RVER=https://:4443 制品安全分发-签名 [2] Harbor基于Helm社区支持的GPG实现对Helm V2 chart的签名支持 helm package --sign --key 'my signing key' --keyring path/to/keyring.secret mychart 制品安全分发-扫描 [1] 通过插件化的扫描器 K8s Resources K8s Resources K8s Resources K8s Resources K8s Resources Database Service Cache Service Storage Service 构建高可用(HA)仓库服务 [4] 多数据中心HA部署 与Harbor集成 Restful API • 完善的API • 遵循OpenAPI规范

Server User Space File system Data Router&Cache DB Server User Space File system Data Router&Cache DB Server User Space File system Data Router&Cache RDMA Read Only Read Only R/W Parallel-Raft

/volcano-development.yaml volcano-scheduler-configmap 示例 vcjob 示例 Volcano 内部机制 kube-apiserver Cache enqueue allocate preempt OpenSession CloseSession DRF plugin Priority plugin Gang plugin preempt are Actions, and they’re pluggable Plugins on demand reclaim Re-construct JobInfo in Cache by PodGroup Job JobSpec 用户案例：荷兰ING银行大数据平台云原生化改造 • Platform Entry-point • Project Management

⽇新⽉异的业务模式 Function Lifecycle 新⼀代开源函数计算平台 - 契机 Function Framework ⽤户函数示例 ▲ 函数注册机制 ▶ package userfunction import ( "fmt" "net/http" ) �� HelloWorld writes "Hello, World!" to t func HelloWorld(w functionframeworks.RegisterHTTPFunction(ctx, fnHTTP); err �� nil } ��� } package main import ( ��� userfunction "{{.Package}}" ) func main() { if err �� register(userfunction.{{.Target}}); err �� Data as equivalent/moc │ └── siwi_frontend # Browser End │ ├── README.md │ ├── package.json │ └── src │ ├── App.vue # Listen to user and pass Qs to S │ └──

Remember the spec? Namespacing isn't there. But it's so useful it's in the official reflect package. Use go vet to catch errors. http://golang.org/pkg/reflect/#StructTag.Get candidate := Candidate{} `json:"full_name"` Age int } Serialization Serializing to and from json Used by the encoding/json package to determine field names when marshaling and unmarshaling structs Other data formats Used for Command-line Configuration github.com/jessevdk/go-flags What is it? Alternative to Go's builtin flag package. Uses struct tags to specify everything. type DonationOpts struct { Amount int `short:"a"

a new perspective ● Helm helps automate Istio day-2 tasks ● Helm gitops #IstioCon HELM The package manager for Kubernetes It’s not just for installation anymore! #IstioCon What is Helm? ● Installer yaml Helm Chart Environmental overrides Continuous Integration Continuous Deployment helm package helm template kubectl apply S3 Bucket #IstioCon What we saw ● Looked at the good parts of Helm

范，这是基于10年云原生道路锤炼得到的自动化交付方案 构建镜像 多区域分发 配置 ApplicationConfiguration Component 微服务 数据库 MQ Cache Trait 灰度 监控告警 弹性扩缩容 高可用 负载均衡 客户环境 • 关注点分离：开发者关注应用本身，运维人员关注模块化运维 能力，让应用管理变得更轻松、应用交付变得更可控；

Virtualization Servers Storage NetWorking PaaS BpmPaas iPaas MFT Paas Baas Container Service RDS Service Cache|MQ Service Big Data Service aPaas 专业PaaS(2B) 技术Paas(2D) IaaS+ • Paas可以看做是从应用角度管理资源的平台 • Paas可以看做是应用运行态稳定性保障的平台

hello-chart: 渲染 Chart 并输出 • helm install hello hello-chart/ -n default: 安装 hello-chart • helm package hello-chart: 打包 Chart • 将 Chart 推送到应用仓库 _ by QingCloud KubeSphere 应用开发 • 应用生命周期: • 开发中: 开发中的

• Specification：CPU、Mermory、StorageType （Local/SSD/…）、StorageSize、Network、QPS、… • Provisioning：Package、Image、helm、OpenAPI、… 交付环境 • 公有云: 阿里云、华为云、腾讯云、AWS、… • 专用云：政务、税务、电信、… • 自建机房：VMWare、OpenStack、…ost