# api server Published articles for api server. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Kubernetes Architecture: Control Plane, Scheduler, and Kubelet DevFeed: [Kubernetes Architecture: Control Plane, Scheduler, and Kubelet]() Original publisher: [Read original article]() Author: Nimesha Jinarajadasa Published: 2026-09-17T06:25:02Z Content type: tutorial Language: en Sources: [Kubernetes - KodeKloud Blog | DevOps, Cloud, Kubernetes, AI Tutorials & More]() Topics: [Kubernetes](), [control-plane](), [api server](), [Containers](), [etcd](), [kubectl]() Tags: [api](), [api-server](), [containers](), [control-plane](), [controllers](), [etcd](), [kubectl](), [kubernetes](), [kubernetes-architecture](), [kubernetes-networking](), [node](), [scheduler]() ### AI overview A beginner-friendly tutorial explaining how Kubernetes maintains the desired state of containerized applications. It covers the control plane, API server, etcd, controllers, scheduler, and kubelet. ### Source excerpt Learn how Kubernetes works, from the control plane and scheduler to kubelet, pods, and Services, with simple answers to interview questions. ## 【kube-apiserver】CRD / aggregation / 扩展边界：API 扩展停损线 DevFeed: [【kube-apiserver】CRD / aggregation / 扩展边界：API 扩展停损线]() Original publisher: [Read original article]() Author: Liao Tonglang Published: 2026-08-28T00:00:00Z Content type: article Language: zh Sources: [土法炼钢 - 系统与基础设施]() Topics: [Kubernetes](), [API](), [etcd](), [Extension](), [Server]() Tags: [aggregation](), [api](), [api-server](), [apiserver](), [apiservice](), [authorization](), [crd](), [distributed](), [encryption](), [etcd](), [extension](), [kubernetes](), [v1](), [v1-30-3](), [v3-5](), [v3-5-33](), [webhook]() ### AI overview This article explains the boundary between Kubernetes CRD and Aggregated API extension paths in kube-apiserver. CRD requests remain within the apiserver and use its storage and admission paths, while Aggregated API requests are proxied to an external Extension Server. The two paths have different failure modes and troubleshooting points, although both can appear as 503 errors or timeouts. ### Source excerpt 厘清 CRD v1 与 Aggregated API 两条扩展路径在 kube-apiserver 中的存储与请求分界：CRD 对象存 etcd、conversion webhook 失败如何体现在 Storage 轴，APIService 则把请求转发到外部 Extension Server 可引发 503。明确 scheduler/controller/kubelet 为扩展停损线之外的数据面与控制循环。 ## Kubelet Metrics: How cAdvisor and CRI Collect Kubernetes Stats DevFeed: [Kubelet Metrics: How cAdvisor and CRI Collect Kubernetes Stats]() Original publisher: [Read original article]() Author: Gulcan Topcu Published: 2026-05-18T00:00:00Z Content type: tutorial Language: en Sources: [Learnk8s]() Topics: [Kubernetes](), [container](), [telemetry](), [gRPC](), [Kernel]() Tags: [api](), [api-server](), [cgroups](), [collect](), [container](), [cpu](), [data](), [deployment](), [grafana](), [kernel](), [kubernetes](), [linux](), [metrics](), [monitoring](), [performance](), [pipeline](), [prometheus](), [trace](), [visibility]() ### AI overview This tutorial explains how Kubernetes collects and exposes container, pod, and node metrics through kubelet, cAdvisor, the Linux kernel, and the Container Runtime Interface (CRI). It describes the shift toward CRI-native metrics over gRPC and how Prometheus, Grafana, and other observability systems consume the data. ### Source excerpt Learn how kubelet collects Kubernetes metrics from cgroups, cAdvisor, containerd and CRI, and when pod and container stats move to the runtime. ## How the Kubernetes control plane works DevFeed: [How the Kubernetes control plane works]() Original publisher: [Read original article]() Author: LearnKube Published: 2026-04-17T00:00:00Z Content type: tutorial Language: en Sources: [Learnk8s]() Topics: [Kubernetes](), [API](), [Cloud Native Ecosystem]() Tags: [api](), [api-server](), [authentication](), [authorization](), [declarative](), [kubernetes](), [reconciliation](), [scheduler](), [schema]() ### AI overview This tutorial explains how the Kubernetes control plane accepts changes, stores desired state, and keeps a cluster aligned with that state. It introduces the API server, etcd, scheduler, and controller manager, then describes request validation and persistence in etcd. ### Source excerpt A visual map of the Kubernetes control plane with linked deep dives into the API server, scheduler, controller manager, and etcd. ## Why etcd breaks at scale in Kubernetes DevFeed: [Why etcd breaks at scale in Kubernetes]() Original