https://www.sre.wang/categories/%E5%AE%B9%E5%99%A8%E5%8C%96%E9%83%A8%E7%BD%B2/Recent content in 容器化部署 on SRE工程实践Hugo -- gohugo.iozh-cnThu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/posts/k8s-edge-computing-k3s/Thu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/posts/k8s-edge-computing-k3s/从 K3s 架构原理到生产级边缘集群部署，涵盖多节点集群搭建、离线安装、网络方案选型、边缘自治、监控告警与故障排查的完整实战指南https://www.sre.wang/posts/istio-service-mesh-getting-started/Sun, 12 Jul 2026 01:18:19 +0800https://www.sre.wang/posts/istio-service-mesh-getting-started/Service Mesh 到底解决什么问题？Istio 的 Sidecar 模式和 Ambient 模式怎么选？本文从架构原理到安装部署、流量管理、安全策略，带你从零跑通 Istio。https://www.sre.wang/posts/kubernetes-security-hardening/Sat, 04 Jul 2026 10:59:00 +0800https://www.sre.wang/posts/kubernetes-security-hardening/Kubernetes 安全加固：RBAC、NetworkPolicy 与 Pod 安全策略的学习笔记与实践总结https://www.sre.wang/posts/linux-namespace-cgroups-basics/Sun, 28 Jun 2026 16:34:00 +0800https://www.sre.wang/posts/linux-namespace-cgroups-basics/Linux 命名空间与 cgroups：容器技术的底层基础的学习笔记与实践总结https://www.sre.wang/posts/cloud-native-security-practices/Sun, 26 Oct 2025 21:10:00 +0800https://www.sre.wang/posts/cloud-native-security-practices/云原生安全实践：容器安全、镜像扫描与运行时防护的学习笔记与实践总结https://www.sre.wang/posts/helm-chart-writing-guide/Thu, 16 Jan 2025 00:00:00 +0000https://www.sre.wang/posts/helm-chart-writing-guide/从 Helm Chart 目录结构到模板语法、values 层级覆盖、命名模板与钩子，再到 Harbor 私有仓库部署与 CI/CD 集成，实战编写完整的 Web 应用 Helm Charthttps://www.sre.wang/posts/kubernetes-cluster-upgrade-strategy/Fri, 03 Jan 2025 00:00:00 +0000https://www.sre.wang/posts/kubernetes-cluster-upgrade-strategy/详细梳理 Kubernetes 集群升级的完整流程、版本兼容性管理、蓝绿/金丝雀升级策略、回滚机制与生产实践https://www.sre.wang/posts/kubernetes-cost-optimization/Fri, 22 Nov 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-cost-optimization/系统化 Kubernetes 成本优化方法论，涵盖资源配置治理、自动扩缩容策略、Spot 实例利用和 FinOps 文化建设https://www.sre.wang/posts/kubernetes-multi-cluster-management/Wed, 20 Nov 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-multi-cluster-management/从多集群架构模式、KubeFed/Cluster API/Karmada/OCM 对比到跨集群服务发现、统一 CI/CD、配置同步与容灾切换的完整实践指南https://www.sre.wang/posts/kubernetes-disaster-recovery/Mon, 21 Oct 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-disaster-recovery/从 etcd 备份恢复、Velero 备份方案、PV 数据备份到跨集群恢复、恢复演练与 RTO/RPO 设计的完整灾备实践指南https://www.sre.wang/posts/kubernetes-hpa-vpa-ca/Mon, 19 Aug 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-hpa-vpa-ca/从 HPA 原理与自定义指标、VPA 使用与限制、Cluster Autoscaler 到 KEDA 事件驱动扩缩，详细梳理 K8s 自动扩缩容机制与生产实践https://www.sre.wang/posts/kubernetes-operator-development/Tue, 23 Jul 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-operator-development/从 CRD 设计、Controller 原理到 operator-sdk/kubebuilder 开发实战，涵盖 Reconcile 循环、状态管理、Leader Election 与发布运维全流程https://www.sre.wang/posts/containerd-cri-runtime/Fri, 14 Jun 2024 00:00:00 +0000https://www.sre.wang/posts/containerd-cri-runtime/从 CRI 规范到 Docker/containerd/CRI-O 对比，深入 containerd 架构、镜像管理、命名空间、snapshotter 与迁移实践https://www.sre.wang/posts/kubernetes-pod-troubleshooting/Wed, 08 May 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-pod-troubleshooting/Kubernetes常见Pod故障状态诊断与排查方法速查手册https://www.sre.wang/posts/kubernetes-rbac-security/Thu, 02 May 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-rbac-security/从 RBAC 模型、ServiceAccount 管理到 Pod Security Standards、SecurityContext、网络策略与审计日志，全面解析 Kubernetes 集群安全加固的实践方案https://www.sre.wang/posts/kubernetes-scheduler-tuning/Mon, 29 Apr 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-scheduler-tuning/从调度流程、过滤与打分到节点亲和性/反亲和性、污点与容忍、优先级与抢占、自定义调度器的深入分析https://www.sre.wang/posts/k8s-networking-cni-service/Fri, 12 Apr 2024 00:00:00 +0000https://www.sre.wang/posts/k8s-networking-cni-service/深入理解 Kubernetes 网络模型四大要求，对比 Calico/Flannel/Cilium 三大 CNI 插件，详解 Service 类型与 Ingress 控制器选型，附 NetworkPolicy 实战配置https://www.sre.wang/posts/kubernetes-ingress-controller/Wed, 27 Mar 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-ingress-controller/从 Ingress 原理到 Nginx/Traefik/HAProxy/Envoy 控制器对比，涵盖 TLS 终止、路径路由、灰度发布与性能调优的生产实践指南https://www.sre.wang/posts/docker-image-optimization/Thu, 14 Mar 2024 00:00:00 +0000https://www.sre.wang/posts/docker-image-optimization/从镜像过大的危害出发，详细梳理多阶段构建、基础镜像选型、层缓存优化与瘦身工具，实战演示 Go 应用镜像从 876MB 优化到 18MB 的完整流程https://www.sre.wang/posts/docker-compose-production-guide/Wed, 07 Feb 2024 00:00:00 +0000https://www.sre.wang/posts/docker-compose-production-guide/从多服务编排、健康检查、依赖管理到资源限制、日志配置、密钥管理，详细梳理 Docker Compose 在生产环境的好的实践，涵盖 Swarm 部署与 K8s 迁移路径https://www.sre.wang/posts/container-persistent-storage/Tue, 06 Feb 2024 00:00:00 +0000https://www.sre.wang/posts/container-persistent-storage/深入理解 Kubernetes PV/PVC/StorageClass 三层存储抽象，对比 CSI 驱动方案，提供存储选型矩阵与有状态应用部署指南，附存储故障排查实战https://www.sre.wang/posts/k8s-resource-management-requests-limits/Fri, 02 Feb 2024 00:00:00 +0000https://www.sre.wang/posts/k8s-resource-management-requests-limits/深入理解 Kubernetes Requests 与 Limits 语义、QoS 等级判定、OOMKilled 诊断、ResourceQuota/LimitRange 配额管理及 VPA 使用，附生产环境资源推荐值设定方法论