Tag: #open-source-internals
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 40 posts
40 posts are tagged #open-source-internals; the most recent was published on 2026-03-20.
Often tagged together: #argocd 5 #cilium 5 #container-runtime 5 #containerd 5 #distributed-systems 5
Most read in the last 90 days:
[Prometheus] PromQL Engine Internals: From Parser to Execution Engine
Source code level analysis of the PromQL engine internals. Covers the lexer, parser, AST structure, query evaluation engine for instant and range queries, step evaluation, lookback delta, subquery implementation, and mem
2026-03-20 · 9 min read #prometheus#observability#open-source-internalsKyverno Production Operations: HA, Monitoring, Troubleshooting
Production operations guide for Kyverno. Covers HA deployment (replicas, failurePolicy), PolicyReport/ClusterPolicyReport CRDs, Prometheus metrics and Grafana dashboards, background scanning, PolicyException mechanism, a
2026-03-20 · 2 min read #kyverno#policy#security#open-source-internalsKyverno Architecture Internals: Kubernetes-Native Policy Engine
Deep dive into Kyverno architecture internals. Covers its design as a Kubernetes-native policy engine, Admission Controller/Background Controller/Reports Controller architecture, webhook configuration, ClusterPolicy vs P
2026-03-20 · 2 min read #kyverno#policy#security#open-source-internals[Prometheus] TSDB Internals: WAL, Chunks, Blocks, Compaction
Source code level analysis of Prometheus TSDB internals. Deep dive into WAL segment structure, Head Block memSeries, chunk encoding (XOR, delta-of-delta), block structure, compaction algorithms, and posting list indexing
2026-03-20 · 10 min read #prometheus#observability#open-source-internals[Prometheus] Architecture Internals: Source Code Level Deep Dive
A source code level analysis of Prometheus server internals. Deep dive into the Scrape Manager, TSDB, Rule Manager, Notifier, Web UI components, their goroutine models, lifecycle management, and configuration reload mech
2026-03-20 · 8 min read #prometheus#observability#open-source-internalsKyverno vs OPA/Gatekeeper: Policy Engine Comparison
Compare Kyverno and OPA/Gatekeeper from architecture, policy language, features, performance, and ecosystem perspectives. Covers YAML/CEL vs Rego, mutation/generation support, image verification, webhook latency, memory
2026-03-20 · 2 min read #kyverno#policy#security#open-source-internalsKyverno Image Verification: Sigstore and Supply Chain Security
Deep dive into Kyverno image verification capabilities. Covers verifyImages rules for cosign signature verification, Notary v2 support, in-toto attestation verification, SLSA provenance checking, Keyless/KMS key manageme
2026-03-20 · 15 min read #kyverno#policy#security#open-source-internalsKyverno Policy Engine Analysis: Validate, Mutate, Generate Rules Deep Dive
Deep dive into Kyverno policy engine internals. Covers match/exclude resource filters, validate rules (pattern matching, deny, CEL, foreach), mutate rules (patchStrategicMerge, patchesJson6902), generate rules (clone, sy
2026-03-20 · 14 min read #kyverno#policy#security#open-source-internalsIstio Security Model Analysis: mTLS, Authentication, Authorization
Analyzes the internal implementation of the Istio security model. Covers certificate lifecycle, mTLS handshake flow, PeerAuthentication, RequestAuthentication, AuthorizationPolicy internals, and external authorization in
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Ambient Mesh Internals: Service Mesh Without Sidecars
Analyzes the internal architecture of Istio Ambient Mesh. Covers ztunnel L4 processing, waypoint proxy L7 processing, HBONE tunneling, eBPF traffic interception, and performance comparison with sidecars.
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Traffic Management Engine Deep Dive
Analyzes how Istio traffic management works internally. Covers VirtualService to Envoy RouteConfiguration translation, load balancing algorithms, circuit breakers, retries, and fault injection Envoy implementations in de
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Architecture Internals: Control Plane and Data Plane
A deep dive into Istio service mesh internal architecture. Explores istiod control plane, Envoy sidecar injection mechanisms, xDS protocol, filter chains, and workload identity at the code level.
2026-03-20 · 9 min read #istio#service-mesh#open-source-internalsHelm Plugins and Testing Strategies: Extensibility and Quality Assurance
Analyze Helm plugin system and chart testing strategies. Covers plugin.yaml structure, helm-diff/helm-secrets/helm-unittest plugins, helm test, ct (chart-testing) tool, helm lint, values.schema.json schema validation, an
2026-03-20 · 14 min read #helm#kubernetes#open-source-internalsIstio Observability Internals: Metrics, Tracing, Logging
Analyzes the internal implementation of Istio observability. Covers Envoy stats generation, Istio standard metrics, Telemetry API v2, distributed tracing span propagation, access logging, and Kiali/Prometheus/Grafana/Jae
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsHelm Template Engine Deep Dive: Go Templates, Sprig, Named Templates
Deep dive into Helm template engine internals. Covers Go template parsing and execution pipeline, Sprig library functions (string, math, date, crypto, list, dict), named templates with define/template/include, flow contr
2026-03-20 · 6 min read #helm#kubernetes#open-source-internalsHelm Chart Design Best Practices: Naming, Values Design, GitOps Integration
Comprehensive Helm chart design best practices. Covers naming conventions and label standards (app.kubernetes.io/), values design strategies, multi-environment management, subcharts vs umbrella charts, GitOps integration
2026-03-20 · 2 min read #helm#kubernetes#open-source-internalsetcd Watch and Lease Mechanism Analysis
Deep analysis of etcd Watch and Lease mechanisms. Covers watchable store internals, event history and generation, gRPC streaming, compacted revision handling, Lease grant/revoke/keepalive, TTL implementation, and Kuberne
2026-03-20 · 4 min read #etcd#distributed-systems#open-source-internalsetcd Cluster Operations: Disaster Recovery and Performance Tuning
Covers essential etcd cluster operations including member management (add, remove, learner promotion), snapshots and backup/restore, disaster recovery (quorum loss, data corruption), and performance tuning (disk latency,
2026-03-20 · 4 min read #etcd#distributed-systems#open-source-internalsetcd Storage Engine: BoltDB and MVCC
Deep analysis of etcd storage engine internals. Covers BoltDB B+ tree structure, page types, transaction model, MVCC revision, key index, generation concepts, compaction and defragmentation, and backend batch optimizatio
2026-03-20 · 5 min read #etcd#distributed-systems#open-source-internalsetcd Architecture Internals: Raft Consensus Algorithm
A deep dive into etcd core architecture. Covers the Raft consensus algorithm (leader election, log replication, safety guarantees), internal structures like EtcdServer, raftNode, and apply loop, BoltDB-backed MVCC key-va
2026-03-20 · 6 min read #etcd#distributed-systems#open-source-internals