combine RocketMQ with Knative to create cloud‑native, event‑driven serverless applications, covering cloud‑native fundamentals, Knative architecture, RocketMQSource integration, a food‑delivery use case, deployment steps, command‑line examples, and additional scenarios.
This article details the evolution of an online development platform—from early WebIDE experiments and code‑server integration to a cloud‑native architecture with client, server, and container pool components—highlighting challenges in resource scheduling, high availability, startup speed, and plugin ecosystems, and sharing practical solutions and scenario deployments.
Learn how to quickly diagnose and resolve common Kubernetes pod failures—such as ImagePullBackOff, CrashLoopBackOff, and resource issues—by using kubectl commands to inspect pod status, events, logs, and execute shells, with practical examples and step‑by‑step troubleshooting techniques.
This article explains the principles behind Alibaba Cloud Kubernetes cluster node scaling, covering manual and automatic node addition, cluster expansion with ESS, and auto‑scaling using Cluster Autoscaler, along with troubleshooting steps and key components involved.
This roundup highlights recent cloud‑native developments, including the donation of Istio to an open‑source foundation, Kotlin gRPC becoming open source, dynamic watch‑cache sizing and authentication tweaks in Kubernetes, Knative 0.14 release details, xDS v3 planning, plus curated open‑source project and reading recommendations.
This article presents a cloud‑native solution for MySQL containerization on Kubernetes using CEPH RBD as backend storage, detailing the background, feasibility analysis with performance benchmarks, the operator‑based architecture, and the benefits for development‑test environments.
This article compares CPU, memory, disk, and network monitoring metrics between traditional KVM servers and Kubernetes pods, explaining the underlying reasons for differences and offering guidance on interpreting the metrics for effective performance troubleshooting.
This article explains how to implement infrastructure‑as‑code for CI/CD tools on a shared Kubernetes cluster by using a lightweight variable‑template engine, configuring Jenkins, Gogs, and Nexus via ConfigMaps, initContainers, and REST/Script APIs, and combining multiple automation techniques for seamless deployment.
This guide introduces kubectl basics, walks through its most common commands, explains Kubernetes pod concepts, related API objects, YAML‑based pod creation, lifecycle phases, container hooks, health probes, status types, and restart policies, providing practical code examples and diagrams.
This article provides a comprehensive overview of Kubernetes, covering its definition, advantages, core features, typical use cases, architectural layout, essential control‑plane and node components, as well as common add‑on tools for monitoring and networking.
This article explains how the Open Application Model (OAM) abstracts away infrastructure details, enabling developers to define applications with concise YAML files and deploy them to AWS Fargate via the Amazon ECS for OAM project using just a few simple commands.
This article explains the Thanos architecture, compares Sidecar and Receiver deployment modes, walks through object‑storage configuration, and provides complete Kubernetes YAML examples for Prometheus, Thanos Sidecar, Query, Store Gateway, Ruler, Compact, and Receiver to build a large‑scale cloud‑native monitoring system.
This article explains how the CNCF‑incubated Argo suite enables native Kubernetes workflows, details performance‑enhancing contributions such as RBAC‑aware executors, parallel scanning, and status compression, and showcases a real‑world gene‑sequencing use case that achieves over a hundred‑fold speedup.
This guide explains the concepts of apiserver clients, authentication methods, service accounts, RBAC authorization, admission control, and provides step‑by‑step instructions for installing and accessing the Kubernetes Dashboard 2.0.
The article analyzes a recurring Kubernetes node NotReady problem where restarting kubelet only restores readiness for three minutes, explains the underlying PLEG timeout mechanism, investigates unresponsive Terway CNI plugin behavior, and presents a netlink‑timeout fix to prevent the issue.
This article details how to replace VM‑based Jenkins slaves with dynamically provisioned Kubernetes pods, covering architecture design, Jenkins master configuration, pod template YAML, custom Docker images, pipeline scripts, and performance tuning to improve resource utilization and scaling.
This article examines the evolution of Tencent's TSF Mesh Service Mesh platform, detailing its architecture, the technical hurdles faced when supporting heterogeneous environments, multi‑tenant isolation, DNS and Spring Cloud interoperability, and the solutions implemented to achieve robust, cloud‑native service governance.
This article explains the evolution from manual deployment to container orchestration, compares Docker Compose, Mesos, and Kubernetes, outlines DevOps principles, and provides a detailed overview of Kubernetes origins, features, architecture, and core components.
This article reviews the SIG Cloud‑Provider‑Alibaba webinar, explains Kubernetes container networking fundamentals, details Alibaba Cloud's high‑performance CNI implementation using Terway with exclusive and shared ENI modes, and shows how eBPF, AutoPath DNS and resource‑pooling improve scalability and latency.
This article details a hands‑on workshop that automates the provisioning of a Kubernetes‑based .NET Core microservice environment and CI/CD pipeline using infrastructure‑as‑code scripts, covering tool selection, script workflows, deployment steps, and initialization techniques for reproducible cloud‑native development.
This article walks through the complete process of moving a project to a Kubernetes platform, covering image creation, pod controller management, data persistence, service exposure, external publishing, CI/CD integration, and detailed command‑line examples for building, pushing, and deploying Docker images.
The article explains Docker's new cross‑platform Compose specification, highlights its concise syntax and cloud‑native benefits over Kubernetes, showcases example configurations, and describes related open‑source projects and Lingque Cloud's contributions to the spec development.
This guide walks through the fundamentals of Kubernetes Horizontal Pod Autoscaler (HPA), explains custom and external metrics, shows how to deploy and configure the metrics‑server, and provides step‑by‑step examples for scaling a PHP‑Apache deployment and an Nginx pod using CPU, memory, and custom metrics.
This article explains the fundamentals and advantages of edge computing, examines how Kubernetes can be applied to edge scenarios, discusses the challenges involved, and reviews major open‑source Kubernetes‑based edge projects such as K3s, Microk8s, and KubeEdge.
This article explains the fundamentals of Kubernetes persistent storage, defines key terms such as PV, PVC, StorageClass and CSI, describes static and dynamic volume creation with NFS examples, and provides a detailed step‑by‑step walkthrough of the provisioning, attaching, mounting, and deletion processes inside the Kubernetes control plane.
This article details Ctrip Cloud Container's practical experience in building a unified, policy‑driven scheduling framework for Kubernetes, covering algorithm parameterization, affinity configuration, extended resource‑balancing, load‑aware scoring, and performance tuning that together raise scheduling throughput by over five times in large‑scale clusters.
The article explores the current state of Serverless, comparing its hype to teenage sex, examines why many talk about it without practical implementation, outlines its vision of abstracting servers, discusses gaps in programming models and cloud native tooling, and identifies the real needs for stability, security, and cost‑effective resource management.
In a live Q&A, OPPO cloud platform senior backend engineer shares practical insights on hybrid deployment of offline jobs on Kubernetes, custom high‑performance monitoring with a distributed TSDB, storage scalability via CSI, pod readiness detection, and deploying Ceph/HDFS within the container cluster.
This technical guide explains how to build a Vue SSR service using Koa, outlines the project benefits and trade‑offs, details the directory structure, server and client entry files, webpack configurations, and describes a Docker‑based CI/CD pipeline with Kubernetes deployment for scalable production environments.
