features • Operator provides the ability to create backups of the Operand • Operator is able to restore a backup of an Operand • Operator orchestrates complex re- configuration flows on the Operand • Operator from a standard performance profile Observerbility 日志、系统指标等采集、分析；监控配置与报警；性能 指标收集与分析等等。 Backup & Restore 备份策略、备份方式、恢复方式、备份管理等等。 Disaster Recovery & High Availability Failover/Switchover、多可用区、数据恢复等等。

User APP User APP Application manager KB controller Mysql/pgsql/mongo CNI CRI CSI DNS Backup Restore 交付类场景 01 整个集群或者分布式应用整 体打包，一键交付 标准化交付产物，而不是靠 操作文档协作 交付者无需关心业务逻辑，一条命令 完成任意分布式高可用应用交付 支持完全离线场景，小白操

* Allow * Forbid * Replace 3. 支持单任务并发控制 一个简单的编排案例 Client API DB API Proxy DB Proxy DB Backup Monitoring Deployment StatefulSet Service CronJob DaemonSet Kubernetes 编排案例 Application Ingress Job CronJob = 无状态应用 有状态应用 守护型应用 批处理任务 应用编排架构 重新审视这个例子 Client API DB API Proxy DB Proxy DB Backup Monitoring 无状态应用 有状态应用 守护型应用 批处理任务 应用编排架构 应用编排架构 API Gateway APP API Service A APP API

labels: {{- include "influxdb.labels" . | nindent 4 }} app.kubernetes.io/component: backup spec: type: ClusterIP ports: - port: 9999 targetPort: 9999 protocol: TCP labels: {{- include "influxdb.labels" . | nindent 4 }} app.kubernetes.io/component: backup spec: type: ClusterIP sessionAffinity: None clusterIP: None ports: - port:

Operator ��! • �������(TPR/CRD)! • �� k8s controller�����������! • ������upgrade, scale, failover, backup! • ��������! ����������������! ������ Kubernetes ����������! Kubernetes Operator ����! Operator

• Emergency management • High Availability guarantee • KMS • API server & kms-plugin • Cron job backup for KEKs (from KMS) • Static key configuration support in kms-plugin • One click decryption •

plane ● Similar situation to initial node bootstrap, but utilizing existing etcd state or etcd backup. ● Need to start a temporary replacement api-server ○ Could be binary, static pod, new tool, bootkube