/ 51 Confidential—Restricted Nov 10, 2022 Ozone User Group Summit / 51 2 Confidential—Restricted / 51 THE HYBRID DATA COMPANY We believe that data can make what is impossible today, possible tomorrow reinvent the wheel • RAFT replication – http://raft.github.io ● Open source Java implementation of RAFT - Apache Ratis Library. • Storage Containers – Unit of replication (collection of blocks) ● RocksDB backup ○ Bucket Granularity ● Replication and DR ○ Stable source image for replication ○ Efficient way to find changes since last replication ○ Near continuous replication ● Compliance ● Easy Rollbacks

Kailun Qin, Ant Group Putting an Invisible Shield on Kubernetes Secrets Agenda • K8s Secrets: Overview • TEE-based K8s Secrets Protection: Solution • Production Experience @ Ant Group • Demo • Summary Introducing mutual (remote / local) attestations between entities Production Experience @ Ant Group KMS Plugin • Workflow • Encryption • Decryption • Engineering decisions • apiserver is responsible

ReplicaIndex-1 ReplicaIndex-2 ReplicaIndex-3 ReplicaIndex-4 ReplicaIndex-5 EC Container Group : 1 EC Container Group : 33 Filled by previous file blocks Filled by previous file blocks Filled by Container Group: A container created in data + parity with separated instances. ● Block Group: a block presents in a container group. ● Each data+parity chunks written to block group. ● Parity fails, block group will be closed and new block group requested from OM ➢ SCM uses EC Pipeline Provider for creating EC pipeline. ➢ No Ratis in the EC Path. Pipeline is just a logical group id for set

Producer, consumer, and handlers 5.6. Listeners 6. Clustered resources 7. Cellar groups 7.1. New group 7.2. Clustered Resources and Cluster Groups 7.2.1. Features 7.2.2. Bundles 7.2.3. Configurations Balancer 10.2. Balancer in action 11. HTTP Session Replication 11.1. Enable Cluster HTTP Session Replication 11.2. Web Application Session Replication 12. DOSGi and Transport 13. Discovery Services "runtime clustering" by providing dedicated feature like: * HTTP load balancing * HTTP sessions replication * log centralization Please, see the sections dedicated to those features. 1.2. Cross topology

本⽂概述了Kubernetes集群中所需的各种组件。 Master组件 Master组件提供K8s集群的控制⾯板。Master对集群进⾏全局决策（例如调度），以及检测和响应集群事件（例如：当 replication controller所设置的 replicas 不够时，启动⼀个新的Pod）。 Master可在集群中的任意节点上运⾏。然⽽，简单起⻅，设置脚本通常在同⼀个VM上启动所有Master组件，并且不会 个单独的进程，但为了降低复杂性，它们都被编译成独⽴的⼆进制⽂件并运⾏在⼀个进程中。 这些控制器包括： Node Controller：当节点挂掉时，负责响应。 Replication Controller：负责维护系统中每个replication controller对象具有正确数量的Pod。 Endpoints Controller：填充Endpoint对象（即：连接Service＆Pod）。 Service “core”（由于没有明确的组名称，通常称为“legacy”）组，它的REST路径是 /api/v1 。例如 apiVersion: v1 。 2. 命名组是REST路径 /apis/$GROUP_NAME/$VERSION ，并使⽤ apiVersion: $GROUP_NAME/$VERSION （例如 apiVersion: batch/v1 ）。 ⽀持的API组的完整列表可详⻅：Kubernetes API reference

Container Platform 4.10 CLI 工具 工具 22 在服务器上显示支持的 API 资源 用法示例 用法示例 2.5.1.3. oc api-versions 以"group/version"的形式输出服务器上支持的 API 版本。 用法示例 用法示例 2.5.1.4. oc apply 通过文件名或 stdin 将配置应用到资源 用法示例 用法示例 # --namespaced=false # Print the supported API resources with a specific APIGroup oc api-resources --api-group=extensions # Print the supported API versions oc api-versions # Apply the configuration in 14. oc cluster-info dump 转储用于调试和诊断的相关信息 用法示例 用法示例 2.5.1.15. oc completion # Auto scale a replication controller "foo", with the number of pods between 1 and 5, target CPU utilization at 80% oc

which is part of a larger cluster on which you can run your applications. Pod A co-located group of containers and their storage is called a pod. For example, it makes sense to have database processes to filter, organize and perform mass operations on a set of resources. Think of labels as a role, group, or any similar mechanism given to a container or resource. One container can have a database role use them for certain actions. Replication Controller Replication Controllers (RC) are an abstraction used to manage pod lifecycles. One of key uses of replication controllers is to maintain a certain

CLI 工具 工具 26 2.7.1.2. oc api-resources 在服务器上显示支持的 API 资源 用法示例 用法示例 2.7.1.3. oc api-versions 以"group/version"的形式输出服务器上支持的 API 版本。 用法示例 用法示例 2.7.1.4. oc apply 通过文件名或 stdin 将配置应用到资源 用法示例 用法示例 oc --namespaced=false # Print the supported API resources with a specific APIGroup oc api-resources --api-group=rbac.authorization.k8s.io # Print the supported API versions oc api-versions 第 第 2 章 章 OPENSHIFT autoscaling policy will be used oc autoscale deployment foo --min=2 --max=10 # Auto scale a replication controller "foo", with the number of pods between 1 and 5, target CPU utilization at 80% oc

OpenShift Container Platform 4.8 CLI 工具 工具 22 在服务器上显示支持的 API 资源 用法示例 用法示例 2.5.1.3. oc api-versions 以"group/version"的形式输出服务器上支持的 API 版本。 用法示例 用法示例 2.5.1.4. oc apply 按文件名或 stdin 将配置应用到资源 用法示例 用法示例 # Print --namespaced=false # Print the supported API Resources with specific APIGroup oc api-resources --api-group=extensions # Print the supported API versions oc api-versions # Apply the configuration in oc cluster-info dump 转储用于调试和诊断的大量相关信息 用法示例 用法示例 2.5.1.15. oc completion # Auto scale a replication controller "foo", with the number of pods between 1 and 5, target CPU utilization at 80%: oc

hadoop106 ARCHIVE 2）配置文件信息 （1）为 hadoop102 节点的 hdfs-site.xml 添加如下信息 dfs.replication 2 dfs.storage.policy.enabled 3/hdfsdata/ram_disk （2）为 hadoop103 节点的 hdfs-site.xml 添加如下信息 dfs.replication 尚硅谷大数据技术之 Hadoop（生产调优手册） ——————————————————————————————————————— 3/hdfsdata/disk （3）为 hadoop104 节点的 hdfs-site.xml 添加如下信息 dfs.replication 2 dfs.storage.policy.enabled