Kubernetes 混合雲戰略 分散一切 的世界即將來臨 #容器化 / #分散式 / #微服務 #混合雲 / #新世代開發監控工具 # Cloud Native 使命 Meet customers where they are and partner with them in their transformation to cloud native Rigid Manual Expensive services across hybrid environments Single-pane-of-glass for multiple Kubernetes clusters, no matter where Single Pane of Glass across GCP & On-Prem ● vSphere 6.5 for Alpha ● Simple CLI installation ● Online configuration to a YAML file. Please enter the path of a directory where this configuration will be saved? [/Users/karangoel/my-test-cluster/]: Where do you want to install your cluster? [1] vSphere v6.5 Please

capabilities. For Booz Allen, the edge means the far, tactical edge—in the thick of the action where quick thinking could mean the difference between mission success or failure. Their team of technologists images would sup- port multiple specific architectures. This is where K3s comes in—helping the team ex- ecute in a range of environments, where a range of different hardware is used. But what does this What’s Next For the team, the priority is to deploy SmartEdge in as many scenarios as pos- sible, where it can make a real and tangible difference. From an innovation point-of- view, the digital solutions

secrets while in use, at rest, and in transit • TEE transparency empowered by LibOS (e.g. Occlum) • Where we are? • TEE-based KMS plugin on the way to production • TEE-based KMS plugin as a Service - production secure kubectl completed PoC • API server and the rest changes for the TEE-based - PoC stage • Where we go? • To keep the production practice • To explore more potential intersections between Cloud-Native

a workload which will attempt to detect and consume as much of the system’s memory as possible. Where does this lead? Node 0 32GB Node 1 21GB 2 CPU Nodes – NUMA host When Linux initially allocates measurement is in arbitrary units, not uniform across hosts and is a share not a guarantee 19 Where Resource Management enforcement takes place Kubernetes -> container runtime -> Linux -> hypervisor

a workload which will attempt to detect and consume as much of the system’s memory as possible. Where does this lead? Node 0 32GB Node 1 21GB 2 CPU Nodes – NUMA host When Linux initially allocates measurement is in arbitrary units, not uniform across hosts and is a share not a guarantee 19 Where Resource Management enforcement takes place Kubernetes -> container runtime -> Linux -> hypervisor

The community 2. How to contribute 3. Versioning 4. The easy way to use it 5. Demo 6. Q & A Where to all repos docs bug report code code review PR workflow git workflow CI bot/commands

Dashboard is and why you should be using it 2. Research findings and the future of Dashboard 3. Where to learn more and how to get involved About Kubernetes Dashboard Dashboard 1.0 launched in 2016

Unmarshal Tasks Map Compare Reconcile Kops 1.4 tasks := []*Task We have to track our work Where do tasks come from ? ? ? Kops 1.4 How do we parse them ? ? ? Kops 1.4 embed in .go file

writing to disk Rotation Change a secret regularly in case of compromise Isolation Separate where secrets are used vs managed Encryption at different layers (or turtles) disks file system etcd

Pod manager to ensure a Pod is scheduled across a Cluster Node set StatefulSets Replicated Pods where each Pod gets an indexed hostname Jobs A Pod which runs until the process returns a successful termination