Cloud-Native Spring Boot: Production Kubernetes for Java Engineers
Thirty-two chapters on running Spring Boot services on Kubernetes the way production actually demands it. Covers JVM resource tuning, image discipline, secrets, workload identity, ingress, autoscaling, GitOps, stateful workloads, observability, and five real CinéTrack incidents. Ends with a capstone 50x load event.
Coming Soon
What you'll learn
Running JVM workloads on Kubernetes with correct resource requests, limits, and heap sizing
Container image discipline: layering, distroless bases, and minimizing attack surface
Configuration and secrets management at scale without leaking credentials
Service-to-service routing with Ingress, Gateway API, and east-west patterns
HPA tuned to JVM behavior, Cluster Autoscaler, Karpenter, and VPA trade-offs
FinOps for Java workloads: cost per request and capacity planning on Kubernetes
GitOps with progressive delivery and supply chain integrity
Stateful workloads: running Postgres, Kafka, and Redis on (and off) Kubernetes
Observability boundaries, on-call runbooks, and five real CinéTrack incidents dissected
Multi-cluster architecture and surviving a 50x load event
Table of Contents
Foundations
- 01 Day 2 is the job
- 02 The cluster contract
- 03 JVM on Kubernetes, properly
- 04 Image discipline
- 05 Configuration at scale
- 06 Secrets in production
- 07 Workload identity
- 08 Image pull secrets and private registries
Networking
- 09 The service-to-service path
- 10 Ingress and Gateway API
- 11 North-south resilience
- 12 East-west without a mesh
- 13 Service mesh, honestly
Scaling and Cost
- 14 HPA beyond CPU
- 15 Cluster Autoscaler and Karpenter
- 16 VPA, PDBs, and co-tenants
- 17 Capacity planning for Java workloads
- 18 FinOps for Spring on K8s
Delivery
- 19 GitOps that survives Friday
- 20 Progressive delivery
- 21 Helm vs Kustomize vs both
- 22 Supply chain
- 23 Multi-tenancy and namespaces
Stateful Workloads
- 24 Postgres on (or off) Kubernetes
- 25 Kafka on Kubernetes
- 26 Redis, Elasticsearch, and the StatefulSet tax
Operations
- 27 Observability boundaries
- 28 Debugging on the cluster
- 29 The on-call runbook
- 30 Five real incidents on CinéTrack
- 31 Multi-cluster, honestly
- 32 Capstone: the 50x load event