Cluster Design — Architect Track›Operations · Cheat sheet & self-check

Operations · wrap-up

Cheat sheet & self-check

Every command from this section on one page.

10 · Observability & SLOs

Architecture

Per-cluster collection (Prometheus/agents, log and trace collectors)Close to the workloads
Central storage/query in the mgmt cluster or another siteSurvives a production cluster failure
Meta-monitoring + external dead man's switchKnow when monitoring itself is down
Synthetic checks from outside both DCsThe user's view

Alert catalogue columns

Name · signal/SLO · condition · severity · owner · runbook · notification routeOne row per alert

11 · Resilience & failure modes

FMEA

Component · failure mode · effect · S · O · D · RPN = S×O×D · mitigation · ownerOne row per failure mode
S, O, D scored 1–10 (10 = worst: severe, frequent, undetectable)Scoring scale
Re-score after mitigationShow risk reduced

Chaos experiments

Steady-state hypothesis → inject → observe → abort conditionsExperiment structure
Chaos Mesh / LitmusChaos (PodChaos, NetworkChaos, IOChaos…)Kubernetes-native fault injection
Start in nonprod, small blast radius, business hoursSafety rules

12 · Primary/secondary & failover

Patterns

Active-passive (warm standby)Secondary runs the platform + replicas; takes traffic on failover
Active-activeBoth sites serve traffic; needs multi-site data design
GSLB / DNS with health checks (low TTL)Switch traffic between sites

Failover essentials

Decide → fence old primary → promote → switch traffic → verifyOrder matters
Measure RPO (lag at failover) and RTO (time to healthy)Compare with NFR-04
Failback is a second, planned failoverResync, then switch back

13 · Capstone: design review

Document structure

1 Summary · 2 Requirements (NFR/SLO sheet) · 3 Architecture overviewFront
4 Compute & sizing · 5 Network & IPAM · 6 Traffic & edge · 7 Storage & dataCore design
8 Security & tenancy · 9 Observability · 10 Resilience (FMEA, chaos) · 11 DROperability
12 Cost · 13 Risks & open questions · Appendix: ADR index, evidence packClose

Traceability

NFR → design section → ADR → evidence (test/drill) → statusOne row per NFR