Notes / tag / production

#production

13 notes across 2 topics

1 — High Availability

Running three or more control-plane replicas behind a load balancer only buys availability if etcd quorum, not just the API server, survives the loss of any single node.

kubernetes production book

2 — Disaster Recovery

Disaster recovery is defined by RTO and RPO targets negotiated before an outage, not by how fast a runbook can be executed after one.

kubernetes production book

3 — Backup & Restore

Backing up etcd snapshots without also capturing PV data and CRDs restores a control plane that boots but manages nothing.

kubernetes production book

4 — Multi-Tenancy

Namespace isolation alone is not a security boundary; without NetworkPolicies, ResourceQuotas, and PodSecurityAdmission, one hostile tenant can starve or reach every other tenant on the same node.

kubernetes production book

5 — Cost Optimization

Most Kubernetes clusters waste money on the requested-vs-used gap, not on compute price: pods routinely request two to three times what they actually consume, so right-sizing requests beats chasing spot-instance discounts.

kubernetes production book

6 — Reliability Engineering

Kubernetes self-healing masks the symptoms of reliability problems, not the causes, so an SLO-driven error budget is what actually tells you whether the system is healthy.

kubernetes production book

7 — Production Anti-Patterns

Missing resource requests/limits, floating 'latest' image tags, and skipped liveness/readiness probes are the three anti-patterns responsible for the majority of production Kubernetes incidents.

kubernetes production book

8 — Kubernetes Failure Modes

The most dangerous Kubernetes failures are control-plane and etcd degradations, not pod crashes, because they fail silently — the API server keeps serving stale state while nothing can actually be scheduled or reconciled.

kubernetes production book

9 — Real Production Case Studies

Post-incident reviews from real Kubernetes outages consistently trace root cause to a control-plane or DNS bottleneck — CoreDNS, etcd, API server throttling — rather than the workload code itself.

kubernetes production book