⚙️ Configuration

Configure K8s right: ConfigMaps, Secrets, resource limits, node management, MachineConfigPools, GPU Operator, NicClusterPolicy, and DOCA driver builds.

160 recipes 🟢 48 beginner 🟡 65 intermediate 🔴 47 advanced
intermediate ⏱ 25 minutes

Mirror the AI/GPU Platform Stack for Disconnected OpenShift

Configure ImageDigestMirrorSet and ImageTagMirrorSet to mirror Run:ai, Kubeflow, MPI Operator, and Dell CSM images for air-gapped GPU platforms.

openshiftidmsitmsrunai
beginner ⏱ 15 minutes

Kubernetes EnvFrom ConfigMap Environment Variables

Inject all ConfigMap keys as environment variables using envFrom in Kubernetes pods. Configure configMapRef, secretRef, prefix options, and selective key

configmapenvironment-variablesenvfromconfiguration
beginner ⏱ 15 minutes

Kubernetes Kind Local Development Cluster

Create local Kubernetes clusters with kind (Kubernetes in Docker). Multi-node clusters, ingress setup, local registry, port mapping, volume mounts, and CI/CD

kindlocal-developmentdockertesting
beginner ⏱ 15 minutes

Kubernetes Labels vs Annotations: Best Practices

Kubernetes labels vs annotations: when to use each, recommended app.kubernetes.io labels, naming rules, common annotations, and selector pitfalls.

labelsannotationsmetadatabest-practices
beginner ⏱ 15 minutes

OpenShift Versions, EOL & Kubernetes Mapping

OpenShift lifecycle: EOL dates for OCP 4.12–4.22, OpenShift to Kubernetes version mapping, EUS vs standard support, release cycle and upgrade paths.

openshiftlifecyclesupportsupport-matrix
advanced ⏱ 15 minutes

Mirror OpenShift Releases to Disconnected Registry

Mirror OCP release images to an air-gapped Quay registry using oc adm release mirror. Auth setup, proxy config, ImageDigestMirrorSet, and disconnected updates.

openshiftdisconnectedregistrymirror
intermediate ⏱ 15 minutes

Kubernetes Image Pull Optimization: Faster Pod Starts

Speed up Kubernetes image pulls: pre-pull DaemonSets, containerd registry mirrors, lazy pulling with eStargz/SOCI, parallel pulls, and GC tuning for AI images.

container-imagesperformancecachingcontainerd
intermediate ⏱ 15 minutes

OCI Container Image Internals on Kubernetes

Understand OCI container image internals: layers as tar archive diffs, image configuration JSON, content-addressable storage with SHA-256, multi-platform image

ocicontainer-imagesregistrycontainer-runtime
intermediate ⏱ 15 minutes

OpenShift Cluster Update Process Explained

Complete guide to OpenShift Container Platform cluster updates. CVO workflow, Runlevels, Machine Config Operator node updates, update channels

openshiftcluster-updatecvomachine-config-operator
intermediate ⏱ 15 minutes

Kubernetes Cost Optimization Strategies

Comprehensive cost reduction strategies for Kubernetes clusters: right-sizing, spot instances, autoscaling, idle resource detection, namespace budgets, and GPU

cost-optimizationfinopsautoscalingresource-management
advanced ⏱ 15 minutes

Kubernetes 1.36 Declarative Type Validation

Kubernetes 1.36 introduces declarative validation for native API types using validation-gen. Replaces hand-written validation code with struct tag annotations.

kubernetes-1.36apivalidationdevelopment
beginner ⏱ 15 minutes

Migrate from gitRepo Volume in Kubernetes 1.36

The gitRepo volume plugin is permanently removed in Kubernetes 1.36. Migrate to init containers or OCI volumes to avoid broken deployments.

kubernetes-1.36migrationvolumesdeprecation
advanced ⏱ 15 minutes

Kubernetes 1.36 Graceful Leader Transition

Configure graceful leader transitions in Kubernetes 1.36 control plane components. Eliminate brief outages during leader election failovers.

kubernetes-1.36high-availabilitycontrol-planeleader-election
advanced ⏱ 15 minutes

Kubernetes 1.36 L3 Cache Topology in CPU Manager

Configure L3 cache topology awareness in Kubernetes 1.36 CPU Manager. Allocate CPUs sharing L3 cache for better performance in latency-sensitive workloads.

kubernetes-1.36cpu-managerperformancenuma
advanced ⏱ 15 minutes

Kubernetes 1.36 Memory QoS with cgroups v2

Configure memory quality of service with cgroups v2 in Kubernetes 1.36. Set memory.min and memory.high for guaranteed memory and throttling before OOM kills.

kubernetes-1.36memorycgroupsqos
advanced ⏱ 15 minutes

Kubernetes 1.36 Mixed Version Proxy

Use the Mixed Version Proxy in Kubernetes 1.36 to handle API version skew during rolling upgrades. Ensures API availability across mixed control plane versions.

kubernetes-1.36api-serverupgradeshigh-availability
intermediate ⏱ 15 minutes

Kubernetes 1.36 Pod-Level Resource Limits

Set resource requests and limits at the Pod level in Kubernetes 1.36 instead of per-container. Simplifies multi-container Pod resource management.

kubernetes-1.36resourcespodsvertical-scaling
intermediate ⏱ 10 minutes

NATS: Lightweight Messaging for Kubernetes

Deploy NATS messaging in Kubernetes for pub/sub, request/reply, and JetStream streaming. A high-performance alternative to Kafka for cloud-native apps.

