React
React Native
Node.js
Python
Rust
PostgreSQL
Solana
Claude
AI Agents
Go
Containers
AWS SDKs

Containers SME Cookbook

Sections

Container Fundamentals & Docker Core

What a Container Really Is Container Basics Containers vs Virtual Machines OCI Image & Runtime Specs Linux Namespaces & cgroups Immutable Infrastructure Principle Container Fundamentals Best Practices Highlights Summary

Docker CLI Basics Dockerfiles and Builds Compose Basics Images and Registries Kubernetes Pods Deployments and Services Config Secrets Volumes Networking and Ingress Kubectl Essentials Helm Basics Health Probes and Resources Troubleshooting Debug Highlights Summary

How the Docker Engine Works Docker Engine Basics Essential CLI Commands Docker Contexts Docker Desktop vs Linux Engine Engine Configuration Docker Engine Best Practices Highlights Summary

How a Dockerfile Becomes an Image Dockerfile Basics How Image Layers & Union Filesystems Work Multi-Stage Builds BuildKit & Cache Mounts buildx & Multi-Arch Images `.dockerignore` & Build Context Non-Root Users in Images Distroless & Minimal Bases Dockerfiles Best Practices Highlights Summary

Why the Software Supply Chain Matters Registries Basics Tagging & Immutability Registry Authentication cosign & Image Signing SBOM Generation Supply Chain Best Practices Highlights Summary

The Compose Model: Declaring a Local Stack Compose Basics Compose for Local Dev Profiles & Overrides Compose vs Kubernetes Gap Compose Best Practices Highlights Summary

What Actually Runs Your Containers Runtimes Basics containerd & crictl CRI-O runc & Low-Level OCI Runtimes Best Practices Highlights Summary

Dev/Prod Parity as a Mental Model Local Dev Basics Bind Mounts vs Image Rebuild Dev Containers Hot Reload in Containers Local Dev Best Practices Highlights Summary

How Containers Get Networking and Storage Docker Networking Basics User-Defined Networks Volumes & Bind Mounts Storage Permissions Pitfalls Networking & Storage Best Practices Highlights Summary

Tooling, Quality & Image Governance

Where Docker Fits in a Repository Repo Layout Basics Monorepo Build Contexts Base Image Internal Registry Project Setup Best Practices Highlights Summary

What an Image Build Pipeline Is For Image CI Basics GitHub Actions & buildx Remote Cache Provenance & SLSA Build Pipeline Best Practices Highlights Summary

Why Images Need Their Own Quality Gates Linting Basics dive & Image Efficiency Container Structure Tests Smoke Tests After Build Linting Best Practices Highlights Summary

The Container Vulnerability Lifecycle Vulnerability Basics Base Image Pinning by Digest Exception Process Minimal Attack Surface Image Policy Best Practices Highlights Summary

Why Rules Beat Tribal Knowledge Containers Rules Checklist Dockerfile Rules Kubernetes Manifest Rules ADR Template Containers Rules Best Practices Highlights Summary

Platform Architecture & Design

What a Platform (IDP) Actually Is Platform Architecture Basics Golden Paths Multi-Cluster Topology Build vs Buy Managed K8s Platform Architecture Best Practices Highlights Summary

How Multi-Tenancy Works in a Cluster Tenancy Basics Environment Separation Resource Quotas & LimitRanges Noisy Neighbor Controls Tenancy Best Practices Highlights Summary

Separating Config and Secrets from Images Config Basics Secrets Management External Secrets Operator Config Reload Patterns Configuration Best Practices Highlights Summary

How Kubernetes Thinks About Storage K8s Storage Basics CSI Drivers Stateful Data on Kubernetes Backup PVs Storage Architecture Best Practices Highlights Summary

How Misconfiguration Becomes Outage Defect Scenarios Basics :latest in Production Probe Misconfiguration Resource Limit OOMKilled Defect Scenarios Best Practices Highlights Summary

Kubernetes Core & Workloads

What Kubernetes Is and Why It Exists Kubernetes Basics Declarative vs Imperative kubectl Essentials API Objects & Reconciliation Labels & Selectors Kubernetes Fundamentals Best Practices Highlights Summary

What a Pod Represents Pods Basics Why the Pod, Not the Container, Is the Unit Container Spec Liveness, Readiness & Startup Probes Requests & Limits Init & Sidecar Containers Pod Disruption Budgets Pods Best Practices Highlights Summary

How Kubernetes Keeps N Copies Running Deployments Basics How Rolling Updates Actually Work Rolling Update Parameters Rollback Blue/Green & Canary Deployments Best Practices Highlights Summary

Run-to-Completion vs Long-Running Work Jobs Basics CronJob Patterns Indexed & Parallel Jobs Jobs Best Practices Highlights Summary

When Identity and Node Placement Matter StatefulSets Basics Headless Services + StatefulSets DaemonSets StatefulSets Best Practices Highlights Summary

The Three Axes of Kubernetes Scaling Autoscaling Basics Horizontal Pod Autoscaler Cluster Autoscaler Vertical Pod Autoscaler KEDA Event-Driven Scaling Autoscaling Best Practices Highlights Summary

A Map of the Kubernetes Machinery Kubernetes Internals Basics The Reconciliation Loop Explained Control Plane Internals etcd, Raft & Cluster State The Object Model: Spec, Status & resourceVersion Watches, Informers & the List-Watch Pattern Why Kubernetes Is a Distributed System Kubernetes Internals Best Practices Highlights Summary

What Scheduling Is and Why It's Hard Scheduling Basics How the Scheduler Decides nodeSelector, Node Affinity & Anti-Affinity Taints & Tolerations Topology Spread Constraints Pod Priority, Preemption & the Descheduler Scheduling Best Practices Highlights Summary

