I recently worked through a difficult recovery scenario in a self-managed Kubernetes environment. I'm sharing the technical lessons without identifying the infrastructure or exposing operational details.
The main problem was that the control plane became unavailable following an underlying storage failure. Some workloads continued running on the workers, which made the platform failure less obvious than a complete cluster shutdown.
The more serious issue was that the control-plane state had no independently validated backup available for a straightforward restore.
What made recovery difficult?
There were several distinct problems:
The control plane was a single point of failure.
The storage failure affected the VM hosting the control-plane services.
The original etcd database was structurally damaged.
Some workers continued running existing workloads despite API unavailability.
After extended API unavailability, restarting the kubelets was necessary to recover normal pod-management behavior on…