natsmessagingpub-substreaming
beginner ⏱ 8 minutes

kubectl apply vs create: Key Differences

Understand when to use kubectl apply vs kubectl create. Declarative vs imperative, last-applied annotation, server-side apply, and GitOps workflows.

kubectlconfigurationgitopscka
beginner ⏱ 15 minutes

kubectl Cheat Sheet: Essential Commands

Complete kubectl cheat sheet with essential commands for pods, deployments, services, debugging, and cluster management. Copy-paste ready examples.

kubectlcheat-sheetckareference
beginner ⏱ 6 minutes

kubectl explain: API Resource Reference

Use kubectl explain and api-resources to discover Kubernetes API objects. Field documentation, resource versions, short names, and API group exploration.

kubectlapireferencedocumentation
advanced ⏱ 15 minutes

Cluster API: Declarative K8s Management

Manage Kubernetes cluster lifecycle with Cluster API. Provision, upgrade, and scale clusters declaratively using management and infrastructure providers.

cluster-apicluster-managementinfrastructureautomation
beginner ⏱ 10 minutes

Kubernetes ConfigMap: Create, Mount, Update

Create Kubernetes ConfigMaps from files, literals and directories, mount them as volumes or env vars, update them safely, and apply ConfigMap best practices.

configmapconfigurationvolumesenvironment-variables
intermediate ⏱ 10 minutes

K8s Container Runtimes: containerd vs CRI-O

Compare Kubernetes container runtimes containerd and CRI-O. Configuration, crictl debugging, runtime class for gVisor and Kata, and migration from Docker.

container-runtimecontainerdcri-oconfiguration
advanced ⏱ 12 minutes

K8s Custom Resources: CRD Development

Create Kubernetes Custom Resource Definitions with schema validation, additional printer columns, subresources, and conversion webhooks.

crdcustom-resourcesapioperators
advanced ⏱ 15 minutes

etcd Deep Dive: K8s Data Store Operations

Master etcd operations for Kubernetes. Backup and restore, compaction, defragmentation, health checks, member management, and performance tuning for production.

etcdbackupcluster-administrationdisaster-recovery
advanced ⏱ 20 minutes

kubeadm init: Bootstrap K8s Cluster

Bootstrap a Kubernetes cluster with kubeadm init and join. Control plane setup, worker node joining, pod network installation.

kubeadmcluster-setupinstallationadministration
advanced ⏱ 20 minutes

K8s kubeadm Upgrade: Step-by-Step Guide

Upgrade Kubernetes clusters with kubeadm from one minor version to the next. Control plane upgrade, worker node drain, kubelet upgrade, and rollback procedures.

kubeadmupgradecluster-managementadministration
beginner ⏱ 8 minutes

kubectl Plugins: Extend with Krew

Install kubectl plugins with Krew package manager. Essential plugins for debugging, resource management, and cluster operations. Build custom kubectl plugins.

kubectlpluginskrewtooling
intermediate ⏱ 8 minutes

kubectl wait: Script K8s Operations

Use kubectl wait for scripting Kubernetes operations. Wait for pod ready, job completion, deployment rollout, and custom conditions in CI/CD pipelines.

kubectlscriptingautomationci-cd
advanced ⏱ 12 minutes

K8s Kubelet Configuration and Tuning

Configure Kubernetes kubelet with KubeletConfiguration API. Resource reservation, eviction thresholds, image garbage collection, and node allocatable settings.

kubeletnode-managementconfigurationperformance
intermediate ⏱ 12 minutes

Kustomize Guide: Overlays, Patches, Generators

Kustomize for Kubernetes: base/overlay layout, kustomization.yaml (kustomize.config.k8s.io/v1beta1), patches, images, replicas, ConfigMap generators, fixes.

kustomizeconfigurationgitopsoverlays
beginner ⏱ 10 minutes

Kubernetes Labels Best Practices (app.kubernetes.io)

Kubernetes labels best practices: recommended app.kubernetes.io labels (name, part-of, component), naming rules, selector patterns, cost-allocation labels.

labelsbest-practicesconfigurationorganization
beginner ⏱ 15 minutes

Kubernetes Namespaces: Management and Best Practices

Create and manage Kubernetes namespaces for teams and environments: naming strategy, ResourceQuota, LimitRange, RBAC, NetworkPolicy and a provisioning template.

namespacesmulti-tenancyrbacresource-quotas
intermediate ⏱ 8 minutes

K8s QoS Classes: Guaranteed vs Burstable

Understand Kubernetes QoS classes for pod eviction priority. Guaranteed, Burstable, and BestEffort resource configurations and eviction behavior under pressure.

qosresource-managementevictionconfiguration
intermediate ⏱ 10 minutes

Kubernetes ResourceQuota and LimitRange Examples

Kubernetes ResourceQuota and LimitRange YAML: namespace CPU/memory/GPU quotas, object counts, storage-class and priority scopes, default container limits.

resource-quotaslimitrangemulti-tenancyconfiguration
advanced ⏱ 45 minutes

Air-Gap OpenShift Upgrade oc-mirror OSUS

Upgrade air-gapped OpenShift with oc-mirror and OSUS. Mirror release payloads and Cincinnati graph, configure IDMS, and drive CVO upgrades.

openshiftairgapdisconnectedoc-mirror
intermediate ⏱ 15 minutes

Cincinnati Graph OpenShift Upgrades

Understand Cincinnati upgrade graph for OpenShift. Query graph endpoints, decode channels, blocked edges, conditional updates, and debug upgrade paths.

