检查⽤于 检测何时重启容器；就绪检查⽤于确定容器是否已经就绪，且可以接受流量。更多信息，请参 ⻅https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness- readiness-probes。 24 请求类型 配置说明 HTTP/HTTPS 即向容器发送⼀个 端⼝：容器暴露的访问端⼝或端⼝名，端⼝号必须介于 1~65535。 25 ⽣命周期：为容器的⽣命周期配置容器启动执⾏、启动后处理和停⽌前处理。具体参⻅ https://kubernetes.io/docs/tasks/configure-pod-container/attach-handler-lifecycle- event/。 启动执⾏：为容器设置预启动命令和参数。 启动后处理：为容器设置启动后的命令。 停⽌前处理：为容器设置预结束命令。 检查⽤于 检测何时重启容器；就绪检查⽤于确定容器是否已经就绪，且可以接受流量。更多信息，请参 ⻅https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness- readiness-probes。 35 请求类型 配置说明 HTTP/HTTPS 即向容器发送⼀个

StatefulSet I am stateful Job I only run for once CronJob I run periodically ConfigMap I read configure file Secret I need confidential data HPA I need auto-scaling Understand Kubernetes in 2 min StatefulSet I am stateful Job I only run for once CronJob I run periodically ConfigMap I read configure file Secret I need confidential data HPA I need auto-scaling My Awesome Object I have my

(Encrypt secrets at rest)  設置 Kubernetes 的許可控制器 (Configure admission controllers)  實施 Kubernetes 網路政策 (Implement networking policies)  對容器設置資安規則 (Configure secure context for containers)  分隔敏感的工作負載

Machine CRs. • Node-Operator: difference Machine and Node state, manage Node softwares and configure files. • Machine: the instance of Machine CRD with node basic information, which represent

KOPS: Installation + Create AWS user + Make a CI host + wget and install kops and kubectl + Configure AWS cli + Create S3 Bucket + Export KOPS variables + Setup Route53 KOPS: Create cluster KOPS:

Onboard Provision Configuration Kubernetes You have your compute node now, all you need is to configure it by a configuration management orchestration. We use SaltStack. Let’s model a datacenter running

modification to kernel Comparison with industry • Pitfalls • Performance of clusters of the same configure may differ • Performance of a cluster in different time slot may differ • Due to CPU oversold

Pod Spec [] Containers Affinity / SchedulerName [] Volumes Initialize the build environment Configure scheduler policy Build tasks and the dependent environments（sidecar） Share files between containers

Solutions ALPHA IN FALL Run your cluster the way Google does ● The same tools are used to install, configure, and manage clusters in GKE and GKE On-Prem ● Cluster environments are consistent (k8s version

FROM base container image RUN commands to install dependencies COPY application files over Configure the ENTRYPOINT Run the container Produces some layers Produces some layers github.com/GoogleContainerTools/jib