Kubernetes
The helmsman for your containers
Kubernetes — Greek for helmsman — schedules containers onto machines, restarts them when they fail, and gives them a stable way to find each other. These pages cover the objects you'll write manifests for, and the commands you'll run against them.
Cluster architecture
The control plane and worker nodes, and how they divide the work.
Pods & Deployments
The smallest deployable unit, and the controller that keeps it running.
Troubleshooting
Why a Pod won't start, won't stay running, or won't go away.
Services & Ingress
Giving a moving set of Pods a stable address, inside and outside the cluster.
Config, secrets & storage
ConfigMaps, Secrets, and persistent volumes for stateful workloads.
StatefulSets, DaemonSets & Jobs
The controllers for everything that isn't a simple stateless web app.
RBAC
Who's allowed to do what, scoped down from the cluster-admin default most setups start with.
NetworkPolicy
Which Pods can talk to which, scoped down from the allow-everything default every cluster starts with.
Pod Security Standards
Enforcing non-root, dropped capabilities, and no privilege escalation cluster-wide, not just per container.
Helm
Packaging, templating, and versioning a set of manifests as one chart.
Coming from Compose
How a compose.yml you already know maps onto Kubernetes objects -- and where the mapping breaks down.
kubectl reference
The commands you'll run against a cluster every single day.