• Logging, monitoring, autoscaling, high availability • Extensibility / Integration • CI/CD examples • Future plan Our DevOps Expectations • Build a platform and easy to integrate with other DevOps/third-party • Logging, monitoring, autoscaling, high availability • Extensibility/Integration • CI/CD examples • Future plan Overall Architecture Kubernetes Cluster Kubernetes Cluster Node Node Node Node controller, etc… CI/CD Examples - Build Docker Image dockerfile using ConfigMap Job - pod template - volumes user build task • build the docker images init task • prepare code repository - volumes

{error proto file} --go-errors_out={output directory} • 实现我们自定义的error类型，方便断言。 • 根据注解的code信息，在错误码中生成对应的grpc status code • 确保错误码唯一，后续在API层响应用户数据确保唯一错误码，例如: 下单失败(1008) • errors里设置with message，携带更多的错误信息 微服务的开发阶段 • 目前结合配置中心拓扑图，自动生成jekins编排，ing 微服务的测试阶段 测试类型 工具生成测试用例 简单高效做单元测试 protoc --proto_path=${ROOT}/examples/helloworld --go-test_out=pkg=main,paths=source_relative:. helloworld.proto • 业务代码中不要有框架、组件代码，减少单侧用例

https://github.com/rook/rook/blob/master/cluster/examples/kubernetes/ceph/common.yaml download from https://github.com/rook/rook/blob/master/cluster/examples/kubernetes/ceph/operator.yaml download from from https://github.com/rook/rook/blob/master/cluster/examples/kubernetes/ceph/cluster.yaml kubectl apply -f common.yaml kubectl apply -f operator.yaml kubectl -n rook-ceph get all vi cluster //查看磁盘 Step2: 安装 ceph toolbox download from https://github.com/rook/rook/edit/master/cluster/examples/kubernetes/ceph/toolbox.yaml kubectl apply -f toolbox.yaml Step3: 配置 ceph dashboard 的 ingress

Altinity ClickHouse operator – использование Что надо, чтобы начать: 1. Kubernetes - kubectl 2. Examples - clickhouse-operator docs ClickHouse operator – начало • Хочу во всем разобраться Get files NAMESPACE $ kubectl create namespace demo namespace/demo created 2. EXAMPLE $ kubectl apply -f docs/examples/demo-01.yaml -n demo clickhouseinstallation.clickhouse.altinity.com/demo-01 created 3. RESULT $

yq.aliyun.com/articles/591115 • 示例参考：https://github.com/AliyunContainerService/serverless-k8s-examples Thank you!

b Compiler + Containerizer github.com/GoogleContainerTools/jib Code Executable Compile github.com/GoogleContainerTools/jib Code Executable Compile Java Container Containerize github.com/G facilitates continuous development for Kubernetes applications. You can iterate on your application source code locally then deploy to local or remote Kubernetes clusters. Skaffold handles the workflow for building github.com/GoogleContainerTools/skaffold official website code Development Process application k8s config build push deploy connect update code Development Process application k8s config skaffold

unnecessary privileged users, no scans, trust • code analysis • source available? • gotchas: big surface, many languages { } } • sanitizing user input • static code analysis • gotchas: log-leaking} • sensitive Identifiable Information (PII) • gotchas: leaks, GDPR (in Europe) { host container dependencies code config user data © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Security Hub AWS CloudHSM AWS Certificate Manager AWS CloudTrail host container dependencies code config userdata © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon

Decision Stages: 1. Filter out impossible worker nodes a. Filters are called predicates - extensible in code with a default list 7 Kubenetes scheduling What does the scheduler do: As pod are created, they Decision Stages: 1. Filter out impossible worker nodes a. Filters are called predicates - extensible in code with a default list 2. Rank remaining nodes a. ranking is driven by priorities - this is extensible Decision Stages: 1. Filter out impossible worker nodes a. Filters are called predicates - extensible in code with a default list 2. Rank remaining nodes a. ranking is driven by priorities - this is extensible

Stages: 1. Filter out impossible worker nodes a. Filters are called predicates - extensible in code with a default list 7 Kubenetes scheduling What does the scheduler do: As pod are created, they Stages: 1. Filter out impossible worker nodes a. Filters are called predicates - extensible in code with a default list 2. Rank remaining nodes a. ranking is driven by priorities - this is extensible Stages: 1. Filter out impossible worker nodes a. Filters are called predicates - extensible in code with a default list 2. Rank remaining nodes a. ranking is driven by priorities - this is extensible

resilient systems at scale” (Jez Humble) • Applying Agile practices to operations • Infrastructure as code • Ops teams embracing source control (git) • Automated testing • Repeatable/consistent • CI/CD • Production accuracy vs expected accuracy when possible • Rolling-updates • … Resources • Source code for this talk: https://github.com/ritazh/kubecon-ml • Kubeflow labs for AKS: https://github.