This tutorial walks you through creating a simple SpringBoot web application, containerizing it with Docker, and deploying it to a Kubernetes cluster using Pods, Deployments, Services, and Ingress, while highlighting common pitfalls and comparing Java's resource usage to Go.
This article explains how the open‑source Kruise Rollout framework enables progressive delivery on Kubernetes, covering Gateway API‑based canary releases, batch rollouts for StatefulSet and Advanced StatefulSet, pod batch labeling, and integration with KubeVela for seamless canary deployments.
This article explains how Kubernetes secures its API Server through authentication and authorization, covering user types, authentication methods such as client certificates, bearer tokens, OIDC, and static token files, and then details the RBAC model, role bindings, and service account usage for fine‑grained access control.
This article reviews the most popular GitOps tools for Kubernetes, explains the GitOps concept, and details how each tool—such as ArgoCD, Flux, Helm, Crossplane, and Argo Rollouts—enables declarative, automated, and auditable infrastructure management.
This guide explains how to install the Tektoncd Operator on a Kubernetes cluster, configure its CRDs, choose installation methods, customize component images, apply predefined profiles, and run a simple hello‑goodbye pipeline using Tekton tasks and PipelineRun objects.
This article explains how Kubernetes' kubelet performs container and image garbage collection, details the configurable thresholds and limits, and presents step‑by‑step experiments that demonstrate the impact of different settings on image and container cleanup behavior.
This article explains why Kubernetes’s true value lies in its extensible, declarative API framework rather than containers, illustrates the API types, shows how Custom Resource Definitions act like database tables, and provides practical examples of creating, querying, and managing CRDs with kubectl.
This article chronicles the evolution of a SaaS product from a simple monolithic SPA through microservice decomposition to containerized deployment, detailing API design, CI/CD pipelines, Spring Cloud and Kubernetes integration, automated tracing, monitoring, and lessons learned for small development teams.
The article analyzes Meituan’s self‑designed Load Auto‑Regulator (LAR), detailing its tiered resource‑pool architecture, dynamic load‑to‑static‑resource mapping, and QoS mechanisms that together raise data‑center CPU utilization by 5‑10% while keeping online service quality stable, and discusses its deployment in online and mixed‑workload scenarios.
This article explains Kubernetes' fundamental network requirements, the pod networking model, the role of CNI plugins, common implementation approaches, and how Network Policies provide fine-grained traffic control, offering a comprehensive overview of container networking within cloud-native clusters.
The Kubernetes scheduler continuously watches for unscheduled Pods, places them in a priority queue, filters feasible Nodes, scores and selects the best Node using built‑in and custom plugins—adjusting the node‑sampling rate for large clusters, and allowing extensibility through extenders, multiple schedulers, and the scheduler framework configuration.
This article provides a comprehensive overview of Kubernetes, covering its master‑node architecture, core components such as API Server, Scheduler, and Controllers, the step‑by‑step creation of Deployments, the role of Pods, container orchestration patterns, networking fundamentals, and service discovery mechanisms for microservices.
This guide explains how to connect Dubbo services to Aeraki Mesh using Dubbo2Istio or direct ServiceEntry definitions, covering configuration, environment variables, Kubernetes deployment, and client adjustments to achieve comprehensive L7 traffic routing, load balancing, and rate limiting within an Istio service mesh.
This tutorial demonstrates how to install Aeraki and Istio, deploy Dubbo sample services, define ServiceEntry and MetaRouter resources, route traffic to a primary version, mirror traffic to a secondary version, verify logs, and explain the underlying MetaProtocol proxy mechanism for traffic mirroring.
This comprehensive guide walks you through installing a Kubernetes cluster with kubeadm, configuring containerd, initializing master and worker nodes, deploying Calico networking and the Dashboard, performing upgrades, renewing certificates, adding or removing nodes, and backing up both etcd data and cluster manifests using scripts and Velero.
This article explains how Docker containers rely on Linux cgroups and namespaces for resource isolation, details CPU share and quota scheduling, and shows practical commands to inspect cgroup assignments, helping developers optimize container performance on Kubernetes.
RedisInsight is a powerful GUI for Redis that supports cluster management, SSL connections, and memory analysis; this guide walks through downloading, installing on Linux, configuring environment variables, running as a service, deploying via Kubernetes, and using the web UI to monitor and operate Redis instances.
