kubernetes- csi Orgs/Repos Orgs/Repos Orgs/Repos SIGs/WGs Special Interest Group Working Group https://github.com/kubernetes/community/blob/master/sig-list.md SIGs/WGs Communication Github Slack http://slack.k8s.io/ https://github.com/kubernetes/kubernetes/issues related links https://www.youtube.com/c/KubernetesCommunity/live https://groups.google.com/forum/#!forum/kubernetes-dev https://zoom.us/m us/my/kubernetescommunity https://discuss.kubernetes.io We are already here ! Github Slack YouTube channel Mailing list Zoom Discussion board Kubecons/meetups Roles https://github.com/kubernete

29-实战：使⽤K8s编排Wordpress博客 2 简介 Kubernetes开源书。不啰嗦了，JUST READ IT. GitHub地址：https://github.com/itmuch/docker-book Gitee地址：https://gitee.com/itmuch/docker-book 欢迎star、fork，⼀起讨论！ QQ群：731548893 微信群：加jumping_me，注明加群。 成，这些控制进程可将当前状 态持续地驱动到所需的状态。 如何从A到C不要紧，集中控制也不需要；这种做法更类似于编排 。 这使系统更易⽤、更 强⼤，更具弹性和可扩展性。 译者按：编排和编制：https://wenku.baidu.com/view/ad063ef2f61fb7360b4c65cd.html Kubernetes的含义是什么？K8S呢？ Kubernetes源⾃希腊语，意思是舵⼿或⻜⾏员 个字⺟“ubernete”替换为“8”的缩写。 译者按：控制论简介（讲解了什么是 governor&cybernetic）：https://wenku.baidu.com/view/1d97762c0066f5335a812157.html 原⽂ https://kubernetes.io/docs/concepts/overview/what-is-kubernetes/ 01-什么是Kubernetes

k8s-node1, k8s-node2, k8s-node3)均需做以下 B~D： B. 升级&配置 centos7 Step1. 升级 linux 内核 uname –r wget https://cbs.centos.org/kojifiles/packages/kernel/4.9.220/37.el7/x86_64/kernel-4.9.220-37.el7.x86_64.rpm /etc/sysconfig/modules/ipvs.modules && lsmod | grep -e ip_vs -e nf_conntrack D. 安装 docker-ce 和 k8s See https://cloud.tencent.com/developer/article/1627330 Step1: 安装 docker-ce # 安装需要的支撑软件 yum install -y -y yum-utils device-mapper-persistent-data lvm2 # 添加 yum 源 yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo # 查看 docker-ce 安装包 yum list | grep docker-ce # 安装

Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential Amazon EKS 已经将产品路线图开源 https://github.com/aws/containers-roadmap/ © 2019, Amazon Web Services, Inc. or its Affiliates. All rights Confidential eksctl–安装管理 Amazon EKS 集群的利器 • 最简单的命令行创建集群工具 eksctl create cluster –nodes=4 • 在GitHub上已开源 https://eksctl.io/ • 由Weave 和 AWS 共同构建 • Amazon EKS 官方支持的CLI工具 © 2019, Amazon Web Services, Inc. or its Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential 自由 - 选择需要的 AMI 镜像 Amazon https://github.com/awslabs/amazon-eks-ami © 2019, Amazon Web Services, Inc. or its Affiliates. All rights

two-layers of encryption, e.g., full-disk & application-layer … then tries to decrypt it https://xkcd.com/538/, https://xkcd.com/license.html Key rotation “Keys are analogous to the combination of a safe time has passed and/or after a certain amount of cipher-text has been produced by a given key) https://www.pcisecuritystandards.org/documents/Prioritized-Approach-for-PCI-DSS-v3_2_1.pdf “ ” Re-encrypting {DEK}KEK DEK is encrypted with KEK {SECRET}DEK + {DEK}KEK Envelope Source for crypto notation: https://en.wikipedia.org/wiki/Security_protocol_notation KMS 1.10 Envelope Encryption Sequence Master

