Extended Berkeley Packet Filter — kernel-level observability without modifying the kernel. Cilium, Falco, Pixie.

Chaos Monkey, Gremlin — random failures. Steady State hypothesis, blast radius.

Wasm runtimes (SpinKube) — lightweight alternatives to containers. Faster cold start.

Dockerfile — build instructions for a single image. docker-compose.yml — orchestration of multiple containers (networks, volumes, variables).

Building happens in one stage (build), running in another (runtime). Reduces image size by excluding compilers/build dependencies.

stop — SIGTERM (10 seconds for a graceful shutdown). kill — SIGKILL (immediate).

Excludes files from the build context (.git, node_modules, *.pyc). Speeds up docker build.

Deployment — for stateless applications (pods are interchangeable). StatefulSet — for stateful ones (PostgreSQL, Redis) with ordered creation/deletion.

Automatically scales a Deployment based on CPU/Memory or custom Prometheus metrics.

ClusterIP — inside the cluster only. NodePort — via a node's port. LoadBalancer — an external LB from the cloud provider.

A container that runs BEFORE the main one. Waits for DB readiness, migrations, secrets.

GitHub Actions is event-driven (push, PR, release). GitLab CI is pipeline-based (.gitlab-ci.yml with stages).

Infrastructure/applications as Git repositories. ArgoCD/Flux synchronize cluster state with Git.

Blue-Green — 100% of traffic switches to the new version at once. Canary — a gradual rollout (5% → 20% → 100%).

Managed Kubernetes: AWS EKS, Google GKE, Azure AKS. No need to manage the control plane.

Lambda — pay-per-request, cold starts. Fargate — containers without EC2, suited for long-running tasks.