openshiftcincinnatiupgradesgraph
intermediate ⏱ 15 minutes

containerd certs.d Registry CA Trust

Configure containerd to trust private registry CAs using /etc/containerd/certs.d. Set up hosts.toml for custom CA certificates and mirror registries.

containerdregistrytlscertificates
beginner ⏱ 10 minutes

kubectl create secret docker-registry

Create Kubernetes Docker registry secrets with --docker-password-stdin. Authenticate to private registries and configure imagePullSecrets securely.

kubectlsecretsregistrydocker
intermediate ⏱ 15 minutes

OpenShift IDMS ITMS Mirror Rules Guide

Configure IDMS and ITMS mirror rules in OpenShift for disconnected registries. NeverContactSource vs AllowContactingSource and ICSP migration.

openshiftidmsitmsdisconnected
intermediate ⏱ 20 minutes

IDMS ITMS ICSP Disconnected OpenShift

Configure ImageDigestMirrorSet, ImageTagMirrorSet, and ImageContentSourcePolicy for disconnected OpenShift. Redirect image pulls to your mirror registry.

idmsitmsicspopenshift
advanced ⏱ 20 minutes

OSUS Direct vs Replicated OpenShift

Choose between direct and replicated OSUS graph data modes in OpenShift. Configure UpdateService for connected and disconnected environments.

openshiftosusupdate-servicedisconnected
intermediate ⏱ 25 minutes

Flexera License Management Kubernetes

Manage software licenses in Kubernetes with Flexera. FlexNet Manager, container license tracking, GPU software metering, and compliance for enterprise K8s.

flexeralicensingcomplianceenterprise
intermediate ⏱ 15 minutes

crun vs runc: Memory and Performance Benchmarks 2026

Compare crun vs runc: 50% faster container startup and 10x lower memory footprint. Includes benchmarks, cgroup v2 support, and migration guide.

crunrunccontainer-runtimeperformance
intermediate ⏱ 15 minutes

K8s Admission Controllers List Guide

Complete list of Kubernetes admission controllers. Enable and disable controllers, PodSecurity, ResourceQuota, and custom validating webhooks guide.

admission-controllerwebhookvalidationmutation
beginner ⏱ 15 minutes

Kubernetes API Versions Explained

Understand K8s API versions: alpha, beta, stable. API deprecation policy, migration strategy, and kubectl api-versions usage.

api-versionsdeprecationmigrationalpha-beta
intermediate ⏱ 15 minutes

ConfigMap subPath Update Fix K8s

Handle ConfigMap subPath mount limitations in Kubernetes. Why subPath mounts don't auto-update, workarounds, and alternative patterns.

configmapsubpathvolume-mountupdates
beginner ⏱ 10 minutes

Docker Registry Secret kubectl

Create Kubernetes docker-registry secrets with kubectl. --docker-password-stdin, .dockerconfigjson format, and automating registry authentication.

docker-registrysecretauthenticationkubectl
beginner ⏱ 15 minutes

Kubernetes Downward API: Complete Guide

Expose pod and container metadata to applications using the Downward API. Environment variables, volume files, fieldRef, resourceFieldRef, and common patterns.

downward-apimetadataenvironment-variablesfieldref
beginner ⏱ 15 minutes

Env Variables from ConfigMap K8s

Inject environment variables from ConfigMaps and Secrets in Kubernetes. envFrom, valueFrom, configMapKeyRef, and secretKeyRef patterns.

environment-variablesconfigmapsecretsenvfrom
beginner ⏱ 10 minutes

envFrom ConfigMapRef Kubernetes

Inject all ConfigMap keys as environment variables using envFrom configMapRef in Kubernetes. Bulk injection, prefix, and selective key patterns.

envfromconfigmaprefenvironment-variablesbulk-injection
advanced ⏱ 15 minutes

etcd Performance Tuning Kubernetes

Tune etcd for Kubernetes cluster performance. Disk IOPS requirements, compaction, defragmentation, and monitoring etcd health metrics.

etcdperformancetuningmonitoring
beginner ⏱ 10 minutes

imagePullSecrets Pod Config K8s

Configure imagePullSecrets for pulling from private container registries on Kubernetes. Docker registry secrets, service account default.

imagepullsecretsregistryauthenticationdocker
beginner ⏱ 10 minutes

Resource Format 200m 256Mi Syntax

Understand Kubernetes resource format: CPU millicores (200m, 500m, 1) and memory units (256Mi, 1Gi). Syntax reference for requests, limits.

resourcescpumemoryformat
beginner ⏱ 15 minutes

When to Use Kustomize vs Helm

Choose between Kustomize and Helm for Kubernetes. Learn when to use each tool, key trade-offs, and how to combine both for optimal configuration management.

kustomizehelmcomparisonconfiguration-management
advanced ⏱ 15 minutes

API Priority and Fairness K8s Guide

Configure Kubernetes API Priority and Fairness to protect the API server. Covers FlowSchemas, PriorityLevelConfigurations, and request concurrency tuning.

api-priorityfairnessflow-schemarate-limiting
beginner ⏱ 15 minutes

Immutable ConfigMaps and Secrets

Use immutable ConfigMaps and Secrets for performance and safety in Kubernetes. Reduce API server load, prevent accidental changes.

configmapsecretimmutableconfiguration
intermediate ⏱ 15 minutes

ConfigMap Reload Patterns Kubernetes

Implement automatic ConfigMap reload in Kubernetes using volume projection, Reloader operator, checksum annotations, and inotify sidecars.

