https://www.sre.wang/tags/kubernetes/Recent content in Kubernetes on SRE工程实践Hugo -- gohugo.iozh-cnThu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/posts/k8s-edge-computing-k3s/Thu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/posts/k8s-edge-computing-k3s/从 K3s 架构原理到生产级边缘集群部署，涵盖多节点集群搭建、离线安装、网络方案选型、边缘自治、监控告警与故障排查的完整实战指南https://www.sre.wang/posts/istio-service-mesh-getting-started/Sun, 12 Jul 2026 01:18:19 +0800https://www.sre.wang/posts/istio-service-mesh-getting-started/Service Mesh 到底解决什么问题？Istio 的 Sidecar 模式和 Ambient 模式怎么选？本文从架构原理到安装部署、流量管理、安全策略，带你从零跑通 Istio。https://www.sre.wang/posts/kubernetes-security-hardening/Sat, 04 Jul 2026 10:59:00 +0800https://www.sre.wang/posts/kubernetes-security-hardening/Kubernetes 安全加固：RBAC、NetworkPolicy 与 Pod 安全策略的学习笔记与实践总结https://www.sre.wang/posts/sre-change-management-canary-release/Tue, 11 Feb 2025 00:00:00 +0000https://www.sre.wang/posts/sre-change-management-canary-release/深入探讨 SRE 视角下的变更管理，涵盖金丝雀发布、蓝绿部署、快速回滚机制及 Argo Rollouts 实战配置https://www.sre.wang/posts/helm-chart-writing-guide/Thu, 16 Jan 2025 00:00:00 +0000https://www.sre.wang/posts/helm-chart-writing-guide/从 Helm Chart 目录结构到模板语法、values 层级覆盖、命名模板与钩子，再到 Harbor 私有仓库部署与 CI/CD 集成，实战编写完整的 Web 应用 Helm Charthttps://www.sre.wang/posts/sre-reliability-engineering-practice/Thu, 09 Jan 2025 00:00:00 +0000https://www.sre.wang/posts/sre-reliability-engineering-practice/详细梳理 SRE 可靠性工程的落地实践，涵盖可靠性层级模型、MTTR/MTBF 优化、混沌工程、自愈系统设计与可靠性度量https://www.sre.wang/posts/kubernetes-cluster-upgrade-strategy/Fri, 03 Jan 2025 00:00:00 +0000https://www.sre.wang/posts/kubernetes-cluster-upgrade-strategy/详细梳理 Kubernetes 集群升级的完整流程、版本兼容性管理、蓝绿/金丝雀升级策略、回滚机制与生产实践https://www.sre.wang/posts/sre-chaos-engineering/Tue, 17 Dec 2024 00:00:00 +0000https://www.sre.wang/posts/sre-chaos-engineering/详细梳理混沌工程原理、实验设计方法、爆炸半径控制、Kubernetes 混沌实验（Chaos Mesh）与从演练到常态的实践路径https://www.sre.wang/posts/kubernetes-cost-optimization/Fri, 22 Nov 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-cost-optimization/系统化 Kubernetes 成本优化方法论，涵盖资源配置治理、自动扩缩容策略、Spot 实例利用和 FinOps 文化建设https://www.sre.wang/posts/kubernetes-multi-cluster-management/Wed, 20 Nov 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-multi-cluster-management/从多集群架构模式、KubeFed/Cluster API/Karmada/OCM 对比到跨集群服务发现、统一 CI/CD、配置同步与容灾切换的完整实践指南https://www.sre.wang/posts/kubernetes-disaster-recovery/Mon, 21 Oct 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-disaster-recovery/从 etcd 备份恢复、Velero 备份方案、PV 数据备份到跨集群恢复、恢复演练与 RTO/RPO 设计的完整灾备实践指南https://www.sre.wang/posts/kubernetes-hpa-vpa-ca/Mon, 19 Aug 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-hpa-vpa-ca/从 HPA 原理与自定义指标、VPA 使用与限制、Cluster Autoscaler 到 KEDA 事件驱动扩缩，详细梳理 K8s 自动扩缩容机制与生产实践https://www.sre.wang/posts/kubernetes-operator-development/Tue, 23 Jul 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-operator-development/从 CRD 设计、Controller 原理到 operator-sdk/kubebuilder 开发实战，涵盖 Reconcile 循环、状态管理、Leader Election 与发布运维全流程https://www.sre.wang/posts/sre-capacity-planning/Thu, 27 Jun 2024 00:00:00 +0000https://www.sre.wang/posts/sre-capacity-planning/从容量指标采集、数据建模到 Kubernetes HPA/VPA 配置，系统性讲解容量规划与弹性扩容的工程实践https://www.sre.wang/posts/kubernetes-pod-troubleshooting/Wed, 08 May 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-pod-troubleshooting/Kubernetes常见Pod故障状态诊断与排查方法速查手册https://www.sre.wang/posts/kubernetes-rbac-security/Thu, 02 May 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-rbac-security/从 RBAC 模型、ServiceAccount 管理到 Pod Security Standards、SecurityContext、网络策略与审计日志，全面解析 Kubernetes 集群安全加固的实践方案https://www.sre.wang/posts/kubernetes-scheduler-tuning/Mon, 29 Apr 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-scheduler-tuning/从调度流程、过滤与打分到节点亲和性/反亲和性、污点与容忍、优先级与抢占、自定义调度器的深入分析https://www.sre.wang/posts/k8s-networking-cni-service/Fri, 12 Apr 2024 00:00:00 +0000https://www.sre.wang/posts/k8s-networking-cni-service/深入理解 Kubernetes 网络模型四大要求，对比 Calico/Flannel/Cilium 三大 CNI 插件，详解 Service 类型与 Ingress 控制器选型，附 NetworkPolicy 实战配置https://www.sre.wang/posts/kubernetes-ingress-controller/Wed, 27 Mar 2024 00:00:00 +0000https://www.sre.wang/posts/kubernetes-ingress-controller/从 Ingress 原理到 Nginx/Traefik/HAProxy/Envoy 控制器对比，涵盖 TLS 终止、路径路由、灰度发布与性能调优的生产实践指南https://www.sre.wang/posts/kubectl-productive-aliases/Tue, 12 Mar 2024 00:00:00 +0000https://www.sre.wang/posts/kubectl-productive-aliases/从别名配置到 krew 插件管理、k9s 交互工具、自定义插件开发与排障技巧，全面提升 kubectl 使用效率https://www.sre.wang/posts/container-persistent-storage/Tue, 06 Feb 2024 00:00:00 +0000https://www.sre.wang/posts/container-persistent-storage/深入理解 Kubernetes PV/PVC/StorageClass 三层存储抽象，对比 CSI 驱动方案，提供存储选型矩阵与有状态应用部署指南，附存储故障排查实战https://www.sre.wang/posts/k8s-resource-management-requests-limits/Fri, 02 Feb 2024 00:00:00 +0000https://www.sre.wang/posts/k8s-resource-management-requests-limits/深入理解 Kubernetes Requests 与 Limits 语义、QoS 等级判定、OOMKilled 诊断、ResourceQuota/LimitRange 配额管理及 VPA 使用，附生产环境资源推荐值设定方法论