This article provides a comprehensive overview of Kubernetes architecture, explaining the roles of the master and node components, the deployment creation process, pod fundamentals, service discovery, networking mechanisms, and how micro‑services are orchestrated within a cloud‑native environment.
This article recounts a graduate student's step‑by‑step experience joining the CNCF Sealer project, detailing why the sandbox project attracted them, the challenges of early contributions, practical tips for navigating documentation, issues, pull requests, and community meetings, and how they eventually helped refactor the runtime module.
This article explains why alert fatigue harms on‑call teams in Kubernetes environments and offers eight practical techniques—ranging from metric definition to alert suppression—to reduce noise, improve response efficiency, and protect team well‑being.
This article systematically explains container cloud network architecture, covering fundamental concepts, protocol stacks, traversal and isolation methods, Docker and Kubernetes networking models, and a detailed comparison of CNI solutions such as Flannel, OVS, and Calico.
This article introduces four CNCF‑graduated open‑source projects—Prometheus, Jaeger, OpenTelemetry, and Thanos—that together provide metrics, alerts, tracing, and long‑term storage to improve observability, reduce downtime, and streamline troubleshooting for workloads running on Kubernetes.
This article explains what Kubernetes is, its declarative nature, key features, master‑slave architecture, essential components such as etcd, API server, controller manager, scheduler, kubelet, and kube‑proxy, and how they work together to enable scalable, resilient cloud‑native applications.
This article provides a comprehensive overview of Kubernetes, covering its master‑node architecture, core components like API server, scheduler, controller, kubelet and kube‑proxy, the deployment creation process, pod fundamentals, service networking, and common patterns such as scaling, rolling updates, and ingress access.
This article explains why exposing services on a bare‑metal Kubernetes cluster requires a custom load‑balancer solution, introduces MetalLB, details its deployment requirements, explains its Layer 2 and BGP modes, provides step‑by‑step installation commands, and shows how to verify the setup.
This article provides a concise overview of Kubernetes, explaining its master‑node architecture, describing key components such as API server, scheduler, controller, kubelet and kube‑proxy, and detailing how deployments, pods, services, networking, scaling, updates and ingress work together to orchestrate containerized applications.
This article explains what Docker container exit codes mean, how to view them using Kubernetes or Docker commands, and details the most common codes such as 0, 1, 137, 139, and 143, helping you diagnose why a container is not running.
Kruise Rollout, an open‑source progressive delivery framework from the OpenKruise community, extends native Kubernetes workloads with incremental, traffic‑aware rollouts, automated batch control via Prometheus metrics, and non‑intrusive integration, offering a robust alternative to Argo Rollout and Flagger for large‑scale deployments.
This article traces the 20‑year evolution of container technology—from early Unix chroot and FreeBSD jail, through Linux namespaces, cgroups and Docker’s image system, to modern orchestration with Kubernetes and cloud‑native runtimes—explaining core concepts, architectures, and best‑practice guidelines for building and managing containers.
This article examines post‑2022 DevOps trends—including GitOps, AIOps/MLOps, DevSecOps, FinOps, DataOps, chaos engineering, SRE, hybrid deployment, automation, IaC, serverless, cloud‑native, microservices, containerization, Kubernetes, edge computing, data observability, and platform engineering—illustrating each with real‑world case studies that show measurable improvements in speed, reliability, cost, and scalability.
After the 2015 Yeezy launch caused a massive traffic surge that crashed Adidas' website, the engineering team adopted cloud‑native infrastructure, Kubernetes, and DevOps practices, raising their release cadence from a six‑week cycle to five deployments per day.
This article explains why Docker containers stop running by detailing how to view exit codes, describing the most common exit codes such as 0, 1, 137, 139, and 143, and clarifying the actions that cause each code, helping developers troubleshoot container failures.
This article compares native Kubernetes Job workflows with Alibaba Cloud SchedulerX's visual scripting solution, showing step‑by‑step how to create, run, and monitor Jobs and CronJobs without building container images, and highlights SchedulerX's added features such as history, logging, alerts, and visual orchestration.
This article explains the Kubernetes networking model, covering container‑to‑container, pod‑to‑pod, pod‑to‑service, and external traffic flows, and shows how Linux network namespaces, virtual Ethernet pairs, bridges, iptables, IPVS, LoadBalancers and Ingress controllers work together to route traffic inside and outside a cluster.
