k8s操作手册 2.3
disabled_plugins = ["cri"] #再重启containerd即可有 unix:///run/containerd/containerd.sock 接口 #信任私有镜像仓库ssl证书,添加或修改以下几行配置 [plugins."io.containerd.grpc.v1.cri".registry.configs] [plugins."io.containerd insecure_skip_verify = true #跳过安全认证 #如果下载镜像需要身份验证则配置下面3行,不需要身份验证则不用配置 [plugins."io.containerd.grpc.v1.cri".registry.configs."cof-lee.com:5443".auth] username = "userxx" /etc/containerd/config.toml 这个配置文件是给crictl和kubelet使用的,ctr不使用 这 个 配 置 文 件 , 因 为 ctr 不 使 用 CRI , 所 以 它 不 读 取 plugins."io.containerd.grpc.v1.cri" 配置。 # systemctl enable containerd # systemctl restart containerd ★0 码力 | 126 页 | 4.33 MB | 1 年前3用户界面State of the UI_ Leveraging Kubernetes Dashboard and Shaping its Future
Third-party plugins or integrations 集成第三方插件 2. Feature parity with kubectl 功能与kubectl保持一致 3. Multi-cluster management 多集群管理 4. Improved security 提高安全性 Top requested changes 1. Third-party plugins or integrations integrations 集成第三方插件 Which third-party plugins or integrations would you like to see supported in the Kubernetes Dashboard? https://github.com/kubernetes/dashboard/issues /3256#issuecomment-4371994030 码力 | 41 页 | 5.09 MB | 1 年前3秘钥管理秘钥Turtles all the way down - Securely managing Kubernetes Secrets
c2VjcmV0IGlzIHNlY3VyZQ== - aescbc: {} - secretbox: {} KMS Kubernetes secrets: 1.10 KMS plugins ● Encrypt secrets with a locally managed key, which is then encrypted with a centrally managed ● Using a KMS provider: https://kubernetes.io/docs/tasks/administer-cluster/kms-provider/ KMS plugins: ● Google Cloud KMS: https://github.com/GoogleCloudPlatform/k8s-cloudkms-plugin/ ● Microsoft Azure0 码力 | 52 页 | 2.84 MB | 1 年前3Jib Kubecon 2018 Talk
to target/dependencies/ Some more searching github.com/GoogleContainerTools/jib ...<plugins> ... github.com/GoogleContainerTools/jib What did we do? 1. Write first Dockerfilecom.spotify dockerfile-maven-plugin io/petclinic-app${project.version} 0 码力 | 90 页 | 2.84 MB | 1 年前3运维上海2017-机器学习模型训练的Kubernetes实践-袁晓沛
������! • �������� /mnt/b! • rbind��� /mnt/c! 1. ��A� RO �����RBD volume: /var/lib/kubelet/plugins/xxxx! 2. node-exporter � make-private ����������! 3. ��A������RBD volume����rbd umap����node-exporter�0 码力 | 39 页 | 5.82 MB | 1 年前3Putting an Invisible Shield on Kubernetes Secrets
runtime • Deployment modes • N (>=3) SGX servers deployed w/ sgx-device- plugin daemonset [1] • kms-plugins deployed as deployment • Interfaces • https + connection reuse • certificate: similar to apiserver0 码力 | 33 页 | 20.81 MB | 1 年前3Advancing the Tactical Edge with K3s and SUSE RGS
community for many years. The firm is a key contributor to Jenkins and Cray OS projects (and the plugins that enable these). It is also a core member of, and contributor to, the CNCF Foundation. Unsurprisingly0 码力 | 8 页 | 888.26 KB | 1 年前3
共 7 条
- 1