Memory Architecture 12 Why should you care about NUMA? Memory intensive workloads Nearly all database servers (e.g. Oracle, MongoDB), present a workload which will attempt to detect and consume as just shares) • with governed sharing of unutilized capacity for improved efficiency • Allows maintenance with less service level disruption VM DRS Cluster VM VM VM VM VM VM VM VM K8S Prod VM K8S

Memory Architecture 12 Why should you care about NUMA? Memory intensive workloads Nearly all database servers (e.g. Oracle, MongoDB), present a workload which will attempt to detect and consume as just shares) • with governed sharing of unutilized capacity for improved efficiency • Allows maintenance with less service level disruption VM DRS Cluster VM VM VM VM VM VM VM VM K8S Prod VM K8S

resource, such as Deployment, Pod, etc. Work Together Achievement • Anyone can operate and maintenance Kubernetes Cluster • Set up & tear down Kubernetes Cluster in two Minutes • Automated rollouts

cloud, within/outside alibaba. 申明式 API Matching Ali's design philosophy of the operation and maintenance system. 模块化、可扩展的架构设计 Sufficient expansion capability to meet the needs of diverse application

Developer Sandbox • New application development • 12-factor apps, PCF Cloud Native •Simplify app maintenance •Improve developer workflow Application Repackaging The need for containers and containers orchestrators

https://docs.pivotal.io/pivotalcf/2-7/security/pcf-infrastructure/stemcell-hardening.html a. Maintenance, Updates, and Patching b. File System Hardening c. Boot Security d. Process Security e. Minimization

③创建Secret secret资源是区分命名空间的 ★命令行方式创建secret 创建账号密码验证secret # kubectl create secret generic database-auth --from-literal=username=root --from- literal=password=passwd123 创建存储于某文件的认证secret # kubectl kubernetes.io/tls 2 7s database-auth Opaque 2 10m myssh-key-secret Opaque 2 3m43s # kubectl get secret database-auth -oyaml #secret的文本信息均以base64编码 "2023-12-05T21:19:48Z" name: database-auth namespace: default resourceVersion: "1167" uid: 38790a7e-30ee-4b75-8132-18bca66ca512 type: Opaque ★基于清单文件创建secret # cat > database-auth2.yaml <

0 码力 | 126 页 | 4.33 MB | 1 年前

3

Protocal = tcp Host = redis-cluster-headless Port = 6379 Password = redis123 Database = 0 MaxIdle = 10 MaxActive = 300 IdleTimeout = 180 DialConnectTimeout = t:27017 Direct = true Timeout = 3 PoolLimit = 10 Mode = monotonic Database = admin User = Password = [InfluxDB] Address = http://influxdb2-headless:9999 t:27017 Direct = true Timeout = 3 PoolLimit = 10 Mode = monotonic Database = admin User = Password = [OpenService] Address =

path value: "/" applicationScopes: - my-vpc-network - componentName: backend instanceName: database applicationScopes: - my-vpc-network vpc-3a1p8n container- 8q93re slb-7yt83n rds- 1uy31m OAM 运维 研发 监控报警 灰度发布 日志 扩缩容 负载均衡 web backend Trait Promethus Operator Elasticsearch Operator database Component OpenKruise RDS operator …… • OAM • Helm/CNAB • GitOps • Rollout • Workload Controller

architecture Application architecture PHP-based Admin application Shared state in Redis and SQL database Scalable userfacing API in GoLang Queuing system Application technologies Best of breed-technologies