This guide explains how to install and configure Red Hat OpenShift Local (CodeReady Containers) on a personal computer, covering prerequisites, download steps, cluster initialization, command‑line usage, common issues, and reference documentation for creating a single‑node OpenShift 4.x development environment.
This guide walks you through installing RedisInsight on Linux, configuring its environment variables, running it as a background service, deploying it on Kubernetes with a ready‑to‑use YAML, and using its UI to monitor Redis metrics, browse and edit data, and analyze memory usage.
This article walks developers through SaaS cloud‑native architecture, covering technology stack selection, multi‑tenant design at the application and data layers, microservice development with Spring Cloud and Huawei CSE, container deployment on CCE, and practical code examples from the SaaS‑Housekeeper project.
This comprehensive guide explains Kubernetes' networking model, covering core concepts, pod-to-pod communication, service routing, DNS integration, and external traffic handling, while detailing the underlying Linux network namespaces, virtual Ethernet pairs, bridges, and CNI plugins.
KubeZoo, an open‑source lightweight multi‑tenant solution from ByteDance, uses protocol conversion to create virtual tenants on a single Kubernetes master, offering native API compatibility, low overhead, and a serverless‑ready foundation while addressing the challenges of multi‑tenant cluster management.
This tutorial walks through installing Aeraki Mesh and sample Dubbo/Thrift services, creating a MetaRouter resource to add custom request headers, verifying the changes via sidecar logs, and explains how Aeraki translates MetaRouter rules into MetaProtocol Proxy configurations delivered through its internal RDS server.
This guide explains how to manually create Jenkins JNLP agents on a Kubernetes cluster, covering both static Deployment‑based agents and dynamic agents using the Kubernetes plugin, with detailed YAML definitions, pipeline scripts, and supporting helper functions for a complete CI/CD workflow.
This article provides an extensive overview of microservice architecture, tracing its evolution from monolithic to distributed services, detailing the advantages and drawbacks of each stage, and presenting a practical technology stack—including service discovery, API gateways, containerization, orchestration, logging, monitoring, and CI/CD—to help engineers design, implement, and operate modern cloud‑native systems.
This article explains how the emerging Gateway API in Kubernetes addresses the limitations of traditional Ingress by introducing a modular architecture, advanced load‑balancing features, and extensibility, positioning it as the future‑ready method for exposing services and APIs in cloud‑native environments.
This article provides a detailed introduction to etcd, covering its purpose as a highly‑available distributed key‑value store, core Raft‑based architecture, key concepts, common application scenarios, step‑by‑step installation and cluster deployment, as well as essential command‑line operations for managing data, backups, and cluster members.
This article explains how native Kubernetes objects—ClusterIP services, CoreDNS, and kube-proxy—work together to provide reliable service-to-service communication within a cluster, covering traditional IP-based approaches, the Kubernetes network model, DNS-based service discovery, and traffic routing via DNAT.
Knative is a CNCF‑incubated, cloud‑native serverless framework on Kubernetes that combines Build, Eventing, and Serving components—featuring a Knative Pod Autoscaler that can scale pods to zero—offering improved resource utilization, rapid traffic response, and developer productivity despite modest performance overhead.
Yelp migrated its high‑throughput Kafka clusters from dedicated EC2 instances to a Kubernetes‑based PaaSTA platform, introducing a custom Kafka operator and Cruise Control to streamline provisioning, lifecycle management, upgrades, and scaling, thereby reducing deployment time and improving maintainability.
This article explains the fundamentals of Kubernetes Service, walks through a real‑world failure case, details how to configure different Service types (ClusterIP, NodePort, LoadBalancer, ExternalName, Headless), and explores the underlying implementation mechanisms such as user‑space proxy, iptables, and IPVS.
ByteDance announced the open‑source KubeWharf project, a cloud‑native suite built on Kubernetes that includes high‑performance metadata storage (KubeBrain), a seven‑layer API gateway (KubeGateway), and a lightweight multi‑tenant solution (KubeZoo), detailing their features, roadmap, and the drive toward large‑scale, multi‑tenant cluster management.
This article explains the key Prometheus metrics for Kubernetes container CPU usage, provides exact PromQL formulas for calculating per‑container CPU percentages, and details how Docker stats reports memory and CPU usage, including the necessary calculations and sample code.
This tutorial walks through provisioning an Alibaba Cloud ACK Kubernetes cluster using Terraform, covering provider setup, VPC and VSwitch creation, managed Kubernetes resource definition, Jenkins deployment, DNS configuration, and cleanup procedures, with full code examples.