Extending Kubernetes: The Big Idea CRDs & Operators Basics The Operator Pattern Explained How Controllers Work (controller-runtime)CRD Design & Versioning Using Operators in Production Operators vs Helm vs Plain Manifests CRDs & Operators Best Practices Highlights Summary

Kubernetes Networking & Mesh

Why Pods Need Services Services Basics Life of a Request ClusterIP & Headless NodePort & LoadBalancer EndpointSlices Services Best Practices Highlights Summary

How External Traffic Reaches Your Pods Ingress Basics Ingress Controllers TLS Certificates Gateway API Ingress Best Practices Highlights Summary

Why the Cluster Network Is Open by Default Network Policies Basics The Kubernetes Network Model Default-Deny Stance CNI Comparison DNS Egress Policies Network Policies Best Practices Highlights Summary

How Services Find Each Other DNS Basics CoreDNS Configuration ExternalName & Split Horizon DNS Best Practices Highlights Summary

What a Service Mesh Adds - and Costs Service Mesh Basics Linkerd Istio Mesh vs No-Mesh ADR Service Mesh Best Practices Highlights Summary

Security, Policy & Observability

How Kubernetes Decides Who Can Do What RBAC Basics Service Accounts OIDC & SSO for kubectl RBAC Auditing RBAC Best Practices Highlights Summary

The Layers of Pod Security Pod Security Basics Why Containers Aren’t a Security Boundary securityContext seccomp & AppArmor Pod Security Best Practices Highlights Summary

Where Kubernetes Enforces Your Rules Admission Basics Kyverno Policies OPA Gatekeeper Policy Testing Admission Best Practices Highlights Summary

The Three Pillars of Cluster Observability Observability Basics metrics-server & HPA Prometheus & Grafana Log Aggregation OpenTelemetry Collectors Observability Best Practices Highlights Summary

Shift-Left vs Runtime Security Scanning Basics Runtime Security eBPF Observability Runtime Protection Best Practices Highlights Summary

Delivery, GitOps & Operations

Templating vs Overlaying Manifests Helm Basics Chart Design Kustomize Helm vs Kustomize ADR Helm Best Practices Highlights Summary

What GitOps Actually Means GitOps Basics Argo CD Flux Drift Detection GitOps Best Practices Highlights Summary

From Commit to Running Pod Deploy Pipeline Basics Image Updater Bots Progressive Delivery CI/CD Best Practices Highlights Summary

How a Living Cluster Gets Upgraded Upgrades Basics Node Image Updates Cordon & Drain Surge Node Pools Upgrade Best Practices Highlights Summary

Why One Cluster Isn't Always Enough Multi-Cluster Basics Cluster API Fleet GitOps DR Cluster Standby Multi-Cluster Best Practices Highlights Summary

Cloud Kubernetes & Ecosystem

What "Managed" Does and Doesn't Cover Managed K8s Basics Amazon EKS Google GKE Azure AKS Cloud Selection ADR Managed K8s Best Practices Highlights Summary

The Platform Engineer's Toolkit, Conceptually Platform Tools Basics k9s & stern cert-manager external-dns Velero Platform Tools Best Practices Highlights Summary

Why Kubernetes Costs What It Does Kubernetes Cost Basics Right-Sizing Requests & Limits Karpenter Spot & Interruptible Nodes Cost Visibility (OpenCost / Kubecost)Cost Optimization Best Practices Highlights Summary

What a Packaged SME Skill Is Agent Skills Basics Dockerfile Review Skill Kubernetes Manifest Skill Incident Triage Skill Agent Skills Best Practices Highlights Summary

Git as the Platform's Control Plane Git for Platform Work Basics Policy Bots in PRs Git Best Practices Highlights Summary

Why Platform Work Drops to the Node Linux CLI Basics crictl & ctr nsenter & cgroup tools CLI Best Practices Highlights Summary

Making App Devs Cluster-Safe Onboarding Basics Developer Self-Service Skills Matrix Pairing on Manifest PRs Team & Onboarding Best Practices Highlights Summary

Tech-Lead Craft: Delivery, Leadership & Longevity

How to Think During a Cluster Incident Incident Basics CrashLoopBackOff Triage OOMKilled & CPU Throttling ImagePullBackOff & Registry Outages Node NotReady & CNI Failures Incident Response Best Practices Highlights Summary

Treating the Platform as a Product Platform Delivery Basics Change Windows Platform SLOs Error Budgets for Platform Platform Delivery Best Practices Highlights Summary

Leading a Platform, Not Just Running It Tech Lead Basics on Platforms Golden Path Governance Manifest Review Standards Build vs Buy Add-Ons Technical Leadership Best Practices Highlights Summary

Translating Clusters into Business Language Stakeholder Basics Quota & Capacity Requests Risk Communication Stakeholder Best Practices Highlights Summary

How to Read a Reference Architecture Reference: Multi-Tenant EKS Platform Reference: Worker-Heavy Cluster Reference: Regulated Environment Before/After: Compose → EKS Migration Before/After: Ingress → Gateway API Case Studies Best Practices Highlights Summary

Why Governance Scales Where Heroics Don't Governance Basics Kubernetes Version Policy API Deprecation Tracking Extension & Add-On Governance Career Growth: Platform Engineer → Staff Governance Best Practices Highlights Summary

Premium Content

This page is premium content, available to Containers SME paid plan members only.

View Plans Go back

© 2026 @csjcode|SystemsArchitect.io: Cloud Systems Tools|Terms

An independent, unofficial educational resource. Not affiliated with, endorsed, or sponsored by the brand/trademark maintainers/owners.

This site is in beta testing and may have inaccuracies or errors.

All code examples are generic for learning and for a dev/test environment only. No warranty is provided to users. See terms.

Search Documentation

Search across all documentation pages