49 concepts

REST, admission, authN/Z and the only etcd writer.

Control plane components and data flow.

Plugin interface that wires pod networks — Calico, Cilium.

The hard problem — qualia, access vs phenomenal.

Bridge, host, overlay and macvlan drivers.

Reconciliation loops for every resource type.

One pod per node — log collectors, CNI, exporters.

Storage engines, transactions and replication.

Declarative updates, rollouts and rollbacks.

Consensus, replication and failure modes.

Hierarchical name resolution, records and caching.

Container runtime — images, layers and OCI specs.

What counts as knowledge and justification.

Raft-consistent KV store holding all cluster state.

Virtual filesystem layer, inodes, mounts and copy-on-write.

Content-addressable object store — blobs, trees, commits and refs.

Client and server hooks, gitattributes and filters.

Semantics, caching, HTTP/2 multiplexing and QUIC.

Union filesystems, layer caching and multi-stage builds.

How indices accelerate queries — LSM vs B-Tree.

L7 routing into the cluster — Ingress vs Gateway API.

Implements Service VIPs via iptables / IPVS.

Container orchestration — declarative state, controllers and the reconciliation loop.

The operating system kernel and its ecosystem — processes, filesystems and system calls.

Isolated network stacks, veth pairs and bridge devices.

From Ethernet frames to HTTP — the stack that connects everything.

How pods talk to each other and the outside world.

Declarative firewall for pod-to-pod traffic.

The four object types and how they link.

Smallest deployable unit — one or more containers sharing namespaces.

Process lifecycle, signals and resource isolation via cgroups.

Binding claim to provisioned storage.

Superposition, entanglement and measurement.

Leader election and log replication.

Roles, ClusterRoles and Bindings.

History rewriting and recovery via reflog.

Special and general — spacetime and curvature.

Ensures N pod replicas via label selectors.

Predicate and priority — binding pods to nodes.

Auth, RBAC, policies and secrets.

Stable virtual IP for a set of pods via EndpointSlices.

Stable identity and storage for stateful workloads.

Volumes, PV/PVC dance and StorageClasses.

Dynamic provisioning profiles.

Reliable streams over unreliable packets — congestion, flow control.

Certificates, handshakes and trust chains.

ACID, snapshot isolation and serializability.

Ephemeral and persistent volume types.

The objects that run your code.