Airbnb migrated its services to Kubernetes and, over four years, evolved from manual scaling of homogeneous clusters to heterogeneous clusters with automated scaling, introducing a custom gRPC expander for the Cluster Autoscaler that enables weighted priority and plug‑in extensibility, reducing costs and operational overhead.
This article examines the pain points of distributed training orchestration and scheduling, presents a layered cloud‑native architecture built on Kubernetes, explains key components such as pipeline orchestrators, training job operators, schedulers, and topology managers, and discusses practical solutions using Argo, Kubeflow Pipelines, and the Volcano scheduler.
This article provides a thorough introduction to etcd, covering its purpose, history, core features, key terminology, internal architecture, common application scenarios such as service discovery and distributed locking, step‑by‑step installation and cluster deployment, essential command‑line operations, backup procedures, and practical recommendations.
The article analyzes three recent high‑severity CVEs in the Kubernetes Ingress Nginx project, explains how its combined control‑plane and data‑plane design creates serious security and stability risks, and demonstrates how the MSE cloud‑native gateway’s separated architecture and xDS‑based configuration provide a safer, more reliable alternative.
This article analyzes the difficulties of using vanilla Kubeflow for MLOps, introduces the kubeflow‑chart Helm chart that streamlines deployment and integrates tools like SQLFlow and kfpdist, and provides detailed installation commands and a roadmap of upcoming components for a full cloud‑native AI platform.
This article details a step‑by‑step investigation of a Java Spring‑Boot service that suffered nightly response‑time alerts, revealing that misconfigured Logback file paths caused cross‑volume log rotation, thread blocking, and ultimately a production outage, and shows how gray‑deployment and environment fixes resolved the issue.
This article provides a comprehensive overview of Kubernetes, covering its core functions, main components, service‑discovery mechanisms, pod‑level resource sharing, common CNI plugins, multi‑layer load balancing, isolation dimensions, and the fundamental network model principles that guide large‑scale container deployments.
This article explains the inner workings of Kubernetes leader election, covering the configuration of kube-controller-manager, the controller-runtime implementation, resource lock types, the election workflow, and a practical example of building a high‑availability application using Go and lease locks.
This tutorial walks through installing Aeraki Mesh and Istio on Kubernetes, deploying a fake Thrift service, configuring an Istio DestinationRule for outlier detection, and verifying that failed endpoints are automatically ejected to prevent cascade failures.
This tutorial explains how to set up Aeraki Mesh's global rate limiting for Dubbo and Thrift services in an Istio service mesh, covering the deployment of a rate‑limit server, configuration of rate‑limit rules, enabling limits via MetaRouter, and verifying the behavior with command‑line tools.
This tutorial demonstrates how to install Aeraki Mesh, use its MetaRouter CRD to configure local rate limiting for MetaProtocol services such as Dubbo and Thrift, apply per‑service and conditional limits, and view the generated sidecar proxy configuration in a Kubernetes environment.
This article explains why Stone Docs switched from SLS/ES to ClickHouse for Kubernetes log storage, outlines the four‑stage architecture (collection, transmission, storage, management), compares DaemonSet, network, and SideCar collection methods, and provides concrete ClickHouse table definitions and Fluent‑Bit configurations for a production‑grade logging pipeline.
This comprehensive guide explains the Kubernetes networking model, covering core concepts such as the API server, controllers, pods, nodes, and the layered network architecture, then walks through pod‑to‑pod, pod‑to‑service, and external traffic flows using CNI plugins, iptables, IPVS, bridges, and ingress controllers.
This guide walks you through installing RedisInsight on Linux and Kubernetes, configuring environment variables, launching the service, and using its GUI to monitor Redis metrics, edit data, and analyze memory, providing step‑by‑step commands and screenshots for each stage.
The article details how Zendesk modernized its monolithic Rails architecture by adopting Docker, microservices, and Kubernetes, building internal tools like ZDI and Samson, and achieving faster deployments, automated scaling, and improved resilience, with about 70% of its applications now running on Kubernetes.
The article examines the evolution from monolithic to distributed architectures, compares Spring Cloud, Kubernetes, and Istio, explains how service mesh and sidecar proxies enable language‑agnostic microservices, and argues that Kubernetes‑based solutions increasingly surpass Spring Cloud in flexibility, scalability, and operational independence.
