kubeadm Cluster Creation Internals: From Self-Hosting to Upgradability and HA
summary
kubeadm bootstraps a minimal, best-practice cluster by generating a root CA and per-component certificates, writing static pod manifests that the kubelet starts, and uploading cluster state into a ConfigMap so upgrades know current settings. It supports join via a Bootstrap Token plus CSR auto-approve, and can convert static control plane pods to self-hosted control plane via API-managed pods so upgrades roll through Kubernetes. Concrete tools: kubeadm upgrade plan/apply, client cert rotation and phase-based cluster creation.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 0:40Agenda
- 1:39kubeadm
- 6:35Design takeaways
- 9:23Component architecture
- 10:30qubit
- 14:30atomic
- 15:22TLS
- 21:12SelfHosting
- 22:10SelfHosting Sequence Diagram
- 23:57Upgrading Clusters
related talks
41mDeep Dive: Cluster Lifecycle SIG (Kubeadm)
37mkubeadm deep dive (SIG Cluster Lifecycle)
33mSIG Cluster Lifecycle: kubeadm Deep Dive
01h 31mInside the Kube: A Guided Tour of Kubernetes Cluster Setup
43mDeep Dive: SIG Cluster Lifecycle
44mKubeCeption! A Story of Self-Hosted Kubernetes
43mKubernetes: Use it, Contribute to it, and Enjoy it!
32mIntro: SIG Cluster Lifecycle
