−CVE-2018-14634 Integer overflow vulnerability −CVE-2016-5195 Dirty COW vulnerability −CVE-2019-5736 Docker runc vulnerability −CVE-2019-14271 Docker CP vulnerability Pod Isolation Challenges • Noisy

audit Distribution Policy • Based on content trust • Based on vulnerability • Based on RBAC Main Features （ Cont. ） 7 Vulnerability Scanning • Kinds of scanning policies • Elaborate scanning report Architecture API Routing API Routing Core Service (API/Auth/GUI) Image Registry Trusted Content Vulnerability Scanning Job Service Admin Service Harbor components 3rd party components SQL Database

предметной области из коробки: • Click-stream: функции обработки URL и IP-адресов • Performance monitoring: квантили • Geospatial: geoDistance, pointInPolygon, H3, S2 ClickHouse — гибкая система 8 DDoS protection Application performance monitoring Logs & metrics Security events and logs. SIEM Analytics of corporate networks Telemetry Industrial monitoring Sensor data IoT Self-driving cars Agriculture

Operator = deployment + monitoring + operation ClickHouse Operator ClickHouseInstallation YAML file ClickHouse cluster resources Kubernetes API zz zz Monitoring Healthchecks План работ

Anyone dumping a lot of data ? © 2018 Percona. 37 Want Processed Logs ? Check out Percona Monitoring and Management © 2018 Percona. 38 Need Help ? Percona - MySQL, MariaDB, MongoDB, PostgreSQL ClickHouse Support, Consulting and Training © 2018 Percona. 39 Bonus: Using PMM for ClickHouse Monitoring • docker run -d -p 9116:9116 f1yegor/clickhouse-exporter -scrape_uri=http://myhost:8123/ • pmm-admin

• an automated Certificate Authority, and for more security I need… • a Container scanning and monitoring service, and to monitor it more I need… • a Log Aggregation and Search service, but to install