configmapreloadreloaderconfiguration
intermediate ⏱ 15 minutes

Container Runtime Comparison K8s

Compare Kubernetes container runtimes: containerd vs CRI-O vs Kata Containers. Performance, security, and use cases for each runtime in production.

container-runtimecontainerdcri-okata
advanced ⏱ 15 minutes

CRD Development Kubernetes Guide

Design and implement Kubernetes Custom Resource Definitions. Schema validation, status subresource, printer columns, conversion webhooks.

crdcustom-resourcedevelopmentapi
advanced ⏱ 30 minutes

Crossplane Infrastructure as Code on Kubernetes

Provision AWS, GCP and Azure resources from Kubernetes with Crossplane: providers, ProviderConfig, XRDs, pipeline Compositions, claims and GitOps.

crossplaneinfrastructure-as-codecloudcompositions
intermediate ⏱ 20 minutes

Kustomize Advanced Patterns Kubernetes

Advanced Kustomize patterns for Kubernetes configuration management. Strategic merge patches, JSON patches, components, replacements.

kustomizeconfigurationoverlayspatches
intermediate ⏱ 15 minutes

Kustomize Overlays Guide Kubernetes

Manage Kubernetes manifests with Kustomize overlays. Base and overlay patterns, strategic merge patches, JSON patches, ConfigMap generators.

kustomizeoverlaysconfigurationgitops
advanced ⏱ 15 minutes

CPU and Memory Limits Deep Dive

Deep dive into Kubernetes CPU and memory management. CFS bandwidth throttling, OOMKill scoring, cgroup v2 behavior, memory.high vs memory.

cpumemorycgroupsoomkill
intermediate ⏱ 10 minutes

Disable OperatorHub Default Sources

Disable default OperatorHub catalog sources in OpenShift for air-gapped clusters. Use OperatorHub CR to disable individual or all sources with Ansible auto.

openshiftoperatorhubair-gappeddisconnected
advanced ⏱ 18 minutes

Databases on K8s: Memory Overcommit

Why vm.overcommit_memory must be disabled for production databases on Kubernetes. Configure guaranteed QoS, disable swap.

databasesmemoryovercommitoom
beginner ⏱ 8 minutes

Kubernetes startupProbe Configuration Guide

Configure startupProbe for slow-starting containers to prevent premature kills. Understand interaction with liveness and readiness probes.

startup-probeprobeshealth-checkslow-start
beginner ⏱ 8 minutes

Kubernetes imagePullPolicy Guide

Configure imagePullPolicy correctly: Always, Never, and IfNotPresent behavior. Understand digest pinning and tag mutability implications.

image-pull-policycontainer-imagesregistrydigest
beginner ⏱ 8 minutes

Kubernetes LimitRange Defaults

Set default resource requests and limits per namespace with LimitRange. Enforce min/max constraints and prevent unbounded resource consumption.

limitrangeresource-defaultsnamespaceresource-management
intermediate ⏱ 10 minutes

Kubernetes Node Affinity Guide

Schedule pods to specific nodes with requiredDuringScheduling and preferredDuringScheduling node affinity. Control placement with expressions and weights.

node-affinityschedulingnode-selectorplacement
intermediate ⏱ 30 minutes

Install Kubernetes on Fedora with kubeadm

Step-by-step guide to install Kubernetes on Fedora Linux using kubeadm. Disable swap, configure containerd, install kubeadm kubelet kubectl.

fedorakubeadminstallcontainerd
beginner ⏱ 10 minutes

Create ConfigMap from File in Kubernetes

Create Kubernetes ConfigMaps from files, directories, and env files with kubectl. Mount as volumes or inject as environment variables in pods.

configmapkubectlconfigurationvolumes
beginner ⏱ 10 minutes

Kubernetes Downward API: Pod Metadata in Env

Expose pod metadata to containers using Kubernetes Downward API. Access pod name, namespace, node name, labels, annotations.

downward-apienvironment-variablesmetadatafieldref
intermediate ⏱ 15 minutes

Kubernetes kustomization.yaml Guide

Write kustomization.yaml files for Kubernetes resource management. Overlays, patches, generators, transformers, and multi-environment deployment patterns.

kustomizekustomizationconfigurationoverlays
intermediate ⏱ 10 minutes

Kubernetes Liveness Probe Best Practices

Configure Kubernetes liveness probes correctly. Best practices for httpGet, exec, and tcpSocket probes. Avoid database checks, thundering herd.

livenessprobeshealth-checkbest-practices
intermediate ⏱ 10 minutes

K8s PriorityClass and Missing Pod Priority

Fix missing pod priority in Kubernetes. PriorityClass configuration, preemption behavior, system-critical classes, and scheduling order for GPU workloads.

prioritypriorityclassschedulingpreemption
beginner ⏱ 10 minutes

Kubernetes Release Cycle and Version Support

Kubernetes release cycle explained: 3 releases per year, 14-month support window, patch cadence, version skew policy, and upgrade planning timeline.

release-cycleversioningupgradesupport
beginner ⏱ 10 minutes

Record kubectl Sessions for Kubernetes

Record and replay kubectl sessions for auditing, documentation, and training. Terminal recording with asciinema, script, and kubectl plugins for OpenShift.

kubectlrecordingauditdocumentation
beginner ⏱ 15 minutes

Namespace Templates: Instant Envs in K8s

Create production-ready namespace templates for instant environment provisioning. One command deploys namespace, RBAC, quotas, network policies, and monitoring.

namespacetemplatesonboardinggitops
beginner ⏱ 15 minutes

Platform Engineering: Golden Paths in K8s

Build golden paths for developers on Kubernetes. Internal developer platform with Backstage, self-service namespaces, pre-built Helm charts.

