SberBank story: moving Istio from PoC to production Igor Gustomyasov, Sber Maksim Chudnovskii, IBM Sber position across key areas Best client experience Technological leadership In financial services

#IstioCon Apache APISIX from Gateway to Full Traffic Proxy with Istio Jintao Zhang API7.ai #IstioCon About Me ● Apache APISIX PMC ● Kubernetes Ingress NGINX maintainer ● Microsoft MVP ● zhangjintao@apache Donate it to the ASF for development as a sub-project of APISIX. ● Apache APISIX covers all traffic from east to west and north to south. #IstioCon Thank you! @zhangjintao9020 https://moelove.info

Anthony Roman, Lei Tang Google April 26, 2022 Service mesh security best practices: from implementation to verification Who are we? Anthony Roman Istio Github: anthony-roman Lei Tang Istio

who wishes to control VirtualBox programmatically. We chose the name “Main API” to differentiate it from other programming interfaces of VirtualBox that may be publicly accessible. With the Main API, you need is a programming language with a toolkit that can parse WSDL and generate client wrapper code from it. We describe this further in chapter 6, Using the raw web service with any language, page xxxvi service; extensive support even with other languages (C++, .NET, PHP, Perl and others) Con: Usable from languages where COM bridge available (most languages on Windows platform, Python and C++ on other

who wishes to control VirtualBox programmatically. We chose the name “Main API” to differentiate it from other programming interfaces of VirtualBox that may be publicly accessible. With the Main API, you need is a programming language with a toolkit that can parse WSDL and generate client wrapper code from it. We describe this further in chapter 2.2, Using the raw web service with any language, page 10 service; extensive support even with other languages (C++, .NET, PHP, Perl and others) Con: Usable from languages where COM bridge available (most languages on Windows platform, Python and C++ on other

who wishes to control VirtualBox programmatically. We chose the name “Main API” to differentiate it from other programming interfaces of VirtualBox that may be publicly accessible. With the Main API, you need is a programming language with a toolkit that can parse WSDL and generate client wrapper code from it. We describe this further in chapter 2.2, Using the raw web service with any language, page 36 service; extensive support even with other languages (C++, .NET, PHP, Perl and others) Con: Usable from languages where COM bridge available (most languages on Windows platform, Python and C++ on other

who wishes to control VirtualBox programmatically. We chose the name “Main API” to differentiate it from other programming interfaces of VirtualBox that may be publicly accessible. With the Main API, you need is a programming language with a toolkit that can parse WSDL and generate client wrapper code from it. We describe this further in chapter 6, Using the raw web service with any language, page xxxvi service; extensive support even with other languages (C++, .NET, PHP, Perl and others) Con: Usable from languages where COM bridge available (most languages on Windows platform, Python and C++ on other

who wishes to control VirtualBox programmatically. We chose the name “Main API” to differentiate it from other programming interfaces of VirtualBox that may be publicly accessible. With the Main API, you need is a programming language with a toolkit that can parse WSDL and generate client wrapper code from it. We describe this further in chapter 2.2, Using the raw web service with any language, page 10 service; extensive support even with other languages (C++, .NET, PHP, Perl and others) Con: Usable from languages where COM bridge available (most languages on Windows platform, Python and C++ on other

Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. Linux ® is VIRT-LAUNCHER POD 扩展 SELINUX 策略 6.2. KUBEVIRT-CONTROLLER 服务帐户的其他 OPENSHIFT CONTAINER PLATFORM 安全性上下文约束和 LINUX 功能 6.3. 其他资源 第 第 7 章 章 使用 使用 CLI 工具 工具 7.1. 先决条件 7.2. OPENSHIFT CONTAINER PLATFORM 客户端命令 7.3. Virtualization 通过 Kubernetes 自定义资源添加新对象至 OpenShift Container Platform 集群 中，以启用虚拟化任务。这些任务包括： 创建和管理 Linux 和 Windows 虚拟机 通过各种控制台和 CLI 工具连接至虚拟机 导入和克隆现有虚拟机 管理虚拟机上附加的网络接口控制器和存储磁盘 在节点间实时迁移虚拟机 增强版 web 控制台提供了一个图形化的门户界面

Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. Linux ® is 安全策略 安全策略 8.1. 关于工作负载安全性 8.2. KUBEVIRT-CONTROLLER 服务帐户的其他 OPENSHIFT CONTAINER PLATFORM 安全性上下文约束和 LINUX 功能 8.3. 授权 8.4. 其他资源 第 第 9 章 章 使用 使用 VIRTCTL 和 和 LIBGUESTFS CLI 工具 工具 9.1. 安装 VIRTCTL 9.2. VIRTCTL Virtualization 通过 Kubernetes 自定义资源添加新对象至 OpenShift Container Platform 集群 中，以启用虚拟化任务。这些任务包括： 创建和管理 Linux 和 Windows 虚拟机 (VM) 在集群中运行 pod 和虚拟机工作负载 通过各种控制台和 CLI 工具连接至虚拟机 导入和克隆现有虚拟机 管理虚拟机上附加的网络接口控制器和存储磁盘