Basics
January 7, 2025
Kubernetes Explained: What Is It?
What is Kubernetes? Explained simply: what it does, which problem it solves, what a first Deployment looks like and when you really need it.
Read the article: Kubernetes Explained: What Is It?
Stable systems for companies that want to grow - without losing control
I am Kevin Welter, a Kubestronaut holding all five CNCF certifications and the author of the Kubernetes practical guide published by Rheinwerk Computing.
I build and run production-ready clusters in German cloud infrastructure and hand them over so your own team can run them, instead of depending on me permanently.
For mid-sized companies with grown systems that need Kubernetes as an operating model, not as a project.
Many mid-sized companies today have powerful digital processes. Automations, interfaces, AI workflows.
What's missing isn't innovation.
What's missing is operational reliability.

The Kubernetes Book
Rheinwerk Computing 2024, 401 pages, ISBN 978-1-4932-2646-7
My practical guide for developers and DevOps teams - from the basics to a production-ready cluster.
Systems work. Until they don't.
Then it becomes clear:
The result isn't technical standstill – it's constant mental strain at the executive level.
Kubernetes isn't infrastructure.
Used correctly, Kubernetes means:
Not as a playground.
But as a stable foundation where systems run without constant intervention.
No "We'll set up Kubernetes for you".
No project without ongoing accountability.
Instead: A production-ready platform – operated, documented, secured.
The goal isn't technical elegance.
The goal is operational stability.
Many cloud setups look modern – but are legally and organizationally risky.
Kubernetes operations in a German cloud provide:
No vendor lock-in.
No black box.
The biggest mistake of many setups: Everything works - as long as specific people are available.
This platform is built so that:
Kubernetes operations require deep knowledge. As one of the few Kubestronauts in Germany, I hold all five official CNCF certifications.

Kubestronaut
The Kubestronaut title is awarded by the Cloud Native Computing Foundation (CNCF) to individuals who have successfully completed all five Kubernetes certifications.

KCNA

KCSA

CKA

CKAD

CKS
These certifications are not theoretical exams - they require practical hands-on experience in real Kubernetes environments.
A production-ready Kubernetes platform thrives on proven open-source tools. These components can be integrated based on requirements:

ArgoCD
GitOps Continuous Delivery
Gitea
Self-hosted Git Service

Prometheus
Metrics & Monitoring

Grafana
Dashboards & Visualization
Loki
Log Aggregation
Thanos
Long-term Storage
Alertmanager
Alert Routing
OpenSearch
Log Analytics

Falco
Runtime Security

Gatekeeper
Policy Enforcement

Kyverno
Policy Management

Trivy
Vulnerability Scanner
Vault
Secrets & Encryption
Keycloak
Identity & Access Management
Traefik
Ingress Controller
Istio
Service Mesh
Cert-Manager
TLS Certificate Management
MinIO
S3-compatible Object Storage
KEDA
Event-driven Autoscaling
Technology becomes what it should be:
A supporting structure.
Not a permanent project.