platform-engineeringgolden-pathbackstagedeveloper-experience
advanced ⏱ 35 minutes

IOMMU on K8s: GPU Passthrough and SR-IOV

Enable and configure IOMMU for GPU passthrough, SR-IOV, and VFIO on Kubernetes. Kernel parameters, IOMMU groups, device isolation, and troubleshooting guide.

iommuvfiogpu-passthroughsriov
intermediate ⏱ 25 minutes

OpenShift MachineConfig and MCP Deep Dive

Master MachineConfig and MachineConfigPool on OpenShift. Configure kernel args, files, systemd units, and manage rolling node updates with MCP strategies.

machineconfigmcpopenshiftmachine-config-operator
intermediate ⏱ 15 minutes

kubectl Config: Manage Contexts and Clusters

Manage kubectl contexts with kubectl config commands. Switch clusters, delete contexts, rename entries, and merge multiple kubeconfig files safely.

kubectlkubeconfigcontextmulti-cluster
intermediate ⏱ 15 minutes

K8s imagePullSecrets: Private Registry Auth

Configure imagePullSecrets for pulling container images from private registries. Create docker-registry secrets, attach to pods and ServiceAccounts.

imagepullsecretsprivate-registrydocker-registryauthentication
intermediate ⏱ 25 minutes

Kubernetes 1.35 and 1.36 Upgrade Checklist

Kubernetes 1.35 and 1.36 upgrade checklist with deprecated APIs, removed features, new GA capabilities, and step-by-step migration guide for production clu.

kubernetes-upgradedeprecated-apismigrationrelease-notes
intermediate ⏱ 10 minutes

K8s ConfigMap Hot Reload Without Restart

Reload Kubernetes ConfigMaps without pod restarts, and fix ConfigMap changes not applied to pods: volume auto-update, subPath, Reloader, checksums.

configmaphot-reloadconfigurationreloader
beginner ⏱ 10 minutes

Kubernetes CPU 200m Memory 256Mi: Limits Format

Use Kubernetes container resources limits with cpu 200m and memory 256Mi. Copy YAML syntax, convert millicores and Mi/Gi, and avoid Mi vs M mistakes.

resource-limitscpumemoryqos-classes
beginner ⏱ 10 minutes

Kubernetes Startup Probes for Slow Containers

Configure Kubernetes startup probes for containers with long initialization. Separate startup from liveness checks, failureThreshold tuning.

startup-probehealth-checkslivenessreadiness
intermediate ⏱ 25 minutes

OpenShift Upgrade Planning for 2026

Plan OpenShift upgrades for 2026. EUS-to-EUS paths, operator compatibility, pre-upgrade checks, canary node pools, and rollback strategy for OCP 4.14 to 4.18.

openshiftupgradeseusplanning
intermediate ⏱ 35 minutes

K8s Change Mgmt for Enterprise Operations

Implement ITIL-aligned change management for Kubernetes with approval gates, maintenance windows, rollback procedures, and change audit trails.

change-managementitilmaintenance-windowsapproval-gates
advanced ⏱ 60 minutes

Kubernetes Disaster Recovery for Enterprise

Kubernetes disaster recovery with Velero backup and restore. Cross-region replication, etcd snapshots, multi-cluster failover, and RTO/RPO strategies.

disaster-recoveryveleroetcd-backupmulti-cluster
intermediate ⏱ 15 minutes

Kubernetes Affinity and Anti-Affinity Guide

Schedule pods with Kubernetes node affinity, pod affinity, and anti-affinity rules. Spread across zones, co-locate related services, and optimize

affinityanti-affinityschedulingtopology
intermediate ⏱ 15 minutes

Essential Kubernetes Commands Reference

Master the most used Kubernetes commands for daily operations. Complete kubectl reference for pods, deployments, services, debugging, and cluster management.

kubectlcommandsreferencecli
intermediate ⏱ 15 minutes

Kubernetes Health Checks Best Practices

Design effective Kubernetes health checks with liveness, readiness, and startup probes. Avoid common anti-patterns like database checks in liveness probes.

health-checksprobeslivenessreadiness
intermediate ⏱ 15 minutes

Kubernetes LimitRange and ResourceQuota

Configure LimitRange and ResourceQuota in Kubernetes namespaces. Set default resource requests, enforce limits, and prevent resource exhaustion across teams.

limitrangeresourcequotaresource-managementquotas
intermediate ⏱ 15 minutes

Kubernetes Sidecar Containers: Native Sidecars & Patterns

Kubernetes sidecar containers: native sidecars (initContainers + restartPolicy Always), startup/shutdown order, logging, Envoy, TLS proxy, Jobs, resources.

sidecarmulti-containernative-sidecarinit-containers
intermediate ⏱ 15 minutes

Kubernetes Node and Pod Affinity Guide

Configure node affinity, pod affinity, and anti-affinity rules for advanced Kubernetes scheduling. Control pod placement across zones, nodes, and topologies.

affinityanti-affinityschedulingtopology
beginner ⏱ 15 minutes

Kubernetes Annotations Complete Guide

Use Kubernetes annotations for metadata, automation, and controller config. Common patterns for ingress annotations, Helm labels, and triggers.

annotationsmetadataingressautomation
beginner ⏱ 15 minutes

Kubernetes Environment Variables Guide

Set Kubernetes environment variables with envFrom, configMapRef, secretKeyRef, and the Downward API. Variable ordering, fieldRef, and best practices.

