but you can add more specified as NodeSelector in the Pod spec Affinity Zones – label nodes with failure zone/regions Taints / Tolerations – mark nodes with arbitrary labels which could rs • secrets • services • loadbalancers 17 Kubernetes Default Resource Management Goals Efficiency Fairness Quotas Prioritization Isolation 18 Kubernetes built-in resource management Enforcement resource reservations (not just shares) • with governed sharing of unutilized capacity for improved efficiency • Allows maintenance with less service level disruption VM DRS Cluster VM VM VM VM VM VM VM

but you can add more specified as NodeSelector in the Pod spec Affinity Zones – label nodes with failure zone/regions Taints / Tolerations – mark nodes with arbitrary labels which could rs • secrets • services • loadbalancers 17 Kubernetes Default Resource Management Goals Efficiency Fairness Quotas Prioritization Isolation 18 Kubernetes built-in resource management Enforcement resource reservations (not just shares) • with governed sharing of unutilized capacity for improved efficiency • Allows maintenance with less service level disruption VM DRS Cluster VM VM VM VM VM VM VM

resources like CPU, memory, etc. are more effectively utilized in container world than in VMs. Efficiency • Automatic service discovery allows engineers to not maintain any configuration for multi-data

ECI ECI ECI ECI • Bulti-in Security • Light-Weight Virtualization • High Density • Scale and efficiency • Optimization Alinux2 for Sandbox Storage Network Computing Alibaba Cloud Sandbox Engine

scheduling to improve service stability Ø Quota management to optimize resource orchestration efficiency Ø High performance and comprehensive autoscaling What is TKEx Ø Based on TKE (Tencent Kubernetes

fair-share, job fair-share to share resource l Use task-topology to improve the spark workload efficiency. Summary p Queue priority p Queue reclaim p Queue plugin p Hierarchical queue p Dynamic resource

/年 237万/年 节约成本 COST 290人日/月 测试成本降低 运维效率提升6倍 建立CI/CD流程，将开 发、测试、运维有机串 联，SDK版本升级由30分 钟缩至5分钟 Efficiency 6 倍 提升 30 时间缩短 弹性伸缩应高峰 容器配置与数量根据业 务量秒级扩缩容，轻松 应对热点业务高峰浪涌 应业务量弹性扩缩容 占用资源减半 该项目实施后，节约一次性

03-使⽤Kubespray部署⽣产可⽤的Kubernetes集群（1.11.2） 04-K8s组件 05-Kubernetes API 06-理解K8s对象 07-Name 08-Namespace 09-Label和Selector 10-Annotation 11-K8s架构及基本概念 12-Master与Node的通信 13-Node 14-Pod 15-Replica Set 16-Deployment 简化，从⽽加快开发 ⼈员的速度。可接受的特别编排最初常常需要⼤规模的⾃动化。这就是为什么Kubernetes也被设计为提供构建组件和⼯ 具的⽣态系统，使其更容易部署，扩展和管理应⽤程序。 Label 允许⽤户随⼼所欲地组织他们的资源。Annotation 允许⽤户使⽤⾃定义信息来装饰资源以⽅便他们的⼯作流程， 并为管理⼯具提供检查点状态的简单⽅法。 此外， Kubernetes control 。 08-Namespace 25 Label和Selector（Label和选择器） Label是附加到对象（如Pod）的键值对。Label旨在⽤于指定对⽤户有意义的对象的识别属性，但不直接表示核⼼系统 的语义。Label可⽤于组织和选择对象的⼦集。Label可在创建时附加到对象，也可在创建后随时添加和修改。每个对象 都可定义⼀组Label。 对于给定的对象，Key必须唯⼀。 "labels"

3-configmap.yaml Step4: 给所有的 node 打 label kubectl label nodes k8s-node2 IngressProxy=true kubectl label nodes k8s-node3 IngressProxy=true kubectl label nodes k8s-node4 IngressProxy=true Step5: #设置容忍所有污点，防止节点被设置污点 - operator: "Exists" nodeSelector: #设置 node 筛选器，在特定 label 的节点上启动 IngressProxy: "true" kubectl apply -f 4-ds.yaml Step5: service vi 5-svc 721.html Step0: 打 label kubectl label nodes {k8s-node2,k8s-node3,k8s-node4} ceph-role=osd kubectl label nodes {k8s-node2,k8s-node3,k8s-node4} ceph-mon=enabled kubectl label nodes {k8s-node2,k8s-node3

Kubernetes Service�Endpoints Label Selector Label: app=backend IP: 172.17.10.1 Port: 80 Label: app=MyApp Container Container Label: app=backend IP: 172.17.10.2 Port: 80 Label: app=MyApp Container Container Container Replication Controller Label: app=MyApp Replicas: 2 Service <10.0.0.11>:<9376> Label: app=MyApp Endpoints: track backend pod changes <172.17.10.1>:<80> <172.17.10.2>:<80> ... Cluster DNS