Tools: Latest: Kubernetes From Scratch: build an HA cluster by hand (no kubeadm), then deep-dive every concept

Tools: Latest: Kubernetes From Scratch: build an HA cluster by hand (no kubeadm), then deep-dive every concept

What makes it different

The journey

Who it's for Most Kubernetes tutorials start with kubeadm init or a managed cluster. You get a working cluster and almost no idea why it works. So I did the opposite. Kubernetes From Scratch builds a complete, highly-available cluster by hand β€” no kubeadm, no scripts β€” starting from the very first TLS certificate, all the way to a real HA control plane. Then it uses that cluster as a lab to deep-dive every concept in Kubernetes: 73 chapters. πŸ‘‰ Read it free (English): https://kkloudtarus.net/en/blog/series/kubernetes-from-scratch

πŸ’» Manifests & scripts: https://github.com/nghiadaulau/kubernetes-from-scratch Part 1 β€” Build the cluster from nothing (chapters 0–17)PKI/TLS and why a cluster needs so many certificates β†’ etcd (quorum, Raft) β†’ kube-apiserver and the request pipeline β†’ controller-manager & scheduler (control loops, leader election) β†’ HAProxy in front of 3 API servers β†’ containerd/CRI β†’ kubelet β†’ kube-proxy β†’ the Kubernetes network model β†’ wiring pod networking by hand β†’ CoreDNS β†’ a full smoke test β†’ and finally, the lifecycle of a request: from kubectl apply to a running pod. Part 2 β€” Deep-dive every concept (chapters 18–72)

Using the cluster you built: Anyone who can use Kubernetes but wants to truly understand it β€” for the CKA/CKS, for debugging production with confidence, or just to finally kill the "it's magic" feeling. Comfortable-with-Linux is the only prerequisite. If this helps you, a ⭐ on the repo means a lot β€” and I'd love to hear which chapter clicked for you. Start here β†’ https://kkloudtarus.net/en/blog/series/kubernetes-from-scratch Templates let you quickly answer FAQs or store snippets for re-use. Are you sure you want to ? It will become hidden in your post, but will still be visible via the comment's permalink. Hide child comments as well For further actions, you may consider blocking this person and/or reporting abuse

Code Block

Copy

kubeadm init kubectl apply - You build it by hand. cfssl-signed certs, etcd quorum, apiserver/controller-manager/scheduler wired up yourself, kubelet + containerd on the workers, pod networking with the CNI bridge + VPC routes, CoreDNS β€” then a smoke test of the whole thing running together. - Then it goes deep. Once the cluster is up, every concept gets explained from the inside and configured by hand β€” not just "apply this YAML". - Tested for real on AWS EC2 with Kubernetes v1.36, grounded in the official kubernetes.io docs. - Fully bilingual (English + Vietnamese). - Workloads: Pod lifecycle, init/sidecar containers, probes, Deployment/StatefulSet/DaemonSet/Job, requests/limits/QoS, PodDisruptionBudgets - Scheduling: the scheduling framework, affinity/taints/tolerations, topology spread, priority & preemption, node-pressure eviction, HPA/VPA - Storage: volumes, PV/PVC, StorageClass + dynamic provisioning (EBS CSI), VolumeSnapshots - Networking: why replace kube-proxy, migrating to kube-proxy-less Cilium (eBPF), NetworkPolicy, Ingress, Gateway API, LB IPAM - Security: authentication β†’ RBAC β†’ ServiceAccounts & bound tokens, Pod Security Standards, seccomp/AppArmor/capabilities, Secrets hardening - Extending K8s: CRDs, admission webhooks, the operator pattern, API aggregation, device plugins - Operations: etcd backup & cert rotation, upgrades & version skew, logging, metrics/traces/APF, CEL admission policy, in-place pod resize, and a full teardown