DaoCloud Enterprise 5.0 产品介绍 DaoCloud 研发部门 发布日期：2023-09-14 版权 © 2023 DaoCloud 第 2 页 目录 简介 3 九大能力 4 多云编排 4 中间件服务 4 镜像仓库 14 云原生网络 15 存储 17 参考文档 18 版权 © 2023 DaoCloud 第 3 页 简介 DaoCloud Enterprise 5.0（DCE 5.0）是一款高性能、可扩展的云原生操作系统。 它能够在任何基础设施和任意环境中提供一致、稳定的体验，支持异构云、边 缘云和多云编排。 DCE 5.0 集成了最新的服务网格和微服务技术，能够跟踪每

Kubernetes安全求生指南 ©2019 VMware, Inc. 2  您的Kubernetes環境夠安全嗎?  Kubernetes安全最佳實務  VMware Enterprise PKS平台如何實踐K8s與容器的安全強化  最困難的部分其實是....  總結 本日議程 3 ©2019 VMware, Inc. 您的Kubernetes環境夠安全嗎 Configuration) 4. 工作節點 (Worker Node) 5. 政策 (Policies) ©2019 VMware, Inc. 10 Use Cases: Security Architecture Guidance / Replacement for Checklist / Security Training OWASP CSVS – 對Docker容器應用開發/調度平台的控制措施 ©2019 VMware, Inc. VMware Enterprise PKS平台 如何實踐K8s與容器的安全強化 How PKS Enterprise PKS Implement Kubernetes & Container Security ©2019 VMware, Inc. 12 VMware Enterprise PKS對於NIST容器安全指南有完整的實作 White

the mission. SmartEdge makes this possible at scale with an extensible platform utilizing open architecture prin- ciples and open source technologies.” At-a-Glance As a premier digital integrator for has resulted in a widening gap between data capture and decision-mak- ing. “Based on the open architecture and the modularity, our intent here is to create an ecosystem of capabilities, of infrastructure jobs quicker and more efficiently.” The industry is accustomed to thinking about the edge as an enterprise IT term— the edge of the data center, or remote ac- cess capabilities. For Booz Allen, the edge

的下载次数已经超过4000万次，全球Rancher 的活动部署超过10,000个 GA March 2016 >20 million downloads 5,000 GitHub stars 100+ enterprise customers © 2017 Rancher Labs, Inc. Rancher 与 Kubernetes 3 • Rancher提供Kubernetes分发版 • Ra now • Build as an image and run in a cluster © 2017 Rancher Labs, Inc. API Server Aggregation Architecture ETCD API Server Kubernetes Core Extend API Server Service Instance-1 Instance-2 Instance-3

16x15x18 16个指南 15个规范 18个阶段性汇报 16操作⼿册 部分成果展⽰ 项目背景 1 产品与技术详情 3 建设思路与整体方案 2 今⽇话题 A lauda Cloud Enterprise (A CE) Un i f i ed A P Is M u l ti -Cluster M a na gement M u l ti -Ten ant M a nagement K u ourc es Oth er tool s/systems In tegra ti on Other tools/systems Alauda Cloud Enterprise (ACE) Alauda Cloud Enterprise - DevOps • 开放式 DevOps 工具链集成与编排 • 覆盖应用全生命周期管理 • DevOps 工具一键部署，集成 • 平台与工具用户打通（SSO）

API Cluster A Worker Worker Worker Kubernetes Master API Cluster B Operator Developer Architecture PKS Controller IaaS Worker Worker Kubernetes Cluster Services API Cluster3 NSX-T vSphere create-cluster K8s-1 n=3 #pks create-cluster K8s-2 n=3 #pks create-cluster K8s-3 n=3 #pks resize K8s-3 n=5 Architecture NSX-T Bosh PKS Admin Network NCP POD 1 POD 4 POD 2 POD 3 POD 5 POD 6 T0 kube-system Pod 6 T1 T1 T1 T1 VMware vSphere NSX Manager NSX Controllers T1 NSX Edge Cluster Architecture NSX-T • NSX Container Plugin: NCP is a software component provided by VMware in form of a

Agenda • Our DevOps Expectations • Kubernetes Capabilities/Advantages to Build DevOps Solution • Architecture and Features • CRD and operator design • Pipeline / Stage/ Task / Task Template / Version Our DevOps Expectations • Kubernetes Capabilities and Advantages to Build DevOps Solution • Architecture and Features • CRD and operator design • Pipeline/Stage/Task/Task Template/Version Control/UI autoscaling, high availability • Extensibility/Integration • CI/CD examples • Future plan Overall Architecture Kubernetes Cluster Kubernetes Cluster Node Node Node Node Job Job Job Job Pod Pod Pod Pod

on QCOW2 images. https://github.com/Mirantis/virtlet Virtlet compares with other CRI Virtlet Architecture Daemonset Pod Virtlet Deploying Objects DaemonSet ConfigMap ClusterRole/Role Service Account KubeVirt Building a virtualization API for Kubernetes https://github.com/kubevirt KubeVirt Architecture KubeVirt Application Layout KubeVirt Components • virt-controller • virt-handler • libvirtd https://github.com/rancher/vm Package and run KVM images as Kubernetes pods, run at scale. RancherVM Architecture RancherVM Networking Container Security gVisor NFV? Kata Container The speed of containers

min 15 min 15 min 20min End of show Participants API Requests Application architecture Application architecture PHP-based Admin application Shared state in Redis and SQL database Scalable userfacing

Proven on IBM Cloud • Exact, same code in open source Architecture of Apache OpenWhisk Deploy Apache OpenWhisk on Kubernetes • The architecture diagram of OpenWhisk components on Kubernetes, e.g