Skip to content

Instantly share code, notes, and snippets.

@phosae

phosae/How-To-Kubernetes.md

Last active April 8, 2025 13:07
Show Gist options
  • Save phosae/05da38d8f621538f2003e98648cadab1 to your computer and use it in GitHub Desktop.
Save phosae/05da38d8f621538f2003e98648cadab1 to your computer and use it in GitHub Desktop.
Download ZIP
How-To-Kubernetes
Raw
How-To-Kubernetes.md

How-To-Kubernetes

Basics

Design Proposals

Network

Scheduler

Node Autoscaling

Storage

extend-kubernetes

Rootless

alpha at Kubernetes v1.25

Kubernetes Official Docs Conditions:

  • at least Linux 6.3, as tmpfs started supporting idmap mounts in that version (the service account token that is mounted by default uses a tmpfs, Secrets use a tmpfs, etc.)
  • CRI-O: version 1.25 (and later) supports user namespaces for containers
  • containerd v1.7+

Limitations, if you set hostUsers: false then you are not allowed to set any of:

  • hostNetwork: true
  • hostIPC: true
  • hostPID: true

The pod is allowed to use no volumes at all or, if using volumes, only these volume types are allowed:

  • configmap
  • secret
  • projected
  • downwardAPI
  • emptyDir

K8s Proposals

Runtime Status

RootlessKit

Others

Container is not for multi-tenant

Kata

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment