Developer: Administrator: docker pull ... docker pull/push ... Project operation & management Settings 提供以项目为单位的逻辑隔离，存储共享 不同角色具有不同的访问权限，可以与其它用户系统集成 配额管理 制品的高效分发-复制 [1] 基于策略的内容复制机制：支 RVER=https://:4443 制品安全分发-签名 [2] Harbor基于Helm社区支持的GPG实现对Helm V2 chart的签名支持 helm package --sign --key 'my signing key' --keyring path/to/keyring.secret mychart 制品安全分发-扫描 [1] 通过插件化的扫描器

Cloud Native Application Management and Service Mesh Across Multicloud Guang Ya Liu (liugya@cn.ibm.com) Senior Software Engineer - IBM Cloud Private Kubernetes Member Istio Maintainer Why Multicloud Development & Programming Models Data Placement & Governance Operational & Application Management IBM Cloud Private 3rd Party Private Clouds 3rd Party Public Clouds IBM Public Cloud Service Security Application Management IBM Cloud Private IBM DevOps Hybrid Cloud Management Enterprise Infrastructure Application Development, Integration, Operations & Management Next Generation Middleware

Azure NPM Calico NetworkPolicy Identity Management Access to API server Integrate with Azure Active Directory Identity Management Identity Management Access to other Azure service • MSI • Pod

Continuous Deployment 持续部署 CI Continuous Integration 持续集成 CIEM Cloud Infrastructure Entitlements Management 云基础设施授权管理 CIS Center for Internet Security 互联网安全中心 CNAPP Cloud-Native Application Protection Central Processing Unit 中央处理器 CSA Cloud Security Alliance 云安全联盟 CSPM Cloud Security Platform Management 云安全平台管理 CSRF Cross Site Request Forgery 跨站请求伪造 CWPP Cloud Workload Protection Platform 云工作负载保护平台 网际互连协议 JWT JSON Web Token JSON Web 令牌 K8s Kubernetes 容器编排引擎 KSPM Kubernetes Security Posture Management Kubernetes 安全态势管理 OT Operational Technology 运营技术 OWASP Open Web Application Security Project

一个活档，指导集成。 形成市场，能力 互补 全生命周期API管理-2-Azure API Management 配置Http Header， 比如CORS等 配置入站协议转 换等 配置后端治理策略 等，比如限流规则 定义API或者导入 API 全生命周期API管理-3-Azure API Management • 把自己关在小黑 屋里面，自己就 可以自助的从API 使用角度定义、 驱动研发、发布

⽇新⽉异的业务模式 Function Lifecycle 新⼀代开源函数计算平台 - 契机 Function Framework ⽤户函数示例 ▲ 函数注册机制 ▶ package userfunction import ( "fmt" "net/http" ) �� HelloWorld writes "Hello, World!" to t func HelloWorld(w functionframeworks.RegisterHTTPFunction(ctx, fnHTTP); err �� nil } ��� } package main import ( ��� userfunction "{{.Package}}" ) func main() { if err �� register(userfunction.{{.Target}}); err �� Data as equivalent/moc │ └── siwi_frontend # Browser End │ ├── README.md │ ├── package.json │ └── src │ ├── App.vue # Listen to user and pass Qs to S │ └──

Remember the spec? Namespacing isn't there. But it's so useful it's in the official reflect package. Use go vet to catch errors. http://golang.org/pkg/reflect/#StructTag.Get candidate := Candidate{} `json:"full_name"` Age int } Serialization Serializing to and from json Used by the encoding/json package to determine field names when marshaling and unmarshaling structs Other data formats Used for Command-line Configuration github.com/jessevdk/go-flags What is it? Alternative to Go's builtin flag package. Uses struct tags to specify everything. type DonationOpts struct { Amount int `short:"a"

in Cache by PodGroup Job JobSpec 用户案例：荷兰ING银行大数据平台云原生化改造 • Platform Entry-point • Project Management Data Science in a box (Advanced analytics toolbox) • Data Discovery • Metadata engine • SQL+BI

a new perspective ● Helm helps automate Istio day-2 tasks ● Helm gitops #IstioCon HELM The package manager for Kubernetes It’s not just for installation anymore! #IstioCon What is Helm? ● Installer yaml Helm Chart Environmental overrides Continuous Integration Continuous Deployment helm package helm template kubectl apply S3 Bucket #IstioCon What we saw ● Looked at the good parts of Helm

hello-chart: 渲染 Chart 并输出 • helm install hello hello-chart/ -n default: 安装 hello-chart • helm package hello-chart: 打包 Chart • 将 Chart 推送到应用仓库 _ by QingCloud KubeSphere 应用开发 • 应用生命周期: • 开发中: 开发中的