publisher: [Read original article]() Author: Daniele Polencic Published: 2026-02-24T00:00:00Z Content type: tutorial Language: en Sources: [Learnk8s]() Topics: [Kubernetes](), [Database](), [Raft](), [Availability]() Tags: [api-server](), [consistency](), [database](), [high-availability](), [kubernetes](), [raft](), [scale]() ### AI overview This article explains why etcd becomes a bottleneck as Kubernetes clusters grow. It describes etcd as the API server's private, consistent backend and explains how Raft supports shared state across multiple API servers for high availability. ### Source excerpt etcd is the database behind every Kubernetes cluster. This article explains etcd's design limits, how the API server amplifies them, and what you can do about it -- from sharding to what GKE, EKS, and k3s built. ## Cracker Barrel rewards admin panel vulnerability allowed API requests without an authorization token DevFeed: [Cracker Barrel rewards admin panel vulnerability allowed API requests without an authorization token]() Original publisher: [Read original article]() Author: Eaton Published: 2025-11-17T15:31:02Z Content type: article Language: en Sources: [Eaton Works Feed]() Topics: [vulnerability](), [Authorization](), [Exploit](), [api server](), [React]() Tags: [admin](), [api](), [api-server](), [auth](), [authorization](), [bypass](), [panel](), [react](), [third-party](), [vulnerability]() ### AI overview The article describes a vulnerability in Cracker Barrel's rewards administration system. The author found that the React app's API server accepted requests without an authorization token, potentially allowing access to rewards management functions. No write actions were performed, no sensitive information was exposed, and the vulnerability appeared to be fixed by November 17, 2025. ### Source excerpt Cracking open the rewards admin panel. ## Building a GPT Backed by a Heroku-Deployed API DevFeed: [Building a GPT Backed by a Heroku-Deployed API]() Original publisher: [Read original article]() Author: Julián Duque Published: 2024-03-28T21:00:00Z Content type: tutorial Language: en Sources: [Heroku]() Topics: [Heroku](), [ChatGPT](), [Node.js](), [API](), [Back end](), [Databases](), [SQL](), [OpenAI]() Tags: [ai](), [api](), [api-server](), [apis](), [backend](), [building](), [chatgpt](), [database](), [developers](), [development](), [engineering](), [heroku-ai](), [how-to](), [node](), [node-js](), [openai](), [server](), [sql]() ### AI overview This tutorial shows how to build a Node.js API, deploy it to Heroku, and connect it to a custom GPT. The example lets users query an employee database in natural language: the API uses OpenAI's Chat Completions API to translate questions into SQL, retrieve results, and produce a natural-language response. The article notes that data leaves the Heroku trust boundary when sent to OpenAI services. ### Source excerpt How to connect your GPT on OpenAI to a backend Node.js app Late in 2023, OpenAI introduced GPTs, a way for developers to build customized versions of ChatGPT that can bundle in specialized knowledge, follow preset instructions, or perform actions like reaching out to external APIs. As more and more businesses and individuals use ChatGPT, [...] The post Building a GPT Backed by a Heroku-Deployed API appeared first on Heroku. ## Are Kubernetes Validating Admission Policies the end of admission controllers? DevFeed: [Are Kubernetes Validating Admission Policies the end of admission controllers?]() Original publisher: [Read original article]() Published: 2023-03-31T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Kubernetes](), [supply-chain-security](), [API](), [Structured-data]() Tags: [admission-controller](), [api](), [api-server](), [blog-post](), [chainguard-enforce](), [common-expression-language](), [complexity](), [deployment](), [fragmentation](), [integration](), [kubernetes](), [kubernetes-admission-controller](), [performance](), [policy](), [security-policies](), [software-supply-chain](), [supply-chain](), [validation]() ### AI overview The article explains how Kubernetes Validating Admission Policies, introduced in alpha in Kubernetes 1.26, let users evaluate many admission checks natively in the API server using Google's Common Expression Language (CEL). It argues that these policies improve performance, reliability, and integration by reducing reliance on webhooks, while noting that admission controllers remain necessary for policies