Kubernetes 故事：The Dark Knight 学习冒险
Imagine Gotham city trying to stay safe during chaos. Many signals, many locations, and many moving units must stay under control at the same time. Kubernetes works like that control system for modern applications.
This page explains Kubernetes in very simple language using a Dark Knight-style city story. We connect clusters, nodes, pods, deployments, services, scaling, config, and namespaces to a city defense plan so a beginner can understand how container orchestration really works.
电影主题画廊
These custom visuals show Kubernetes as a city-wide operating system where every district, squad, and route must stay available and coordinated.
这个故事会教你什么
- What Kubernetes is and why it helps manage containers at scale.
- How clusters, nodes, pods, and deployments fit together.
- How services, config maps, and namespaces keep applications reachable and organized.
- How scaling and self-healing help systems stay available under pressure.
章节导航
Chapter 1: The city-wide cluster
- A cluster is a group of machines managed together.
- Kubernetes watches the cluster and decides where workloads should go.
- It helps teams run containers in a stable way.
Think of Kubernetes as the city operations room. It does not just run one container. It coordinates many machines, many applications, and many service requests at the same time. That full managed environment is called a cluster.
kubectl cluster-infoChapter 2: Nodes and pods on the streets
- Nodes provide compute power.
- Pods host one or more closely related containers.
- Applications normally run inside pods, not directly on the cluster.
A city cannot be managed from maps alone. Real teams must stand on real streets. In Kubernetes, nodes are the machines that provide CPU and memory, and pods are the small working units that run the application containers.
kubectl get nodes
kubectl get podsChapter 3: Deployments and rolling control
- You tell Kubernetes what you want, not every tiny step.
- A deployment keeps the requested version and number of pods running.
- This makes updates safer and easier.
Batman does not give every officer every tiny move one by one. He defines the plan, and the city system keeps enforcing it. Kubernetes deployments work the same way. You describe the desired state, and Kubernetes keeps trying to match it.
apiVersion: apps/v1
kind: Deployment
metadata:
name: gotham-api
spec:
replicas: 3Chapter 4: Services and stable access
- Pods can change, restart, or move.
- A service gives one stable way to reach the app.
- Users talk to the service, and the service finds the right pods.
Citizens should not need to know which exact patrol car is answering. They need one clear number to call. In Kubernetes, services provide that stable access layer so traffic can still reach the application even if pods restart or move.
kubectl expose deployment gotham-api --port=80 --target-port=8080Chapter 5: Config, secrets, and namespaces
- Configuration should not be hardcoded into the container image.
- Secrets protect sensitive data.
- Namespaces reduce confusion when many teams share one cluster.
Every city needs public instructions, private intelligence, and separate zones. Kubernetes uses ConfigMaps for regular settings, Secrets for sensitive values, and Namespaces to separate teams or environments like dev, test, and production.
Chapter 6: Scaling, healing, and keeping Gotham alive
- If traffic grows, Kubernetes can start more pods.
- If one pod crashes, Kubernetes creates another.
- This helps applications stay available during busy or broken moments.
In a crisis, Gotham needs more support in the right places and quick recovery when something goes wrong. Kubernetes gives that kind of resilience. It scales applications up or down and replaces unhealthy pods so the system keeps moving forward.
kubectl scale deployment gotham-api --replicas=5