Kubernetes

Kubernetes orchestrates containerized applications across multiple nodes and environments. This knowledge area covers the complete platform architecture: clusters on Proxmox, bare metal and European cloud providers, networking and private access, storage and backup, GitOps and CI/CD, as well as upgrades, monitoring and ongoing operations. The articles explain both technical foundations and concrete architecture and migration decisions.

Basics & decision

What is Kubernetes?

Kubernetes orchestrates containerized applications across multiple systems. Learn its architecture, core objects, limits and production duties.

Do we need Kubernetes?

When Kubernetes adds value and when Docker Compose, Coolify or VMs fit better. Decide based on applications, teams, operations and growth.

Kubernetes vs Docker Compose vs Coolify

Docker Compose, Coolify or Kubernetes? Compare operations, delivery, high availability, scaling, governance and required team capacity.

Clusters & infrastructure

Kubernetes on Proxmox

Plan production Kubernetes on Proxmox: VMs versus LXC, failure domains, networking, load balancers, Ceph, backups, upgrades and operations.

Kubernetes on Hetzner

Plan Kubernetes on Hetzner across cloud VMs, bare metal or Proxmox, including networking, storage, load balancing, GitOps, backup and operations.

Kubernetes on OVHcloud

Plan Kubernetes on OVHcloud: managed service or own cluster, vRack, load balancing, storage, GitOps, backup and shared responsibility.

European Kubernetes providers compared

Compare European Kubernetes providers: Hetzner, OVHcloud, IONOS, STACKIT, Open Telekom Cloud and Scaleway by architecture and operating model.

k3s vs. RKE2 vs. Talos

k3s, RKE2 or Talos Linux for your self-hosted cluster? The comparison: datastore, hardening, operating model - and which distribution fits which case.

Networking & access

Access Kubernetes privately with NetBird

Reach the Kubernetes API and ClusterIP services without public endpoints using NetBird Operator, routing peers, sidecars, policies and HA.

Gateway API vs. Ingress

Gateway API or Ingress? The comparison: a role model instead of annotations, what Ingress cannot do, service mesh via GAMMA - and when each is the right choice.

MetalLB vs. kube-vip

Kubernetes on bare metal has no load balancing. MetalLB or kube-vip? The comparison: service LB vs. control-plane VIP, L2 vs. BGP - and when to use which.

Migrate from ingress-nginx to the Gateway API

ingress-nginx has been retired since March 2026 - no more security patches. The path to the Gateway API: ingress2gateway, annotations, zero-downtime cutover.

Delivery & platform engineering

Migrate from Helm 3 to Helm 4

Helm 3 is winding down (security ends 10 Feb 2027). Helm 4 manages existing releases with no migration step - but has breaking changes. The low-risk path.

Storage, data & backup

Longhorn vs. Rook-Ceph

Longhorn or Rook-Ceph for persistent volumes in your cluster? The comparison: block vs. block/file/object, resource footprint, operations - and which fits when.

Kubernetes backup: the four layers

A snapshot is not a backup. The four layers of a Kubernetes backup - etcd, resources, volumes and databases - with Velero and a tested restore.

Operations, scaling & workloads

Taking over a Kubernetes cluster: audit checklist

Taking over an inherited Kubernetes cluster or handing over operations: the operational audit checklist - version, network, storage, restore test, RBAC and operations.

From one team

WZ-IT builds and runs Kubernetes in production for companies - design, build and operations from one team.

Managed Kubernetes →

Contact

Let's Talk About Your Idea

Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.

E-Mail

[email protected]

Leading companies trust WZ-IT