zengxu phosae

Overview

The goal of this document to cover all aspects of Kubernetes management, including how resources are expressed, constrained and accounted for. This started a way to ensure that alternate container runtime implementation like Kata containers will behave from a resource accounting and consumption point of view in the same manner as runc.

Location of the latest version of this document: https://gist.github.com/mcastelino/b8ce9a70b00ee56036dadd70ded53e9f

If you do not understand cgroups please refer to a quick primer at the bottom of this document. This will help you understand how the resource enforcement actually works.

Kubernetes Resource Management

The Cloud Native Computing Foundation provides the official definition:

Cloud native technologies empower organizations to build and run scalable applications in modern, dynamic environments such as public, private, and hybrid clouds. Containers, service meshes, microservices, immutable infrastructure, and declarative APIs exemplify this approach.

These techniques enable loosely coupled systems that are resilient, manageable, and observable. Combined with robust automation, they allow engineers to make high-impact changes frequently and predictably with minimal toil.

MicroSoft's Architecting Cloud Native .NET Applications for Azure covers more details.

Gitlab says:

Cloud native is an approach that uses technologies such as containers, Kubernetes, immutable infrastructure, and microservices to develop scalable appl

How-To-Kubernetes

Basics

official doc: normally, the official doc is the best place for learning and doing
The Kubernetes Book, 2023 Edition - Nigel Poulton and Pushkar Joglekar
Kubernetes in Action, 2nd Edition - Marko Lukša: This 2nd edition will be released on August 29, 2023. The first edition is a little bit outdate.
Kubernetes Design Principles: Understand the Why - Saad Ali, Google, KubeCon + CloudNativeCon North America 2018
What is Helm in Kubernetes? Helm and Helm Charts explained, TechWorld with Nana 2020:
Kubernetes for Sysadmins – Kelsey Hightower, PuppetConf 2016
[Cgroups, namespaces, and beyond: what are containers made from? - Jérôme Pet

How To Rust

readings

for beginner

Readings

basics

doc & blogs

official doc
The Go Blog
research!rsc: Thoughts and links about programming, by Russ Cox

ko for Golang

# simple main
KO_DOCKER_REPO=zengxu ko build --platform linux/amd64,linux/arm64 -B -t `<tag>`
# cmd style
KOCACHE=/tmp/ko KO_DOCKER_REPO=zengxu ko build --platform linux/amd64 qiniu.com/dora-cloud/next/app/application-controller

change base image --> KO_DEFAULTBASEIMAGE

kyverno examples of ko

https://docs.docker.com/engine/reference/builder/#automatic-platform-args-in-the-global-scope

The following ARG variables are set automatically:

TARGETPLATFORM - platform of the build result. Eg linux/amd64, linux/arm/v7, windows/amd64.
TARGETOS - OS component of TARGETPLATFORM, Eg linux, windows, wasi
TARGETARCH - architecture component of TARGETPLATFORM, Eg amd64, arm64, wasm32
TARGETVARIANT - variant component of TARGETPLATFORM
BUILDPLATFORM - platform of the node performing the build.
BUILDOS - OS component of BUILDPLATFORM

CPU

rate(container_cpu_usage_seconds[10m])/(container_spec_cpu_quota / container_spec_cpu_period)

by Pod and Container

sum(rate(container_cpu_usage_seconds_total{name!~".*prometheus.*", image!="", container!="POD"}[5m])) by (pod, container) 
/
sum(container_spec_cpu_quota{name!~".*prometheus.*",image!="",container!="POD"}/container_spec_cpu_period{name!~".*prometheus.*", image!="", container!="POD"}) by (pod, container) * 100

	package main

	import (
	"flag"
	"fmt"
	"log"
	"os"
	"os/signal"
	"syscall"
	)

	FROM busybox:1.35.0
	ADD centos.qcow2 /disk/ # centos.qcow2 or centos.img
	RUN chmod 766 disk