K8s.
13 posts — Posts about K8s
Rate Limiting in Istio
Global rate limiting on the Istio IngressGateway with Envoy RateLimit + Redis: a full config walkthrough, how requests are evaluated, and the common pitfalls around domain and descriptor matching.
Polaris Mesh
PolarisMesh is Tencent's open-source one-stop cloud-native service governance platform, covering service registration and discovery, traffic management, fault tolerance, and configuration management. This post walks through its core features and compares its positioning against Nacos.
Alibaba Cloud ASK Clusters
Notes from evaluating Alibaba Cloud ASK (Serverless Kubernetes): what it is and how it works, its pros and cons versus self-hosted K8S, and the cost and vendor lock-in concerns to weigh when choosing it.
A First Look at Service Mesh
Starting from the limitations of microservices, this post walks through the Sidecar approach behind Service Mesh, mainstream implementations like Istio, and how Knative and Serverless grew out of the mesh.
Kata: A Secure Container Runtime
Traditional containers share the host kernel, which leaves a security gap in isolation. This post introduces how Kata achieves kernel-level isolation through lightweight virtual machines, along with its strengths and shortcomings.
Traffic Mirroring with Istio
Using Istio's Envoy proxy in a k8s cluster to mirror traffic: duplicate real requests to a shadow service while responses are discarded, completely transparent to the application. Covers the mechanics, VirtualService configuration, and a few pitfalls from real-world use.
Helm: The Package Manager for Kubernetes
When the yaml files in your cluster become too many to maintain, Helm packages configuration into reusable, versioned Charts. This post covers the problem it solves, its core concepts and everyday commands, plus a UI management tool worth trying.
Kubernetes Pod YAML Explained Field by Field
A field-by-field annotated Pod YAML reference: metadata, containers, probes, resource limits, volumes and other common settings, plus spelling traps and tips for querying with kubectl explain.
Deploying Istio on Kubernetes
An overview of Istio's architecture and core components, along with a walkthrough of installing Istio on a Kubernetes cluster with Helm and deploying the Bookinfo sample application.
Frequently Used kubectl Commands
A scenario-based collection of the kubectl commands I use most in day-to-day operations: viewing resources, creating and deleting them, node maintenance, and exporting configs, plus caveats for force-deleting Pods and draining nodes.