environment-variablesenvconfigmapsecrets
beginner ⏱ 15 minutes

Kubernetes Labels and Selectors Guide

Kubernetes labels and selectors: kubectl label, -l equality and set-based queries, matchLabels vs matchExpressions, field selectors, recommended labels.

labelsselectorsorganizationfiltering
beginner ⏱ 15 minutes

Kubernetes Pod Lifecycle: Phases and States

Kubernetes pod lifecycle explained: pod phases (Pending, Running, Succeeded, Failed, Unknown), container states, restart policies, hooks, and stuck pods.

pod-lifecyclepod-phasespod-statescontainer-states
beginner ⏱ 15 minutes

kubectl Port-Forward: Access Pods and Services

Use kubectl port-forward to access Kubernetes pods, services, and deployments from your local machine. Debug, test, and access internal services securely.

port-forwardkubectldebugginglocal-access
beginner ⏱ 15 minutes

Kubernetes Resource Requests and Limits Guide

Set CPU and memory requests and limits in Kubernetes: QoS classes, CPU throttling vs OOMKilled, LimitRange defaults, GPUs, and right-sizing.

resourcesrequestslimitscpu
intermediate ⏱ 15 minutes

Kubernetes Taints and Tolerations Guide

Kubernetes taints and tolerations: kubectl taint syntax, NoSchedule vs NoExecute, tolerationSeconds, built-in taints, and dedicating GPU nodes.

taintstolerationsschedulingnode-selection
beginner ⏱ 15 minutes

Kubernetes API Deprecation Migration Guide

Migrate deprecated Kubernetes APIs before cluster upgrades. Detect deprecated resources with pluto, kubent, and kubectl convert.

api-deprecationmigrationupgradepluto
advanced ⏱ 15 minutes

Kubernetes Disaster Recovery Planning

Build a Kubernetes disaster recovery plan with etcd backups, Velero, cross-region replication, and RTO/RPO targets for production clusters.

disaster-recoverybackupveleroetcd
advanced ⏱ 15 minutes

Kubernetes etcd Operations and Maintenance

Manage etcd for Kubernetes: backup, restore, compaction, defragmentation, member management, and disaster recovery procedures.

etcdbackuprestoredisaster-recovery
beginner ⏱ 5 minutes

KubeCon EU 2026 Book Giveaway Recap

Recap of the Kubernetes Recipes book giveaway at KubeCon EU 2026 Amsterdam. Photos from the signing sessions, community highlights, and how to get your copy.

kubeconbookcommunityevent
intermediate ⏱ 15 minutes

Inspect MachineConfig Annotations on Nodes

Read and interpret MachineConfig annotations on OpenShift nodes. Check desired vs current config, node state, and rendered config hashes to diagnose MCP issues.

openshiftmachineconfigannotationsmco
intermediate ⏱ 15 minutes

Configure NTP Chrony via MachineConfig

Set custom NTP servers on OpenShift RHCOS nodes using MachineConfig. Fix time drift, configure chrony, and verify time synchronization across your cluster.

openshiftmachineconfigchronyntp
intermediate ⏱ 15 minutes

Set Kernel Parameters via MachineConfig

Tune kernel sysctl parameters on OpenShift nodes using MachineConfig. Set networking, memory, and performance sysctls on RHCOS.

openshiftmachineconfigkernelsysctl
intermediate ⏱ 15 minutes

Configure Container Registries via MachineConfig

Set up mirror registries and blocked registries on OpenShift nodes using MachineConfig to control CRI-O image pull on RHCOS.

openshiftmachineconfigregistriescri-o
intermediate ⏱ 15 minutes

Configure MCP maxUnavailable for Rollouts

Control how many nodes the MachineConfig Operator updates simultaneously. Set maxUnavailable for faster rollouts or safer one-at-a-time updates in production.

openshiftmachineconfigmcpmaxunavailable
intermediate ⏱ 15 minutes

Pause and Unpause MCP Rollouts

Temporarily pause MachineConfigPool rollouts to batch multiple MachineConfig changes or coordinate with maintenance windows. Unpause to resume node updates.

openshiftmachineconfigmcppause
advanced ⏱ 30 minutes

Automate MCP Updates with Drain Script

Bash script to automate OpenShift MachineConfigPool updates when drains are blocked by PDB violations. Auto-detects blockers, scales down, drains, and restores.

openshiftmachineconfigautomationbash
intermediate ⏱ 15 minutes

Separate Worker and Infra MachineConfigPools

Create dedicated MachineConfigPools for infrastructure and GPU nodes. Isolate MCP rollout blast radius and control update order for different node types.

openshiftmachineconfigmcpinfra
beginner ⏱ 15 minutes

Use oc adm drain Dry-Run for Diagnostics

Preview node drain impact without evicting pods. Identify PDB violations, unmanaged pods, and local storage blockers before maintenance.

draindry-runmaintenancediagnostics
intermediate ⏱ 20 minutes

OpenClaw Multi-Model Provider Setup

Configure OpenClaw with multiple AI providers on Kubernetes. Anthropic, OpenAI, Gemini, OpenRouter with fallback chains and cost control.

openclawai-modelsmulti-provideranthropic
advanced ⏱ 30 minutes

OpenClaw Node Pairing for IoT and Edge Devices

Pair phones, Raspberry Pi, and edge devices with OpenClaw on Kubernetes. Camera, location, screen control, and remote command execution.

openclawiotedgenode-pairing
intermediate ⏱ 15 minutes

Configure PDBs for OpenShift Routers

Set PodDisruptionBudgets for OpenShift IngressController routers. Balance availability during maintenance with node drain ability.

