Concept files are currently stored beside the walkthrough that first needed them. This page gives them a stable learning order without breaking existing URLs.
Core control loop
- kubernetes: API objects, desired and observed state, controllers, nodes, pods, namespaces, and
kubectl. - reconciliation: observe, compare, act, repeat.
- gitops: place reviewed desired state in Git and let a controller maintain it.
- argocd, application, and app-of-apps: the concrete GitOps control hierarchy.
Machines and workloads
- talos: the immutable, API-managed node operating system.
- daemonset: one node-level Pod per eligible node.
- kubernetes-manifest: how API intent is represented as YAML.
- configmap and pod-volume: inject configuration and files into Pods.
- cronjob, serviceaccount, and rbac: run bounded automation with explicit permissions.
Networking
Read service, clusterip, and endpointslice before the implementation mechanisms.
Then connect coredns, cni, cilium, ebpf, kube-proxy, and iptables. metallb covers LAN address assignment. going-cilium-only combines the full request path.
GitOps adoption and secrets
- adoption and adopting-a-helm-component explain taking ownership without recreating a healthy workload.
- helm-application explains chart source plus repository values.
- sealedsecret and kubeseal explain the encrypted-to-runtime Secret boundary.
- publishing-the-cluster-snapshot combines CronJob, ServiceAccount, RBAC, schema validation, and a separate output repository.
Observability and incident mechanics
- prometheus, promql, grafana, and grafana-dashboard-provisioning cover metrics-to-dashboard flow.
- service-monitor explains target discovery.
- loki-log-pipeline and write-ahead-log explain log delivery and retained replay state.
- kubernetes-container-memory-limit, longhorn-volume, and ethernet-link-negotiation connect resource enforcement, persistence, and the original hardware trigger.
Use concepts through a real system
Do not stop after definitions. Trace at least one complete mechanism:
- request: going-cilium-only;
- LAN HTTPS exposure: tracing-lan-tls-through-cilium-gateway;
- desired state: bootstrapping-argocd;
- dashboard: building-devata-overview;
- persistent write: deleting-the-hypervisor;
- failure and recovery: recovering-loki-wal-replay-oom;
- full platform: devata-system-map and reconstructing-devata.
kubernetes-coverage records important concepts and labs that do not exist yet.