DevOps module 05

Operate workloads, not individual servers.

Understand the control plane, desired state and workload primitives before memorising kubectl commands.

Pod

Smallest schedulable unit; normally managed rather than created directly.

Maintains replicas and performs controlled rolling application updates.

Provides stable discovery and traffic routing to changing pod instances.

Routes external HTTP traffic through a managed ingress controller.

Stores non-sensitive runtime configuration outside the container image.

Carries sensitive values but still requires encryption and access controls.

Scales replicas from measured demand and defined resource requests.

Creates an organisational boundary—not a complete security boundary.

Prefer workload identity and managed identities over stored cloud credentials.

Spread replicas, use disruption budgets and test node maintenance behaviour.

Collect workload logs, cluster metrics, events and deployment evidence.