openshiftpdbingressrouter
beginner ⏱ 15 minutes

Restore Scaled Deployments After Node Drain

Restore deployments scaled down for maintenance. Verify node health, check pod scheduling, and confirm service availability.

scalingrestoremaintenancedeployments
intermediate ⏱ 15 minutes

Scale Deployments to Unblock Node Drains

Safely scale down deployments that block node drains due to PDB violations. Record original replicas, scale to zero, drain, then restore after the node returns.

scalingdrainpdbmaintenance
intermediate ⏱ 20 minutes

ITMS External-to-External Registry Mirroring

Configure OpenShift ImageTagMirrorSet to map external registries to your private registry. Mirror Docker Hub, GHCR, Quay.io, and NVIDIA NGC.

openshiftitmsimagetagmirrorsetregistry
advanced ⏱ 25 minutes

ITMS Updates registries.conf via MachineConfig

How ITMS and IDMS update /etc/containers/registries.conf on immutable CoreOS nodes via MCO and MachineConfig. Full chain deep-dive.

openshiftitmsidmsregistries-conf
beginner ⏱ 10 minutes

400 Kubernetes Recipes Milestone Recap

Kubernetes Recipes reaches 400 articles. Explore new AI/GPU infrastructure, NVIDIA networking, ArgoCD GitOps, OpenShift, and RHACS security recipes.

communitymilestonekubernetesrecipes
beginner ⏱ 15 minutes

KubeCon EU 2026 Book Signing Events

Join Luca Berton at two KubeCon Amsterdam events: Signal Overflow at Booking.com HQ (Mon 23 Mar) and book signing at vCluster booth #521 (Tue 24 Mar).

kubeconbookcommunityevent
advanced ⏱ 20 minutes

ClusterPolicy MOFED Upgrade Strategy

Configure safe MOFED driver upgrade policies in the NVIDIA GPU Operator ClusterPolicy with rolling updates, node draining, and rollback procedures.

nvidiagpu-operatormofedupgrades
advanced ⏱ 15 minutes

NVIDIA DOCA Driver Container in Kubernetes

Deploy and configure NVIDIA DOCA Driver containers via NicClusterPolicy for RDMA, NFS-RDMA, and precompiled driver builds.

nvidiadocardmanetwork-operator
advanced ⏱ 15 minutes

DOCA Driver on OpenShift with DTK

Build and deploy precompiled NVIDIA DOCA Driver containers on OpenShift using DriverToolKit, MachineConfig, and upgrade lifecycle.

nvidiadocaopenshiftdtk
advanced ⏱ 20 minutes

GPU Operator ClusterPolicy Complete Reference

Complete reference for the NVIDIA GPU Operator ClusterPolicy CRD covering driver, toolkit, device plugin, MOFED, GDS, MIG, and DCGM configuration options.

nvidiagpu-operatorclusterpolicyreference
advanced ⏱ 30 minutes

NVIDIA GPU Operator MOFED Driver Configuration

Configure the NVIDIA GPU Operator to deploy Mellanox OFED drivers for high-performance RDMA networking on Kubernetes GPU nodes with InfiniBand and RoCE support.

nvidiagpu-operatormofedrdma
advanced ⏱ 15 minutes

GPU Cluster Upgrade Version Matrix

Maintain a version compatibility matrix for GPU Operator, Network Operator, drivers, firmware, CUDA, and OpenShift for safe upgrades.

upgradeversion-matrixgpu-operatoropenshift
advanced ⏱ 15 minutes

MOFED and DOCA Driver Building for OpenShift

Build NVIDIA MOFED and DOCA drivers for OpenShift using DriverToolKit, Buildah, and MachineConfig for RDMA and GPU networking.

mofeddocaopenshiftdtk
intermediate ⏱ 15 minutes

NicClusterPolicy MOFED Affinity & Node Selection

Configure NicClusterPolicy node selectors and affinity rules to deploy MOFED drivers only on RDMA-capable nodes in Kubernetes clusters.

nvidiamofednode-selectionnetworking
intermediate ⏱ 20 minutes

OpenClaw Cron Jobs and Heartbeats

Configure OpenClaw's built-in cron scheduling and heartbeat system on Kubernetes for proactive notifications, periodic checks, and automated background.

openclawcronheartbeatautomation
intermediate ⏱ 20 minutes

Manage OpenClaw Skills on Kubernetes

Deploy and manage OpenClaw agent skills (tools, automations, integrations) on Kubernetes using ConfigMaps, PVCs, and git-sync for dynamic capability.

openclawskillstoolsplugins
intermediate ⏱ 25 minutes

GitOps for OpenClaw Workspaces on Kubernetes

Manage OpenClaw agent workspaces (SOUL.md, skills, memory) with GitOps using Flux or ArgoCD, enabling version-controlled AI persona management on.

openclawgitopsworkspaceflux
intermediate ⏱ 20 minutes

Create Custom CatalogSources for OLM Operators

Configure CatalogSource in OpenShift to serve custom operator catalogs from private registries or air-gapped environments.

catalogsourceolmoperatorsopenshift
intermediate ⏱ 15 minutes

OpenShift Project Request Template Pull Secret

Configure an OpenShift Project Request Template so every new namespace automatically gets a ServiceAccount with imagePullSecrets for your private Quay registry.

openshifttemplatesnamespacespull-secrets
intermediate ⏱ 15 minutes

PriorityClasses for GPU Workloads

Configure Kubernetes PriorityClasses for GPU workloads with training, serving, batch, and interactive tiers and preemption policies.

