https://www.sre.wang/en/categories/container-deployment/Recent content in Container Deployment on SRE Engineering PracticeHugo -- gohugo.ioenThu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/en/posts/k8s-edge-computing-k3s/Thu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/en/posts/k8s-edge-computing-k3s/From K3s architecture principles to production-grade edge cluster deployment — covering multi-node setup, air-gapped installation, networking, edge autonomy, monitoring, and troubleshootinghttps://www.sre.wang/en/posts/istio-service-mesh-getting-started/Sun, 12 Jul 2026 01:18:19 +0800https://www.sre.wang/en/posts/istio-service-mesh-getting-started/What problem does Service Mesh actually solve? How to choose between Istio's Sidecar and Ambient modes? This article walks you through architecture principles, installation, traffic management, and security policies from zero to production.https://www.sre.wang/en/posts/helm-chart-writing-guide/Thu, 16 Jan 2025 00:00:00 +0000https://www.sre.wang/en/posts/helm-chart-writing-guide/From Helm Chart directory structure to template syntax, values layer override, named templates and hooks, through Harbor private repository deployment and CI/CD integration—a hands-on guide to writing a complete web application Helm Charthttps://www.sre.wang/en/posts/kubernetes-cluster-upgrade-strategy/Fri, 03 Jan 2025 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-cluster-upgrade-strategy/A systematic guide to Kubernetes cluster upgrade workflows, version compatibility management, blue-green/canary strategies, rollback mechanisms, and production best practiceshttps://www.sre.wang/en/posts/kubernetes-cost-optimization/Fri, 22 Nov 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-cost-optimization/A systematic Kubernetes cost optimization methodology covering resource configuration governance, autoscaling strategies, Spot instance utilization, and FinOps culture buildinghttps://www.sre.wang/en/posts/kubernetes-multi-cluster-management/Wed, 20 Nov 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-multi-cluster-management/From multi-cluster architecture patterns and KubeFed/Cluster API/Karmada/OCM comparison to cross-cluster service discovery, unified CI/CD, config sync, and disaster recovery failover—a complete practical guidehttps://www.sre.wang/en/posts/kubernetes-disaster-recovery/Mon, 21 Oct 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-disaster-recovery/Deep dive into etcd backup and restore, Velero backup solutions, PV data backup, cross-cluster recovery, recovery drills, and disaster recovery architecture designhttps://www.sre.wang/en/posts/kubernetes-hpa-vpa-ca/Mon, 19 Aug 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-hpa-vpa-ca/From HPA principles and custom metrics, VPA usage and limitations, Cluster Autoscaler to KEDA event-driven scaling—a systematic guide to K8s autoscaling mechanisms and production practiceshttps://www.sre.wang/en/posts/kubernetes-operator-development/Tue, 23 Jul 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-operator-development/From CRD design, Controller principles and Reconcile loops to operator-sdk/kubebuilder hands-on development, Finalizer, Leader Election, testing, and release operationshttps://www.sre.wang/en/posts/containerd-cri-runtime/Fri, 14 Jun 2024 00:00:00 +0000https://www.sre.wang/en/posts/containerd-cri-runtime/From CRI specification to Docker/containerd/CRI-O comparison, deep dive into containerd architecture, image management, namespaces, snapshotter, and migration practiceshttps://www.sre.wang/en/posts/kubernetes-rbac-security/Thu, 02 May 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-rbac-security/From RBAC models and ServiceAccount management to Pod Security Standards, SecurityContext, NetworkPolicies, and audit logs—a comprehensive guide to Kubernetes cluster security hardeninghttps://www.sre.wang/en/posts/kubernetes-scheduler-tuning/Mon, 29 Apr 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-scheduler-tuning/From scheduling flow, filtering and scoring to node affinity/anti-affinity, taints and tolerations, priority and preemption, and custom schedulers—a deep divehttps://www.sre.wang/en/posts/k8s-networking-cni-service/Fri, 12 Apr 2024 00:00:00 +0000https://www.sre.wang/en/posts/k8s-networking-cni-service/A deep dive into the four core requirements of the Kubernetes networking model, a comparison of Calico/Flannel/Cilium CNI plugins, detailed Service types and Ingress controller selection, plus hands-on NetworkPolicy configurationhttps://www.sre.wang/en/posts/kubernetes-ingress-controller/Wed, 27 Mar 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-ingress-controller/From Ingress principles to Nginx/Traefik/HAProxy/Envoy controller comparison, covering TLS termination, path routing, canary deployment, and performance tuning for productionhttps://www.sre.wang/en/posts/docker-image-optimization/Thu, 14 Mar 2024 00:00:00 +0000https://www.sre.wang/en/posts/docker-image-optimization/A systematic guide to Docker image optimization covering multi-stage builds, base image selection, layer caching, and slimming tools, with a hands-on walkthrough of reducing a Go application image from 876MB to 18MBhttps://www.sre.wang/en/posts/docker-compose-production-guide/Wed, 07 Feb 2024 00:00:00 +0000https://www.sre.wang/en/posts/docker-compose-production-guide/From multi-service orchestration, health checks, and dependency management to resource limits, logging, and secret management—a systematic guide to Docker Compose best practices in production, covering Swarm deployment and K8s migration pathshttps://www.sre.wang/en/posts/container-persistent-storage/Tue, 06 Feb 2024 00:00:00 +0000https://www.sre.wang/en/posts/container-persistent-storage/An in-depth analysis of Kubernetes PV/PVC/StorageClass three-layer storage abstraction, CSI driver comparison, a storage selection matrix with stateful application deployment guidelines, and hands-on storage troubleshootinghttps://www.sre.wang/en/posts/k8s-resource-management-requests-limits/Fri, 02 Feb 2024 00:00:00 +0000https://www.sre.wang/en/posts/k8s-resource-management-requests-limits/An in-depth analysis of Kubernetes Requests and Limits semantics, QoS class determination, OOMKilled diagnosis, ResourceQuota/LimitRange quota management, and VPA usage, with a production resource recommendation methodology