From the basics through day-to-day operations to certification: the articles in the order they build on each other.
45 matching articles
Basics
January 7, 2025
What is Kubernetes? Explained simply: what it does, which problem it solves, what a first Deployment looks like and when you really need it.
Read the article: Kubernetes Explained: What Is It?Basics
January 21, 2025
Kubernetes vs Docker is not either-or: Docker builds and runs containers, Kubernetes runs them across a cluster. When Compose is enough and when it is not.
Read the article: Kubernetes vs Docker: the DifferenceBasics
February 4, 2025
Kubernetes architecture explained: control plane and worker nodes, what kube-apiserver, etcd, scheduler, kubelet and kube-proxy do and where things fail.
Read the article: Kubernetes Architecture: The ComponentsBasics
February 18, 2025
Run Kubernetes locally on your own machine: Minikube, kind, k3s and Docker Desktop compared, with installation, a first deployment and the usual errors.
Read the article: Local Kubernetes: A Cluster on Your MachineBasics
March 4, 2025
The kubectl commands you actually need daily: get, describe, logs, exec, port-forward, apply, with real output, common pitfalls, and Dashboard vs Lens.
Read the article: kubectl Commands: The EssentialsBasics
March 18, 2025
Kubernetes on the Raspberry Pi is easiest with k3s: two Pis, a switch, one script. Hardware, installation, kubeconfig, and the limits of a Pi cluster.
Read the article: Kubernetes on the Raspberry PiBasics
April 1, 2025
A Kubernetes Pod is the smallest unit in a cluster: one or more containers sharing an IP and volumes. Structure, YAML, status and sidecars explained.
Read the article: Kubernetes Pod: What Is a Pod?Basics
April 15, 2025
Kubernetes labels are key-value pairs that let Services and Deployments find their Pods. Annotations carry extra data. Differences, selectors, practice.
Read the article: Kubernetes Labels and Annotations ExplainedBasics
April 29, 2025
A Kubernetes Deployment keeps the desired number of Pods running and rolls out new versions without downtime. YAML, ReplicaSet, rollback explained.
Read the article: Kubernetes Deployment: Rollouts ExplainedBasics
May 13, 2025
A Kubernetes ConfigMap separates configuration from the image, a Secret holds passwords. Structure, env and volume, why base64 does not protect, SOPS.
Read the article: ConfigMap and Secret in KubernetesBasics
May 27, 2025
A Kubernetes Service gives Pods a stable address and spreads requests across them. ClusterIP, NodePort, LoadBalancer, ExternalName and DNS explained.
Read the article: Kubernetes Service Types ExplainedBasics
June 10, 2025
A Kubernetes Ingress routes HTTP requests by host and path to Services and needs an Ingress Controller. Rules, TLS with cert-manager, common errors.
Read the article: Kubernetes Ingress and Ingress ControllersBasics
June 24, 2025
A Kubernetes namespace separates apps, permissions and quotas inside one cluster. How to slice, secure and limit namespaces, with YAML from production.
Read the article: Kubernetes Namespaces Done RightBasics
July 1, 2025
Kubernetes YAML explained: how a manifest is structured (apiVersion, kind, metadata, spec), which YAML traps cost you time, and how to check before apply.
Read the article: Kubernetes YAML: Understanding ManifestsOperations
July 15, 2025
Kubernetes CI/CD validates, tests and rolls out manifests automatically. Pipeline steps, branching, a GitLab CI example and where GitOps takes over.
Read the article: Kubernetes CI/CD: the PipelineOperations
July 29, 2025
Kubernetes GitOps with ArgoCD: Git is the source of truth, the cluster pulls changes itself. Installation, repo layout, secrets and rollback.
Read the article: GitOps with ArgoCD: Deploy from GitOperations
August 12, 2025
Kustomize vs Helm: Kustomize patches plain YAML per environment, Helm packages and versions applications. When each tool fits, with examples.
Read the article: Kustomize vs Helm: When to Use Which?Operations
August 19, 2025
A Kubernetes DaemonSet starts exactly one Pod on every node, including new ones. When you need it instead of a Deployment, with YAML and tolerations.
Read the article: Kubernetes DaemonSet ExplainedOperations
September 2, 2025
A Kubernetes Job runs a task to completion, a CronJob starts it on a schedule. Manifests, backoffLimit, schedule and cleanup explained.
Read the article: Kubernetes Jobs and CronJobs ExplainedOperations
September 16, 2025
A Kubernetes operator automates operational tasks via a Custom Resource Definition and a controller. Structure, example, and how it differs from Helm.
Read the article: Kubernetes Operator and CRD ExplainedOperations
September 30, 2025
A Kubernetes StatefulSet gives Pods a fixed identity and order, a Deployment does not. The difference, a YAML example and volumeClaimTemplates explained.
Read the article: Kubernetes StatefulSet vs DeploymentOperations
October 14, 2025
A Kubernetes Persistent Volume stores data beyond the Pod, a PVC requests it. Access modes, storage classes and reclaim policy explained clearly.
Read the article: Kubernetes Persistent Volumes and PVCsOperations
October 28, 2025
