Deep Dive: API Machinery SIG
summary
Covers concrete SIG API Machinery work: server-side apply moves apply logic into the server, replaces client strategic-merge annotations with compact field sets and a conversion API for cross-version mapping; flow control prototypes add FlowSchema and PriorityLevelConfiguration, implement shuffle-sharding queues and fair-queuing DQ to protect CPU and provide prioritization; certificate topology maps the six interdependent TLS flags for kubelet, kube-apiserver, aggregator and controller-manager. Useful if planning operator changes or cluster config.
AI-written summary · about
chapters (18)
- 0:00Intro
- 0:11Agenda
- 0:54Apply to Beta
- 3:36Apply field sets
- 3:53Apply - multiple versions
- 5:28Flow Control
- 12:41certificate settings today
- 13:43certs: broad strokes
- 16:33Certs, super basic mTLS
- 18:16Certs, simple chains
- 19:26Certs, front proxy - kube-specific-ish
- 20:44Certs, front-proxies and aggregator
- 21:23Certs, CSR and kubelets
- 25:58CRDS - Pruning, the downside
- 27:45CRDS - Defaulting, simple scenario
- 28:14CRDS - Defaulting, versioned scenario
- 28:53CRDS - Arbitrary subresources ?
- 30:16CRDS - Priority ?
related talks
33mMeet the Gears Behind Kubernetes APIs: Introduction to SIG API-Machinery
29mSIG API Machinery in the Era of AI: Updates
30mSIG API Machinery: Project Updates and Release Planning
28mDeep Dive Into API Machinery
36mSIG API Machinery Deep Dive
01h 26mSIG Apps Deep Dive – Janet Kuo & Kenneth Owens, Google (Intermediate Skill Level)
27mKubernetes SIG Architecture Intro and Updates
28mAdvanced API Machinery Topics: Aggregated API Servers and OpenAPI v3