Posts

System environment preparation before installing a Kubernetes cluster, including container runtime installation, kernel parameter configuration, network settings, and other infrastructure setup.

Daily operations and management of Kubernetes clusters, including node maintenance, certificate management, kubeconfig configuration, and cluster addons management.

Complete workflow for upgrading a Kubernetes cluster version using kubeadm, including control plane upgrade, node upgrade, and etcd upgrade considerations.

Creating, injecting, and mounting ConfigMaps and Secrets

CKA Exam Domain 5 — API Server, Scheduler, Controller Manager, and etcd troubleshooting

CustomResourceDefinition (CRD) and the Operator pattern are the core of Kubernetes extensibility, allowing users to define custom resources and implement automated operational logic.

CKA Domain 3 — Kubernetes Endpoints/EndpointSlice resource management and service discovery mechanisms

etcd is the core data store of Kubernetes. Mastering etcd snapshot backup, restore, and member management is a key skill for the CKA exam.

The three major extension interfaces of Kubernetes: Container Network Interface (CNI), Container Storage Interface (CSI), and Container Runtime Interface (CRI), which are the core mechanisms enabling Kubernetes extensibility.

Helm and Kustomize are the most commonly used application package management and configuration customization tools in the Kubernetes ecosystem, used to simplify application deployment and environment-specific configuration management.

Kubernetes high availability cluster architecture design, including etcd topology selection, multi-control-plane node deployment, and load balancer configuration.

CKA Domain 3 — Kubernetes Ingress controller configuration and Gateway API concepts

The complete workflow for using kubeadm to initialize a cluster, add nodes, manage tokens, and install CNI network plugins.

CKA Domain 3 — Kubernetes NetworkPolicy configuration and management (Ingress, Egress, isolation policies)

CKA Domain 3 — Kubernetes Service types in detail (ClusterIP, NodePort, LoadBalancer, Headless, ExternalName)

CKA Exam Domain 5 — kubectl logs, kubectl describe, kubectl events, kubectl top, JSONPath, custom-columns output

Namespace management, ResourceQuota, LimitRange, resource isolation, and cross-namespace communication

CKA Exam Domain 5 — Service unreachable, DNS resolution, CoreDNS, NetworkPolicy, kube-proxy, CNI troubleshooting

CKA Exam Domain 5 — Node NotReady troubleshooting, kubelet inspection, system resource diagnosis, certificate handling

CKA Exam Domain 4 — PVC creation, PV binding mechanism, Pod mounting, expansion, Selector binding

CKA Exam Domain 4 — PV core concepts, storage types, access modes, reclaim policies, lifecycle

CKA Domain 3 — Pod network communication mechanisms, kube-proxy modes and CNI plugin comparison

CKA Exam Domain 5 — Common Pod troubleshooting, CrashLoopBackOff, ImagePullBackOff, Pending state

RBAC (Role-Based Access Control) is Kubernetes' authorization mechanism for managing access to cluster resources.

Resource requests and limits, QoS classes, LimitRange, ResourceQuota

Manual scaling, HorizontalPodAutoscaler auto-scaling, metrics-server configuration

nodeSelector, Node/Pod Affinity, Taints & Tolerations, PriorityClass

CKA Exam Domain 4 — StorageClass definition, dynamic PV provisioning, CSI drivers, default StorageClass

Pod creation, state management, Init containers, Sidecar, Static Pod, deletion and termination

Creating and operating Deployment, StatefulSet, DaemonSet, Job, CronJob