Kubernetes is the vertical on cluster infrastructure in production, with an emphasis on lightweight on-premise distributions, eBPF networking and runtime observability and security.
👉 Start here: RKE2 with Cilium BGP — the starting point of the vertical: how an on-premise K8s cluster is built with an eBPF CNI and BGP peering. It is the base the other posts build on.
How the vertical is organised
Posts are grouped by sub-topic (through tags):
rke2— a lightweight, hardened K8s distribution, valid for ENS / NIS2 environments.cilium— eBPF CNI: networking, IngressGateway, BGP, declarative network policies.ebpf— bypassing the kernel TCP/IP stack, observability, runtime hooks.runtime-security— Tetragon as an irrefutable observer of processes and syscalls.observability— Hubble for network flows, integrated with Cilium.
Recommended starting posts
- RKE2 with Cilium BGP — the starting point: how an on-premise K8s cluster is built with BGP peering.
- Kubernetes cluster: CNI networking — the network plane inside the cluster.
- Hubble: eBPF observability — network flows without sidecars.
- Tetragon: runtime security — irrefutable auditing of what runs.
- eBPF + Cilium: bypassing the TCP/IP stack — pure eBPF in depth.
Cross-listing with AI
Several posts in the AI vertical carry the kubernetes tag because they deploy LLM engines on a K8s cluster: vLLM on Kubernetes, LLM operators on K8s, Multi-tenant GPU cluster. Searching by the kubernetes tag brings them up alongside the ones native to this vertical.
Cross-listing with Networking
Three Kubernetes posts (RKE2 with Cilium BGP, Cluster CNI networking, eBPF + Cilium TCP/IP bypass) also touch the network plane. They carry the networking tag for cross-visibility with the Networking vertical.