• 启动应用，获取debug.ReadBuildInfo，注入框架版本号 https://ego.gocn.vip/ micro/chapter1/build.ht ml 微服务的部署阶段 注入信息 版本信息 发布版本 • 执行./bin/hello --version • 查看线上使用框架版本 https://ego.gocn.vip/ micro/chapter1/build.ht 限流熔断 https://ego.gocn.vip/f rame/core/logger.html 报警 索引收敛 日志分类 • 框架日志 • 业务日志 • 慢日志 • Error日志 • Panic日志 mysql的方法叫sql，redis方法叫cmd，框架这里全部统一 用method。降低索引个数 微服务的治理阶段 监控 日志 链路 限流熔断 https://ego =X-Ego-Uid,X-Ego- OrderID https://ego.gocn.vip/ micro/chapter2/trace.ht ml 报警 微服务的治理阶段 监控 日志 链路 限流熔断 • 修改sentinel.json • 框架Watch sentinel.json • 限流实时生效 • Sentinel监控 https://ego.gocn.vip/frame /client/sentinel

资源的单位为 Core（即⼀个核）、内存的单位为 MiB。 Init Container：勾选该项，表示创建⼀个 Init Container，在主容器启动前执⾏，进⾏初始化 ⼯作，详情参考https://kubernetes.io/docs/concepts/workloads/pods/init- containers/。 添加容器：⽀持添加多个容器 23 检测何时重启容器；就绪检查⽤于确定容器是否已经就绪，且可以接受流量。更多信息，请参 ⻅https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness- readiness-probes。 24 请求类型 配置说明 HTTP/HTTPS 即向容器发送⼀个 HTTPget 请求，⽀持的参数包括： ⽴连接，容器被认为是健康的，如果不能就认为是失败的。⽀持的参数包括： 端⼝：容器暴露的访问端⼝或端⼝名，端⼝号必须介于 1~65535。 25 ⽣命周期：为容器的⽣命周期配置容器启动执⾏、启动后处理和停⽌前处理。具体参⻅ https://kubernetes.io/docs/tasks/configure-pod-container/attach-handler-lifecycle- event/。 启动执⾏：为容器设置预启动命令和参数。

60% of survey takers use a UI to monitor or manage their resources in Kubernetes https://unsplash.com/ https://github.com/kubernetes/dashboard/issues /3256#issuecomment-437199403 UIs help you understand automation ● Sharing workflows / reproducibility ● Customization Onboarding new K8s users https://unsplash.com/ Over 50% of survey takers said that Dashboard is very useful or extremely useful is the Kubernetes Dashboard for learning Kubernetes? 您认为Kubernetes Dashboard对学习Kubernetes有多大用处？ https://github.com/kubernetes/dashboard/issues /3256#issuecomment-437199403 “At the start it was great

informal and described with metadata. The definition of what an application contains is loose.” Sited: https://kubernetes.io/docs/concepts/overview/working-with-objects/common-labels/ API 和业务原语 关注点不同 服务语义与抽象程度不同 一个既用户友好，又高可扩展，标准化 的应用管理引擎即将发布，敬请期待！ https://github.com/oam-dev/kubevela 参考资料 25 OAM spec: https://oam.dev/ KubeVela: https://github.com/oam-dev/kubevela OAM 系列文章： https://mp.weixin.qq.com/mp/appmsgalbum OAM 社区会议记录： https://space.bilibili.com/180074935/channel/detail?cid=138178 KubeVela demo - KubeVela Cli 整体能力介绍 - Getting started/Application/Traits/System/Capability - 应用创建 - by OAM: https://github.

clone https://github.com/Altinity/clickhouse-operator Install the operator: kubectl apply -f clickhouse-operator-install.yaml • Хочу просто попробовать Quick Start Guide kubectl apply -f https://raw стороны Пара слов об инфраструктуре компании ● B2B search solution (Manticore-based) ● https://socialgist.com/ ● https://api.boardreader.com/docs/ ● 100+ серверов ● В процессе переезда в k8s ● Есть сетевая Устанавливаем оператор ● https://github.com/Altinity/clickhouse-operator/ ● Две части: operator definition YAML + cluster definition YAML ● Cluster definition YAML создаётся пользователем ● https://github.com/A