Kubernetes RBAC uses Role, ClusterRole and Bindings to control who can do what in a cluster. The model, YAML examples and mistakes to avoid.
Read the article: Kubernetes RBAC: Roles and PermissionsOperations
November 11, 2025
Kubernetes Pod Security Standards define Privileged, Baseline and Restricted levels for pods. Security context, admission and YAML explained.
Read the article: Kubernetes Pod Security StandardsOperations
November 25, 2025
A Kubernetes admission controller checks and rewrites every request before it is stored. How Gatekeeper or Kyverno enforce policies on top of it.
Read the article: Kubernetes Admission Controllers ExplainedOperations
December 2, 2025
A Kubernetes network policy controls which traffic is allowed between Pods. Default deny, selectors, egress and the DNS exception explained.
Read the article: Kubernetes Network Policy ExplainedOperations
May 6, 2025
Kubernetes requests and limits set how much CPU and memory a container gets by default and can use at most, with a YAML example and QoS classes.
Read the article: Kubernetes Requests and Limits ExplainedOperations
June 3, 2025
A Kubernetes liveness probe catches stuck Pods, the readiness probe decides on traffic. Mechanisms, parameters and the most common mistakes explained.
Read the article: Liveness and Readiness Probes ExplainedOperations
July 8, 2025
The Kubernetes HPA scales Pods automatically by CPU, memory or custom metrics. YAML example, common mistakes and how it differs from the VPA, explained.
Read the article: Kubernetes Autoscaling with HPAOperations
August 5, 2025
Kubernetes monitoring usually means kube-prometheus-stack: Prometheus, Grafana, Alertmanager via Helm. ServiceMonitor, alerts and resource sizing.
Read the article: Kubernetes Monitoring with PrometheusOperations
August 26, 2025
Kubernetes logging with Loki and Grafana: architecture, Helm install, LogQL queries, retention over object storage and the labels that slow it down.
Read the article: Kubernetes Logging with Loki and GrafanaOperations
September 9, 2025
Helm Charts explained: Kubernetes Helm is the package manager for Kubernetes. Structure, install, overriding values, GitOps with ArgoCD and secrets.
Read the article: Helm Charts Explained: Packages for K8sOperations
September 23, 2025
Build a Helm chart with helm create, fill in Chart.yaml and values.yaml, then check it with helm template and helm lint. A step by step guide.
Read the article: Creating Your Own Helm ChartOperations
October 7, 2025
A Kubernetes rolling update replaces Pods step by step, controlled by maxSurge and maxUnavailable. Here is how update and rollback work without downtime.
Read the article: Rolling Update and Rollback in KubernetesOperations
October 21, 2025
A Kubernetes backup covers Git, etcd, and volumes separately. Here is how to back up etcd, Velero, and volumes properly, including a restore test.
Read the article: Kubernetes Backup: etcd and VolumesOperations
November 4, 2025
CrashLoopBackOff on a Kubernetes Pod means a container keeps restarting. How to find the cause with describe, logs and exit codes, and fix it for good.
Read the article: CrashLoopBackOff: Debugging PodsDecision
November 18, 2025
On-premises Kubernetes, managed cloud, or a middle path like k3s on Hetzner: I compare the three operating models by control, effort, and data sovereignty.
Read the article: Kubernetes On-Premises or Cloud?Decision
December 9, 2025
Kubernetes costs break down into nodes, load balancers, storage, egress, operational time, and a managed markup. I walk through all six blocks honestly.
Read the article: Kubernetes Costs: What a Cluster CostsDecision
December 16, 2025
Kubernetes operations at SMEs only work as a lasting model, not a one-off project: what that means for governance, knowledge and handover.
Read the article: Kubernetes for SMEs: An Operating ModelCertification
February 3, 2026
A Kubestronaut holds all five CNCF Kubernetes certifications at once. What the program means, which exams count, and how to get there.
Read the article: Kubestronaut: What Is It?Certification
September 7, 2026
The CKA exam tests Kubernetes administration hands-on at the terminal: format, domains, preparation, practice setup, and how it differs from CKAD and CKS.
Read the article: CKA Exam: Prep and TipsCertification
June 3, 2026
Learn Kubernetes in 5 stages: from containers to your first own cluster to the CNCF certifications. The roadmap from a Kubestronaut.
Read the article: Learn Kubernetes: Kubestronaut RoadmapCertification
June 22, 2026
Kubernetes certifications compared: CKA, CKAD, CKS, KCNA, KCSA with costs (as of August 2026), the right order, and the path to Kubestronaut.
Read the article: Kubernetes Certifications: CKA, CKAD & MoreAI
September 7, 2026
Kubernetes for AI means: discover GPU nodes, request GPUs through nvidia.com/gpu, and run the LLM server as a Deployment with probes and HPA.
Read the article: Kubernetes for AI: LLMs on GPU NodesMore articles
September 14, 2026
Kubernetes OOMKilled means the kernel killed your container for running out of memory, exit code 137. Here is how to find the cause and fix it.
Read the article: Kubernetes OOMKilled: Detect and Fix