priorityclassgpuschedulingpreemption
intermediate ⏱ 15 minutes

ResourceQuota and LimitRange for GPUs

Configure ResourceQuota and LimitRange for GPU workloads with per-tenant caps on GPU, CPU, memory, and object counts in Kubernetes.

resourcequotalimitrangegpumulti-tenant
advanced ⏱ 15 minutes

RHCOS Node Management for OpenShift

Understand and manage Red Hat Enterprise Linux CoreOS (RHCOS) for OpenShift nodes including MachineConfig, ignition, OS updates, and node customization.

openshiftrhcoscoreosmachineconfig
intermediate ⏱ 20 minutes

Configure ClusterPolicy kernelModuleType for GPU

Understand and configure the driver.kernelModuleType field in the NVIDIA GPU Operator ClusterPolicy to choose between auto, open, and proprietary kernel.

nvidiagpu-operatorclusterpolicykernel-modules
advanced ⏱ 60 minutes

Switch to Open NVIDIA Kernel Modules on OpenShift

Step-by-step guide to migrate the NVIDIA GPU Operator from proprietary to open kernel modules on OpenShift, enabling DMA-BUF and GPUDirect Storage support.

nvidiagpu-operatorkernel-modulesopen-kernel
advanced ⏱ 20 minutes

NCCL Env Vars: Force InfiniBand/RoCE and GDR

Force NCCL onto InfiniBand or RoCE instead of TCP sockets: set NCCL_IB_HCA, NCCL_SOCKET_IFNAME, NCCL_IB_GID_INDEX and NCCL_NET_GDR_LEVEL on Kubernetes.

ncclrdmaethernettuning
advanced ⏱ 50 minutes

Multi-Node NVLink with ComputeDomains

Configure ComputeDomains for robust and secure Multi-Node NVLink (MNNVL) workloads on NVIDIA GB200 and similar systems using DRA

dracomputedomainsnvlinkmnnvl
advanced ⏱ 40 minutes

Dynamic Resource Allocation for NVIDIA GPUs

Learn to use Kubernetes Dynamic Resource Allocation (DRA) for flexible GPU allocation, sharing, and configuration with the NVIDIA DRA Driver

dragpunvidiaaccelerators
advanced ⏱ 40 minutes

MIG GPU Partitioning with DRA on Kubernetes

Dynamically partition NVIDIA A100 and H100 GPUs using Multi-Instance GPU (MIG) technology with Dynamic Resource Allocation for flexible workload isolation

dragpumignvidia
advanced ⏱ 50 minutes

Mixed Accelerator Workloads with DRA

Orchestrate heterogeneous accelerator workloads combining GPUs, TPUs, FPGAs, and custom AI chips using Dynamic Resource Allocation

dragputpufpga
advanced ⏱ 45 minutes

TPU Allocation Dynamic Resource Allocation

Configure Google Cloud TPUs in Kubernetes using DRA for flexible allocation, multi-slice workloads, and optimized machine learning training

dratpugoogle-cloudgke
advanced ⏱ 60 minutes

Kubernetes API Aggregation Layer

Extend the Kubernetes API with custom API servers using the aggregation layer to add new resource types and functionality without modifying core components

api-aggregationapi-serverextension-apiservercustom-api
advanced ⏱ 45 minutes

Kubernetes Cluster Upgrade with kubeadm: Step-by-Step

Upgrade Kubernetes safely: version skew, etcd backup, kubeadm control plane and worker upgrades, drain/uncordon, EKS/AKS/GKE commands, and rollback.

upgradecluster-managementmaintenancehigh-availability
advanced ⏱ 50 minutes

Kubernetes Scheduler Configuration and Tuning

Customize the Kubernetes scheduler with scheduling profiles, plugins, and advanced placement strategies for optimal pod placement and resource utilization

schedulerscheduling-profilescustom-schedulerresource-optimization
advanced ⏱ 15 minutes

Create Custom Resource Definitions (CRDs)

Extend Kubernetes API with Custom Resource Definitions. Define custom objects, configure validation schemas, and manage CRD lifecycle.

crdcustom-resourcesapiextensions
beginner ⏱ 15 minutes

Configure Environment Variables and ConfigMaps

Manage application configuration with environment variables and ConfigMaps. Learn injection methods, mounting as files, and dynamic configuration updates.

configmapenvironment-variablesconfigurationsettings
beginner ⏱ 15 minutes

How to Configure Image Pull Secrets

Pull container images from private registries using image pull secrets. Configure authentication for Docker Hub, GCR, ECR, ACR, and private registries.

image-pull-secretsregistriesdockerauthentication
intermediate ⏱ 15 minutes

How to Optimize Kubernetes Costs

Reduce cloud costs in Kubernetes clusters. Right-size resources, use spot instances, implement autoscaling, and monitor spending effectively.

costoptimizationresourcesfinops
advanced ⏱ 15 minutes

How to Use Pod Presets and Mutations

Automatically inject configurations into pods using admission controllers. Configure environment variables, volumes, and annotations at deployment time.

admission-controllermutationinjectionconfiguration
beginner ⏱ 20 minutes

Kubernetes ConfigMaps and Secrets Management

Create, mount and update Kubernetes ConfigMaps and Secrets: env vs volume, immutable config, auto-reload with Reloader, RBAC, and encryption at rest.

configmapsecretsconfigurationenvironment-variables
Luca Berton Ansible Pilot Ansible by Example Open Empower K8s Recipes Terraform Pilot CopyPasteLearn ProteinLens