This tutorial walks through migrating a two‑node Kubernetes cluster (master and worker) from Docker to containerd on CentOS 7, covering environment setup, node draining, Docker removal, containerd installation and configuration, kubelet adjustments, uncordoning, and verification of the new container runtime.
This article details Ctrip's large‑scale Service Mesh deployment using Istio, analyzes control‑plane performance bottlenecks such as pilot concurrency and configuration push latency, and presents a series of optimizations—including namespace isolation, concurrent ServiceEntry processing, incremental EnvoyFilter handling, and pilot configuration tweaks—that dramatically improve init‑context and push times while supporting thousands of services.
This newsletter curates the latest industry insights on smart manufacturing, Kubernetes security, cloud cost optimization, cloud‑native education, technical case studies, e‑books on cloud‑native adoption, an AI modeling video, and recent cloud‑native networking updates, providing concise summaries and direct links for deeper exploration.
This article explains what Kubernetes (K8s) is, its core characteristics of portability, extensibility, and automation, and how it enables cloud‑native, container‑based deployments, resource optimization, seamless service migration, and operational automation across enterprises of all sizes.
This article walks through the fundamental concepts of Kubernetes, explaining how the master node communicates with workers, how pods are scheduled onto nodes, where cluster state is stored, how services expose pods externally, and how replication controllers enable dynamic scaling.
IntelliJ IDEA 2022.2 beta introduces a split remote‑development architecture, full Spring 6 and Spring Boot 3 support, global font‑size shortcuts, clickable URLs in config files, an experimental GraalVM native debugger, enhanced bean‑validation handling, upgraded Kubernetes/Docker, and numerous IDE improvements for Java developers.
This article presents a comprehensive, data‑driven case study of how Tencent’s internal Kubernetes/TKE platform reduced monthly CPU usage by up to 70% and memory usage by 50% through systematic cost data collection, VPA/HPA enhancements, custom scheduling, node‑level over‑commit, and safe node decommissioning, while maintaining zero‑incident reliability.
This article details how a CPaaS team leveraged Alibaba Cloud's MSE to create isolated project environments, enable gray releases, and improve microservice testing and traffic management on Kubernetes, sharing practical steps, architecture diagrams, and future plans.
As cloud‑native technologies surge, financial institutions are racing toward full adoption to cut costs and boost service quality, yet they face challenges in evaluating investment returns, measuring impact, and navigating a complex stack of infrastructure, security, and operational changes.
This article explains how organizations can evolve from monolithic applications to microservices using service mesh patterns, Kubernetes sidecar proxies, event‑driven designs, and practical migration strategies such as incremental extraction, Lego‑style integration, and full rebuilds, while addressing latency, security, and observability concerns.
This article explains why Kubernetes federation is needed for managing multiple clusters, compares the deprecated Federation v1 with the improved v2 architecture, and introduces Karmada as a modern multi‑cloud orchestration solution, complete with configuration examples, scheduling strategies, and CRD definitions.
This tutorial explains how to automatically create and delete Jenkins agent pods on a Kubernetes cluster for each pipeline run by storing Groovy scripts in a shared library, loading them with ScriptConsole, and invoking the Kubernetes API through Jenkins.
This guide shows how to configure Nocalhost to enable one‑click run and remote debugging, persistent storage, container resource limits, and port forwarding for a SpringCloud microservice deployed on Rainbond, with step‑by‑step instructions and sample YAML.
The case study describes how LifeMiles migrated its legacy monolithic system to AWS and adopted Kubernetes for container orchestration, achieving a 50% reduction in infrastructure costs, a three‑fold increase in deployment frequency, and a doubling of usable resources while dramatically shortening time‑to‑market.
Kubernetes, evolving from Google’s Borg and built on Docker’s lightweight containers, became the dominant cloud‑native orchestration platform by offering a declarative API, extensible plug‑in architecture, and robust control‑plane components that automate deployment, scaling, service discovery, and self‑healing across distributed workloads.
This article details NetEase Cloud Music’s four‑layer machine‑learning platform architecture, covering resource provisioning with Visual Kubelet and Alibaba Cloud ECI, Ceph storage optimizations, TensorFlow migration, large‑scale graph neural network support, and end‑to‑end workflow tooling that together enable efficient, cost‑effective AI development and deployment.
