1 views collected around this technical thread.
Learn step‑by‑step how to transition Calico’s data store from etcd to Kubernetes, covering prerequisite checks, locking the datastore, exporting and importing data, reconfiguring calicoctl, applying the new manifests, and unlocking the store, while highlighting benefits and tips for a smooth migration.
This article explains why security testing is critical for Kubernetes clusters, outlines key testing approaches such as SAST, DAST, container image scanning, configuration audits, and network policy testing, and provides practical steps for integrating these methods into CI/CD pipelines to ensure robust cloud‑native security.
This article explains Kubernetes' fundamental network requirements, the pod networking model, the role of CNI plugins, common implementation approaches, and how Network Policies provide fine-grained traffic control, offering a comprehensive overview of container networking within cloud-native clusters.
This article walks through installing Cilium as a CNI on a Kubernetes v1.21.3 cluster, disabling kube-proxy, and verifying network connectivity with an Nginx deployment, providing commands, configuration details, and validation steps for a kube‑proxy‑free setup.
The article uses an aquarium metaphor to explain Kubernetes fundamentals—including Pods, Nodes, Scheduler, ReplicaSets, Services, Network Policies, and ConfigMaps—by comparing applications to fish, tanks to Pods, rooms to Nodes, and the control plane to the aquarium manager, making complex concepts easier to visualize.
The article answers a technical question about using Calico as the network mode in container cloud networks, explaining that Calico relies on three‑layer routing with BGP, requiring hardware BGP support and sufficient processing capacity to host the full‑mesh routing for all nodes.