https://www.sre.wang/en/tags/kubernetes/Recent content in Kubernetes on SRE Engineering PracticeHugo -- gohugo.ioenThu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/en/posts/k8s-edge-computing-k3s/Thu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/en/posts/k8s-edge-computing-k3s/From K3s architecture principles to production-grade edge cluster deployment — covering multi-node setup, air-gapped installation, networking, edge autonomy, monitoring, and troubleshootinghttps://www.sre.wang/en/posts/istio-service-mesh-getting-started/Sun, 12 Jul 2026 01:18:19 +0800https://www.sre.wang/en/posts/istio-service-mesh-getting-started/What problem does Service Mesh actually solve? How to choose between Istio's Sidecar and Ambient modes? This article walks you through architecture principles, installation, traffic management, and security policies from zero to production.https://www.sre.wang/en/posts/kubernetes-security-hardening/Sat, 04 Jul 2026 10:59:00 +0800https://www.sre.wang/en/posts/kubernetes-security-hardening/Practical guide on kubernetes security hardening for SRE operationshttps://www.sre.wang/en/posts/sre-change-management-canary-release/Tue, 11 Feb 2025 00:00:00 +0000https://www.sre.wang/en/posts/sre-change-management-canary-release/An in-depth exploration of change management from an SRE perspective, covering canary release, blue-green deployment, fast rollback mechanisms, and Argo Rollouts practical configurationhttps://www.sre.wang/en/posts/helm-chart-writing-guide/Thu, 16 Jan 2025 00:00:00 +0000https://www.sre.wang/en/posts/helm-chart-writing-guide/From Helm Chart directory structure to template syntax, values layer override, named templates and hooks, through Harbor private repository deployment and CI/CD integration—a hands-on guide to writing a complete web application Helm Charthttps://www.sre.wang/en/posts/sre-reliability-engineering-practice/Thu, 09 Jan 2025 00:00:00 +0000https://www.sre.wang/en/posts/sre-reliability-engineering-practice/A systematic guide to SRE reliability engineering practices, covering the reliability maturity model, MTTR/MTBF optimization, chaos engineering, self-healing system design, and reliability measurementhttps://www.sre.wang/en/posts/kubernetes-cluster-upgrade-strategy/Fri, 03 Jan 2025 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-cluster-upgrade-strategy/A systematic guide to Kubernetes cluster upgrade workflows, version compatibility management, blue-green/canary strategies, rollback mechanisms, and production best practiceshttps://www.sre.wang/en/posts/sre-chaos-engineering/Tue, 17 Dec 2024 00:00:00 +0000https://www.sre.wang/en/posts/sre-chaos-engineering/A systematic guide to chaos engineering principles, experiment design, blast radius control, Kubernetes chaos experiments with Chaos Mesh, and the path from drills to normalized practicehttps://www.sre.wang/en/posts/kubernetes-cost-optimization/Fri, 22 Nov 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-cost-optimization/A systematic Kubernetes cost optimization methodology covering resource configuration governance, autoscaling strategies, Spot instance utilization, and FinOps culture buildinghttps://www.sre.wang/en/posts/kubernetes-multi-cluster-management/Wed, 20 Nov 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-multi-cluster-management/From multi-cluster architecture patterns and KubeFed/Cluster API/Karmada/OCM comparison to cross-cluster service discovery, unified CI/CD, config sync, and disaster recovery failover—a complete practical guidehttps://www.sre.wang/en/posts/kubernetes-disaster-recovery/Mon, 21 Oct 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-disaster-recovery/Deep dive into etcd backup and restore, Velero backup solutions, PV data backup, cross-cluster recovery, recovery drills, and disaster recovery architecture designhttps://www.sre.wang/en/posts/kubernetes-hpa-vpa-ca/Mon, 19 Aug 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-hpa-vpa-ca/From HPA principles and custom metrics, VPA usage and limitations, Cluster Autoscaler to KEDA event-driven scaling—a systematic guide to K8s autoscaling mechanisms and production practiceshttps://www.sre.wang/en/posts/kubernetes-operator-development/Tue, 23 Jul 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-operator-development/From CRD design, Controller principles and Reconcile loops to operator-sdk/kubebuilder hands-on development, Finalizer, Leader Election, testing, and release operationshttps://www.sre.wang/en/posts/sre-capacity-planning/Thu, 27 Jun 2024 00:00:00 +0000https://www.sre.wang/en/posts/sre-capacity-planning/A systematic guide to capacity planning engineering practices, covering metric collection, data modeling, Kubernetes HPA/VPA configuration, and common pitfallshttps://www.sre.wang/en/posts/kubernetes-pod-troubleshooting/Wed, 08 May 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-pod-troubleshooting/Quick reference for diagnosing and resolving common Kubernetes Pod failure stateshttps://www.sre.wang/en/posts/kubernetes-rbac-security/Thu, 02 May 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-rbac-security/From RBAC models and ServiceAccount management to Pod Security Standards, SecurityContext, NetworkPolicies, and audit logs—a comprehensive guide to Kubernetes cluster security hardeninghttps://www.sre.wang/en/posts/kubernetes-scheduler-tuning/Mon, 29 Apr 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-scheduler-tuning/From scheduling flow, filtering and scoring to node affinity/anti-affinity, taints and tolerations, priority and preemption, and custom schedulers—a deep divehttps://www.sre.wang/en/posts/k8s-networking-cni-service/Fri, 12 Apr 2024 00:00:00 +0000https://www.sre.wang/en/posts/k8s-networking-cni-service/A deep dive into the four core requirements of the Kubernetes networking model, a comparison of Calico/Flannel/Cilium CNI plugins, detailed Service types and Ingress controller selection, plus hands-on NetworkPolicy configurationhttps://www.sre.wang/en/posts/kubernetes-ingress-controller/Wed, 27 Mar 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-ingress-controller/From Ingress principles to Nginx/Traefik/HAProxy/Envoy controller comparison, covering TLS termination, path routing, canary deployment, and performance tuning for productionhttps://www.sre.wang/en/posts/kubectl-productive-aliases/Tue, 12 Mar 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubectl-productive-aliases/From alias configuration to krew plugin management, k9s interactive tool, custom plugin development, and troubleshooting tips — comprehensively boost your kubectl workflow efficiencyhttps://www.sre.wang/en/posts/container-persistent-storage/Tue, 06 Feb 2024 00:00:00 +0000https://www.sre.wang/en/posts/container-persistent-storage/An in-depth analysis of Kubernetes PV/PVC/StorageClass three-layer storage abstraction, CSI driver comparison, a storage selection matrix with stateful application deployment guidelines, and hands-on storage troubleshootinghttps://www.sre.wang/en/posts/k8s-resource-management-requests-limits/Fri, 02 Feb 2024 00:00:00 +0000https://www.sre.wang/en/posts/k8s-resource-management-requests-limits/An in-depth analysis of Kubernetes Requests and Limits semantics, QoS class determination, OOMKilled diagnosis, ResourceQuota/LimitRange quota management, and VPA usage, with a production resource recommendation methodology