This article explains what eBPF is, why it was created, its core characteristics, common use cases such as network optimization, fault diagnosis, security control and performance monitoring, and provides practical step‑by‑step guidance, tooling commands, program types, and ecosystem resources for leveraging eBPF in cloud‑native environments.
This article presents a comprehensive set of Kubernetes best practices covering namespace usage, health probes, autoscaling, resource requests, workload controllers, multi‑node clusters, RBAC, managed services, version upgrades, monitoring, GitOps, image optimization, labeling, network policies, and firewalls to help engineers design, operate, and maintain robust cloud‑native environments.
This article provides a concise, concept‑level overview of Kubernetes architecture, explaining the roles of master and worker nodes, Pods, networking, scheduling, storage, services, scaling, and controller interactions, illustrated with diagrams to help beginners grasp the system’s complexity.
This tutorial explains the fundamentals of service mesh, details Istio’s architecture and core components, demonstrates how to install and configure Istio on Kubernetes, and explores common use cases such as traffic management, security, observability, and alternatives.
This guide explains how to install and use the kube-capacity command‑line tool to quickly view resource requests, limits, and utilization for pods and nodes in a Kubernetes cluster, including advanced options for filtering, JSON/YAML output, and integration with metrics‑server.
This article breaks down Kubernetes' networking model by defining key concepts such as network namespaces, veth pairs, iptables, bridges, services, ClusterIP, NodePort, and illustrates intra‑ and inter‑node communication, as well as external access methods like NodePort and Ingress.
The first Cloud‑Native Practitioners Conference brought together engineers from Zuoyebang, Zhihu, Zhuanzhuan and others to share large‑scale Kubernetes, serverless and Istio experiences, industry trends, and practical solutions that drive stability, efficiency and digital transformation.
This article presents a comprehensive overview of Beike's machine learning platform and its inference service, detailing the platform's architecture, GPU virtualization, cloud‑native migration, MLOps implementation, and future roadmap to achieve cost‑effective, automated AI model deployment at scale.
This tutorial demonstrates how to install Aeraki Mesh, use its MetaRouter CRD to achieve request‑level load balancing, attribute‑based routing, and weighted traffic splitting for Dubbo and Thrift services in an Istio service mesh, including the underlying configuration principles and example commands.
This article explains why microservice architecture is preferred over monolithic applications, outlines a clear learning roadmap, and details essential concerns such as Docker, container orchestration, API gateways, load balancing, service discovery, event buses, logging, monitoring, distributed tracing, data persistence, caching, and cloud providers.
This guide explains how to install Sonobuoy, run Kubernetes conformance tests, retrieve and analyze results, and understand the tool’s architecture and role in ensuring cluster portability and CNCF certification.
Yelp migrated its massive Kafka deployment from EC2 to a Kubernetes‑based PaaSTA platform, introducing a custom Kafka operator and Cruise Control to cut provisioning time, simplify upgrades, improve lifecycle management, and reduce reliance on Puppet, while maintaining high‑throughput data pipelines.
The water‑level‑balanced Kubernetes scheduler plugin continuously gathers historical CPU/memory usage from Prometheus, applies a water‑level algorithm during the PreFilter‑Score phases to place low‑utilization Pods on high‑utilization Nodes (and vice‑versa), thereby equalizing node load, improving cluster stability, and increasing overall resource utilization.
This comprehensive guide walks you through designing a simple front‑end/back‑end microservice architecture, implementing it with Spring Boot, adding service discovery, monitoring, logging, tracing, and flow control, and finally deploying the entire system on a Kubernetes cluster with high availability and verification steps.
This guide walks through designing a simple Java Spring Boot microservice architecture, implementing the services, deploying them on a Kubernetes cluster with Eureka registration, adding Prometheus‑Grafana monitoring, configuring logging, tracing, and flow‑control, and validating high availability using real‑time dashboards and tools like Lens.
This comprehensive guide walks readers through designing a simple front‑end/back‑end separated microservice system, implementing it with Java Spring Boot, deploying it on a Kubernetes cluster, and adding high‑availability, monitoring, logging, tracing, and traffic‑control mechanisms using tools such as Eureka, Prometheus, Grafana, Zipkin, Sentinel and Lens.
This article walks through building a custom Kubernetes admission controller in Go that blocks namespace deletion, covering theory of mutating and validating webhooks, detailed code examples, Docker image creation, TLS certificate generation, Kubernetes manifests, deployment steps, and verification of the protection in action.