beyond CEL's deliberately restricted capabilities. ### Source excerpt Validating Admission Policies are here in Kubernetes 1.26. Read on to learn how they work and what they mean for admission controllers. ## Generics vs. Interfaces DevFeed: [Generics vs. Interfaces]() Original publisher: [Read original article]() Published: 2022-12-16T00:00:00Z Content type: tutorial Language: en Sources: [William Kennedy]() Topics: [Go Language](), [Binance](), [backends](), [Code]() Tags: [adapter-pattern](), [api](), [api-server](), [business-logic](), [decoding](), [decoupling](), [encoding](), [function](), [generics](), [go](), [go-api-server](), [gorm](), [http](), [interfaces](), [reusable-code](), [solid](), [solid-principles](), [transactions](), [video]() ### AI overview A video explains how generic functions and adapter functions can reduce code duplication and decouple business logic from API server handlers in Go. It demonstrates HTTP handlers, GORM database transactions, performance evaluation with PPROF, and generic data encoding and decoding. ### Source excerpt Introduction In this video, Paulo shows the benefit of leveraging generic functions to write less code that does more. He starts by walking you through an API server he initially wrote that makes use of Go's default HTTP handlers with a sprinkle of GORM to manage database transactions. He then refactors that code by introducing the concept of adapter functions. Paulo's approach consists of decoupling his business logic with his API code. To achieve this, he defines an adapter function that will establish a bridge between his business logic and API server handlers. This proves to be an effective way to abstract request processing and handling. This approach also promotes code reusability because the business logic is loosely coupled with the API service invoking it. ## Schema-First vs Code-Only GraphQL DevFeed: [Schema-First vs Code-Only GraphQL]() Original publisher: [Read original article]() Author: Shane Myrick Published: 2022-08-29T09:00:00Z Content type: tutorial Language: en Sources: [Apollo Blog]() Topics: [GraphQL](), [schema design](), [apollo-server](), [JavaScript](), [Kotlin](), [OpenAPI Specification](), [SQL]() Tags: [api-server](), [backend](), [graphql](), [javascript](), [kotlin](), [openapi](), [resolvers](), [schema](), [schema-design](), [sql]() ### AI overview This article explains schema-first and code-only approaches to building GraphQL servers. It compares how schemas and resolvers are defined, discusses generated schemas from external sources such as OpenAPI and SQL databases, and introduces misconceptions about the approaches. ### Source excerpt When creating a GraphQL server there are two artifacts required by the GraphQL engine: a schema, which defines all the types and fields, and the resolvers, which are the collection of functions that are called to return the data for those types. Since GraphQL can be implemented in many different programming languages, there are of course many tools and libraries you can use to create a server and execute requests. ## Secure Access to Kubernetes API. DevFeed: [Secure Access to Kubernetes API.]() Original publisher: [Read original article]() Author: sakshyam.shah@goteleport.com (Sakshyam Shah) Published: 2022-06-30T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [api server](), [Kubernetes](), [Access Control](), [Security](), [Authentication](), [Cloud Native Ecosystem]() Tags: [access-control](), [api-server](), [authentication](), [authorization](), [cloud-native](), [kubernetes](), [kubernetes-security](), [security]() ### AI overview This tutorial explains why securing the Kubernetes API is central to cluster security and presents best practices for hardening API access control. It covers authentication, authorization, and admission control, with relevance to both self-managed clusters and managed services such as AWS EKS and GCP Kubernetes Engine. ### Source excerpt Securing the Kubernetes API server is one of the most critical controls for resilient production clusters, as it enables complete runtime configuration and control. ## Kubernetes Authentication: Users and Workload Identities DevFeed: [Kubernetes Authentication: Users and Workload Identities]() Original publisher: [Read original article]() Author: Arthur Chiao Published: 2022-06-30T00:00:00Z Content type: tutorial Language: en Sources: [Learnk8s]() Topics: [Kubernetes](), [Authentication](), [API](), [OpenID connect (OIDC)]() Tags: [api](), [api-server](), [authentication](), [http](), [kubectl](), [kubernetes](), [oidc](), [rest](), [tokens]() ### AI overview This tutorial explains how Kubernetes authenticates users and workloads when they access the Kubernetes API server. It introduces authentication as the process of identifying requesters, distinguishes it from authorization, and discusses access through kubectl and REST calls, including Service Accounts, projected tokens, OIDC, and workload identity. ### Source excerpt Explore how the Kubernetes API server authenticates users and workloads with Service Accounts, projected tokens, OIDC, and workload identity. ## How To Set Up a GraphQL API Server in Node.js DevFeed: [How To Set Up a GraphQL API Server in Node.js]() Original publisher: [Read original article]() Author: hello@taniarascia.com Published: 2022-06-13T00:00:00Z Content type: tutorial Language: en Sources: [Tania Rascia]() Topics: [GraphQL](), [Node.js](), [Express](), [API](), [middleware](), [Code]() Tags: [api](), [api-server](), [cors](), [express](), [graphql](), [how-to](), [node](), [node-js](), [resolver](), [rest]() ### AI overview This tutorial explains how to build a GraphQL API server with Express and Node.js. It covers defining a GraphQL schema with queries, mutations, and resolver functions, then exploring and debugging the API with GraphiQL. ### Source excerpt In An Introduction to GraphQL, you learned that GraphQL is an open-source query language and runtime for APIs created to solve issues that... ## Tutorial: Authentication and Authorization for Kubernetes DevFeed: [Tutorial: Authentication and Authorization for Kubernetes]() Original publisher: [Read original article]() Author: info@goteleport.com (Lukonde Mwila) Published: 2022-02-15T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Kubernetes](), [Tutorial](), [Authentication](), [Authorization]() Tags: [access-control](), [api](), [api-server](), [authentication](), [authn](), [authorization](), [authz](), [cli](), [crud](), [devops](), [kubernetes](), [permissions](), [scheduler](), [security](), [tutorial]() ### AI overview This tutorial explains the difference between authentication and authorization in Kubernetes. It describes how the Kubernetes API server validates the identity of users or other entities and checks whether they have permission to perform requested operations. ### Source excerpt The difference between who gets to access (AuthN) a Kubernetes cluster and what they can do with those permissions (AuthZ) ## An Introduction to GraphQL DevFeed: [An Introduction to GraphQL]() Original publisher: [Read original article]() Author: hello@taniarascia.com Published: 2021-11-17T00:00:00Z Content type: tutorial Language: en Sources: [Tania Rascia]() Topics: [GraphQL](), [API](), [api server](), [client](), [Web](), [Mobile]() Tags: [api](), [api-server](), [architecture](), [client](), [declarative](), [graphql](), [introduction](), [json](), [rest](), [schema]() ### AI overview An introductory tutorial to GraphQL, covering its purpose, terminology, core concepts, query behavior, schema characteristics, and relationship to REST. It explains GraphQL as an open-source query language and runtime for APIs, including how clients request specific fields and receive responses in JSON. ### Source excerpt As web and mobile applications become more mature and complex, software engineers invent clever new ways of improving the interaction... ## Threat Hunting with Kubernetes Audit Logs DevFeed: [Threat Hunting with Kubernetes Audit Logs]() Original publisher: [Read original article]() Author: Ramesh Ramani Published: 2021-08-03T19:00:00Z Content type: tutorial Language: en Sources: [Square Corner Blog RSS Feed]() Topics: [Kubernetes](), [Threat Hunting & Intel](), [SIEM, Security, Observability](), [Amazon EC2](), [Amazon Elastic Kubernetes Service](), [Operator Lifecycle Manager]() Tags: [api-server](), [audit](), [audit-trail](), [aws](), [clusters](), [ec2](), [engineering](), [kubernetes](), [kubernetes-clusters](), [logs]() ### AI overview This tutorial introduces Kubernetes audit logs and explains how they can provide an audit trail of API calls for threat hunting. It outlines a process for understanding the environment, forming and testing hypotheses, identifying anomalous behavior, establishing repeatable patterns, and enriching detection pipelines. ### Source excerpt Analyzing Kubernetes audit logs to look for potential threats