标准化的“服务端”抽象 – 应用模型 Open Application Model (OAM) • 通过 OAM spec 定义“以应用为中心”的原语 • 打破“谷仓”! Common Traits Function Deployment K8s Operator Virtual Machine Gateway Route Traffic Alert Monitor Service Binding Workload Types Manual Scaler K8s Operators Kubernetes + OAM K8s Plugin HPA Deployment scale-to-0 Function Unified Model Layer Platform Capability Pool 统一的模型层 平台统一“能力池” 模块化的交付系统 - GitOps “应用”配置 Git KubeVela = OAM Kubernetes Runtime + Capability Center + UI (Cli + Dashboard) KubeVela Ø User interface layer - CLI/Dashboard/Appfile Ø KubeVela core - OAM Kubernetes Runtime to provide application

DATASTORE_TYPE value: kubernetes - name: IP_AUTODETECTION_METHOD #DaemonSet 中添加该环境变量 value: interface=ens160 #指定内网网卡 - name: WAIT_FOR_DATASTORE value: "true" ...... kubectl apply -f calico function getAppSecret(appKey) { if (apps.hasOwnProperty(appKey)) { return apps[appKey]; }else{ return ""; } } function getApps()

place (Affinity/Anti-Affinity) and distribute pods Limitations • Zone spreading is a priority function not a predicate, i.e. it is a best-effort placement. If the zones in your cluster have uneven available deck for reference 23 Open Issues (WIP) vSphere Cloud Provider should support implement Zones() interface #64021 vSphere Cloud Provider does not work when deployed across Zones with zone-local Storage

Contains all state known about cluster • Kubernetes Front-end Control Plane • Provides RESTful interface • Returns state objects as JSON • Provides core control loops for platform • Watches shared state Kubeproxy Kubelet • Container Runtime Interface • Responsible for downloading images • Runs containers • Can use other runtimes such as rkt • Load-balance interface for Pods • Creates virtual IP for external external access • Interfaces with local iptables • Load-balance interface for Pods • Creates virtual IP for external access • Interfaces with local iptables The Kubernetes Runtime Components • Runtime

服務數量越來越多，端點越來越多，該如何管理 ? 服務網格 Service Mesh 更聰明的管線 … 眾多服務網格方案 Service Mesh Interface (SMI) for Kubernetes CNCF 沙箱計畫 Service Mesh Interface (SMI) for Kubernetes Kubernetes 標準介面期望統一定義 Traffic Routing, Traffic 上服務網格能有 一致的標準 化繁為簡 定義服務網格各家方案之共通 應用需求 可擴充性 當一項功能被市場廣泛接受即 可立即擴充 … 更多服務網 格方案 Service Mesh Interface 這並非新概念 感覺很熟悉，因為之前 Kubernetes 上已經有類似概念被實現過了 …. 應用程式 工具 生態系統 Ingress 展示 Azure Kubernetes Service 與Linkerd https://openservicemesh.io/ Open Service Mesh (OSM) 以 CNCF Envoy 為基礎，實作 Service Mesh Interface 輕量化，開放源碼服務網格計畫 Kubernetes 實戰工作坊 Azure Kubernetes Service Workshop（L300） 13:00 ~ 15:00、15:00 ~

Confidential Amazon VPC CNI plugin Elastic network interface Secondary IPs: 10.0.0.1 10.0.0.2 10.0.0.1 10.0.0.2 Elastic network interface 10.0.0.20 10.0.0.22 Secondary IPs: 10.0.0.20 10.0 Outbound Traffic SNAT EKS worker node Primary elastic network interface Pod Secondary elastic network interface Pod – 100.64. 0.200 © 2019, Amazon Web Services, Inc. or its Affiliates

商业化 8 面向大数据和AI应用的内存级数据编排系统 数据编排层(Data Orchestration) Java File API HDFS Interface S3 Interface REST API POSIX Interface Alluxio是什么 HDFS Driver S3 Driver OSS Driver Web Driver Alibaba Cloud OSS

patterns of Kubernetes (Controller, codegen etc) • Write your own Controller • gPRC based interface design in Kubernetes (CRI as example) • For Kubernetes users: • Effective pattern of programming com/kubernetes/gengo • github.com/kubernetes/kubernetes/tree/master/cmd/libs/go2idl Pattern 3: gRPC based Interface • Decouple Kubernetes from external dependencies • kubelet -> gRPC -> dockershim -> dockerd with CRD 4.code gen for deep copy, API conversion, API doc, encoding/decoding etc 5.gRPC based interface (e.g. CRI) 2.How we can do better to use Kubernetes? 1.Programming Patterns in Kubernetes

go:518] Determining IP address of default interface E0430 11:16:34.506062 1 main.go:204] Failed to find any valid interface to use: failed to get default interface: Unable to find default route 原因是 ★指定底层网络接口（node ip） k8s calico组件daemonset设置： - name: IP_AUTODETECTION_METHOD valuse: "interface=ens3" ★安装calicoctl命令工具 官方指导文档： h�ps://docs.�gera.io/calico/latest/opera�ons/calicoctl/install

Rancher提供官方认证和支持的分发 版，紧跟上游Kubernetes项目 © 2017 Rancher Labs, Inc. Rancher 与 Kubernetes User Interface | Application Catalog | Monitoring | Logging Management Plane Infrastructure Services - Policy • Support for extensible admission controllers • Pluggable cloud providers • Container runtime interface (CRI) enhancements © 2017 Rancher Labs, Inc. CustomResourceDefinition(CRD) • What CRD provides