## Putting an Invisible Shield on Kubernetes Secrets Kailun Qin, Ant Group ## Agenda • K8s Secrets: Overview • TEE-based K8s Secrets Protection: Solution • Production Experience @ Ant Group • Demo Demo • Summary & Plan K8s Secrets: Overview ## Background: K8s Secrets ## • What they are? • Sensitive information • Passwords • OAuth tokens • ssh keys etc. • Stored in etcd • distributed Key-Value Background: K8s Secrets ## Local Encryption Provider  • Encryption Keys stored on API Server • Secrets encrypted prior

## Turtles all the way down: securely managing Kubernetes secrets with secrets Alexandr Tcherniakhovski, Google Cloud Maya Kaczorowski, Google Cloud Nov 14 2018  ## Auditing Verify the use of individual secrets  ## Encryption

24. June # Secrets Management at Scale with Vault & Rancher  Bastian Hofman Senior Field Engineer SUSE bastian.hofmann@suse managing many? How do we address: Networking, Security, Scheduling, Automation, etc? ## kubernetes ## Why Kubernetes ? Common compute platform across any infrastructure ## Common compute platform across p8_6.jpg)  ## Kubernetes architecture 

## Secrets of C++ Scripting Bindings: Bridging Compile Time and Run Time ## JASON TURNER ## Secrets of Scripting Bindings for C++ ## Jason Turner C++ Weekly • Weekly videos since March, 2016 • 112k+ enhancements and TODO items. https://gist.github.com/lefticus/5d94357725413dce5005b0b1b7f77836 ## Secrets of Scripting Bindings for C++ ## Jason Turner C++ Weekly • Weekly videos since March, 2016 • 112k+

support for ClickHouse deployments ○ Software (Kubernetes, cluster manager, tools & utilities) ☐ POCs/Training ## What is Kubernetes? ## “Kubernetes is the new Linux” Actually it’s an open-source ClickHouse on Kubernetes? Other applications are already there Easier to manage than deployment on hosts Bring up data warehouses quickly Portability ## I s it easy to run ClickHouse on Kubernetes? ## NOT REALLY ## Challenges running ClickHouse on Kubernetes? 1. Provisioning 2. Persistence 3. Networking 4. Transparency ALTINITY CLICKHOUSE OPERATOR for Kubernetes ## The ClickHouse operator turns complex

## Altinity ## ClickHouse on Kubernetes! Alexander Zaitsev, Altinity Limassol, May 7th 2019 ## Altinity Background ● Premier provider of software and services for ClickHouse • Incorporated in UK with Offerings: ☐ 24x7 support for ClickHouse deployments ○ Software (Kubernetes, cluster manager, tools & utilities) ☐ POCs/Training ## “Kubernetes is the new Linux” Actually it’s an open-source platform to: [Image](/uploads/documents/2/1/8/d/218d81a74f32d5934a3e909a7234c6df/p3_1.jpg) ## Why run ClickHouse on Kubernetes? 1. Other applications are already there 2. Portability 3. Bring up data warehouses quickly

# Kubernetes 入門 ### 1.1 Kubernetes 是什麼？ Kubernetes 是什麼？ 首先，它是一個全新的基於容器技術的分散式架構解決方案。這個方案雖然還很新，但它是 Google 十幾年來大規模應用容器技術的經驗累積和演進的一個重要成果。確切地說，Kubernetes 是 Google 嚴格保密十幾年的秘密武器——Borg 的開源專案版本。Borg 是 Google 的內部設計，所以外界一直無法瞭解它的相關資訊。直到 2015 年 4 月，傳聞許久的 Borg 論文伴隨著 Kubernetes 的發布宣傳被 Google 首度公開，大家才得以瞭解它的更多內幕。正因站在 Borg 這個前輩的肩勝上，吸取了 Borg 過去十年間的經驗與教訓，所以 Kubernetes 一經開源就一鳴驚人，並迅速席捲了容器技術領域。  圖 1.3 Kubernetes 部署架構圖 #### 1.3.1 建立 redis-master Pod 及服務 我們可以先定義 Service，然後再定義一個 RC 來建立和控制相對應的 Pod，或者先定義 RC 來建立 Pod，然後定義與其關聯的 Service，這兩種方式最終的結果都一樣，這裡我們採用後面這種方式。

## Автоматизация управления ClickHouse-кластерами в Kubernetes Владислав Клименко и Валерий Панов HighLoad Siberia 2019 Профессиональная конференция для разработчиков высоконагруженных систем THE ClickHouse в Kubernetes? • Все компоненты системы уже в к8s. • Максимальная унификация управления. • Нужно быстро строить хранилища данных. • Нужна максимальная переносимость. ## ClickHouse в Kubernetes – это ClickHouse + Kubernetes ## ClickHouse в Kubernetes? Что будем делать?  ALTINITY CLICKHOUSE OPERATOR for Kubernetes HighLoad

## Serverless Kubernetes: Container in Cloud Native Way 阿里云容器服务团队 张维 KUBECON CHINA 2018 ## 应用部署演化：Going native with cloud ## Serverless Computing | |Azure Container Instances|![ Cloud Serverless Kubernetes|阿里云|2018.5|Y| ### Serverless Kubernetes vs. 传统Kubernetes集群 经典Kubernetes容器服务 - 按照集群节点数量付费 Serverless Kubernetes容器服务 - 按照应用使用资源付费 - 无需管理服务器节点 经典Kubernetes集群 容器调度与编排 容器调度与编排

title: Kubernetes 管理 Docker 容器 date: 2020-12-18 tags: Kubernetes description: MacOS 平台 Kubernetes 管理 Docker 容器  图片来源于 图片来源于 Install Kubernetes: The Ultimate Guide ## Kubernetes 简介 Kubernetes 是容器集群管理系统，是一个开源的平台，可以实现容器集群的自动化部署、自动扩缩容、维护等功能。 快速部署应用 • 快速扩展应用 无缝对接新的应用功能 • 节省资源，优化硬件资源的使用 ## Minikube 简介 ## MacOS 系统安装依赖 ## CREATED SIZE # hello-node v1 353fc3541cea 2 minutes ago 912MB ## 创建 Deployment Kubernetes Pod 是一个或多个容器组合在一起得共享资源，Kubernetes Deployment 是检查 Pod 的健康状况。 kubectl create deployment hello-node --image=hello-node:v1