cloud-controller-manager was introduced. CSI provider for vSphere • Container Storage Interface (CSI) is a standard API allowing a storage provider to write just one plugin that will work for all major container users looking to try out Kubernetes or develop with it day-to-day. 7 Out of tree components, what changes for me? In-tree vSphere Cloud Provider vSphere CSI Out-of-tree vSphere Cloud Provider A plug-in mechanism • allows Kubernetes to operate across platforms • hosts portable apps in a standard way What it does The external cloud provider support has been added as Alpha in version 1.6,

workloads onto best suited nodes Abnormality detection • Operator determines deviations from a standard performance profile Observerbility 日志、系统指标等采集、分析；监控配置与报警；性能 指标收集与分析等等。 Backup & Restore 备 used for garbage collection of the controlled object and for // reconciling the owner object on changes to controlled (with a Watch + EnqueueRequestForOwner). // Since only one OwnerReference can be a

and release versioning proposa（API和版本发布 提案）l 描述了API版本控制和软件版本控制之间的关系。 不同的API版本意味着不同程度的稳定性和⽀持。API Changes documentation 详细描述了每个级别的标准。概括如 下： Alpha级别: 版本名称包含 alpha （例如 v1alpha1 ） 05-Kubernetes API 18 命令⾏时，CLI会为您提供必要的Kubernetes API调⽤；您也可直接在⾃⼰的程序中使⽤Kubernetes API。 Kubernetes⽬前提供了⼀个 golang client library ，并且正在开发其他语⾔的客户端库（如 Python ）。 对象Spec和Status（规格和状态） 每个Kubernetes对象都包含两个嵌套的对象字段，它们控制着对象的配置：对象spec和对象status

kubectl already in production; TEE-based secure kubectl completed PoC • API server and the rest changes for the TEE-based - PoC stage • Where we go? • To keep the production practice • To explore more intersections between Cloud-Native and Confidential Computing • To submit KEPs to upstream for related changes Special Thanks We’d like to thank the contributors to this work: Yinyong Zheng, Wei Zhang, Yong

kubernetes and all that stuff • Pachyderm can version datasets and trigger new trainings when changes occur • Distributed File Systems • NFS • HDFS • … Classic DevOps solutions: • Containers • CI/CD

kubectl 功能与kubectl保持一致 3. Multi-cluster management 多集群管理 4. Improved security 提高安全性 Top requested changes 1. Third-party plugins or integrations 集成第三方插件 Which third-party plugins or integrations would

app=MyApp Replicas: 2 Service <10.0.0.11>:<9376> Label: app=MyApp Endpoints: track backend pod changes <172.17.10.1>:<80> <172.17.10.2>:<80> ... Cluster DNS record: pod1.clusterdomain pod2.clusterdomain

Prometheus + Grafana + EFK ● Ingest metrics and logs into Stackdriver without any instrumentation changes ● Aggregate logs from many clusters -- whether GKE or GKE On-Prem Logging and Monitoring Cloud

c Controller • The heart of Kubernetes orchestrator • drives the cluster state based on the changes to the API objects for { desired := getDesiredState() current := getCurrentState() makeChanges(desired

keys used for encryption of cardholder data, including the following: 3.6.4 Cryptographic key changes for keys that have reached the end of their cryptoperiod (for example, after a defined period of