Operand or configures off- cluster resources • Operator waits for managed resources to reach a healthy state • Operator conveys readiness of application or managed resources to the user leveraging the status status block of the Custom Resource Configuration of the workload • Operator provides configuration via the spec section of the Custom Resource • Operator reconciles configuration and updates to it it with the status of the managed resources Upgrade of the managed workload • Operand can be upgraded in the process of upgrading the Operator, or • Operand can be upgraded as part of changing the CR

githubusercontent.com/projectcalico/calico/v3.26.1/manifests/custom- resources.yaml #创建控制器 Install the Tigera Calico operator and custom resource defini�ons # kubectl create -f �gera-operator.yaml 's/192.168.0.0\/16/10.244.0.0\/16/g' custom-resources.yaml #创建资源 Install Calico by crea�ng the necessary custom resource # kubectl create -f custom-resources.yaml #如果需要更改镜像，只能部署 后，只能 #镜像获取方式，优先本地，后网络 拉取 #command: [ "/bin/sh", "-ce", "ping -c 3 1.1.1.1" ] #容器入口程序及参数 resources: requests: #资源需求，定义了容器所需要的最小资源量，便于调度，不 能小于jvm中的Xms memory: "256Mi"

20-管理容器的计算资源 21-Kubernetes资源分配 22-将Pod分配到Node 23-容忍与污点 24-Secret 25-Pod优先级和抢占 26-Service 27-Ingress Resources 28-动态⽔平扩容 29-实战：使⽤K8s编排Wordpress博客 2 简介 Kubernetes开源书。不啰嗦了，JUST READ IT. GitHub地址：https://github Horizontal Pod Autoscaling Naming and discovering Balancing loads Rolling updates Monitoring resources Accessing and ingesting logs Debugging applications Providing authentication and authorization Installing Kubernetes On-premises/Cloud Providers with Kubespray:https://kubernetes.io/docs/setup/custom- cloud/kubespray/ 03-使⽤Kubespray部署⽣产可⽤的Kubernetes集群（1.11.2） 14 K8s组件 本⽂概述了Kubernetes集群中所需的各种组件。

Loodse Peng Xiao, Alauda Why a UI? 60% of survey takers use a UI to monitor or manage their resources in Kubernetes https://unsplash.com/ https://github.com/kubernetes/dashboard/issues /3256#issuecomment-437199403 ssues /3256#issuecomment-437199403 “At the start it was great to be able to visually see the resources and understand how they are grouped. This helped someone like me with a hands-on but visual learning Kubernetes in AWS, Azure, and on-prem Dashboard as a K8s learning tool Create, read, update, delete resources. Recent and upcoming features https://unsplash.com/ Features since 2016 KubeCon update ● Exec

Build DevOps Solution Pod Job CronJob • k8s itself is NOT a PaaS or DevOps platform，but … • k8s resources that can be used to build DevOps solution Volumes ConfigMap Secret ResourceQuota / LimitRanges Env - Environment variable [] VolumeMounts - Files to be shared or persisted [] Resources - Resource requirement ActiveDeadlineSeconds Timeout of build task Lifecycle ElasticSearch ElasticSearch Prometheus Push Gateway push metric data • Build task can also expose custom metric data • Ephemeral build task can push metric to gateway if needed • Cluster autoscaler

International Expansion Projects • High availability DBs lead to fewer outage Higher Uptime • System resources like CPU, memory, etc. are more effectively utilized in container world than in VMs. Efficiency used as deployment tool for Go-Jek International Expansion Projects Whiterabbit Kubernetes custom resources to support sharding with Kubernetes namespaces. Barito Log Open source on-demand logging

scalable • Training controllers – simplify and manage the deployment of training jobs • TFJob – custom resource to handle drivers and config • Tensorflow, PyTorch, MXNet, Chainer, and more • JupyterHub • Comparing Production accuracy vs expected accuracy when possible • Rolling-updates • … Resources • Source code for this talk: https://github.com/ritazh/kubecon-ml • Kubeflow labs for AKS:

如何实现 • K8s - 单『控制集群』， 多『⽤用户集群』 • 镜像仓库 - 单『默认仓 库』，多仓库集成 管理理集群和节点 • 技术概览 • cloud provider • custom resource • ansible 管理理镜像仓库 • Cargo （内部项⽬目）- ⽣生产级镜像仓库解决⽅方案，基于 • ⼀一键⾼高可⽤用部署和维护 • 为多租户和复杂权限集成⽽而增强 Tenant User User group Namespace Deployment Registry 
 project CI/CD workspace Pod … resources CPU quota MEM quota Storage quota Device (GPU) quota …. quota Service Config group

rules: - apiGroups: [""] resources: ["services","endpoints","secrets"] verbs: ["get","list","watch"] - apiGroups: ["extensions"] resources: ["ingresses"] verbs: ["get","list" "watch"] - apiGroups: ["extensions"] resources: ["ingresses/status"] verbs: ["update"] - apiGroups: ["traefik.containo.us"] resources: ["middlewares"] verbs: ["get","list" ["traefik.containo.us"] resources: ["ingressroutes","traefikservices"] verbs: ["get","list","watch"] - apiGroups: ["traefik.containo.us"] resources: ["ingressroutetcps","ingressrouteudps"]

13 labels: 14 app: wordpress 15 spec: 16 accessModes: 17 - ReadWriteOnce 18 resources: 19 requests: 20 storage: 20Gi 21 storageClassName: wordpress-sc-001 22 --- 23 28 labels: 29 app: wordpress 30 spec: 31 accessModes: 32 - ReadWriteOnce 33 resources: 34 requests: 35 storage: 20Gi 36 storageClassName: wordpress-sc-001 创建⼀个Secret变量存放MySQL密码 labels: 21 app: wordpress 22 spec: 23 accessModes: 75 24 - ReadWriteOnce 25 resources: 26 requests: 27 storage: 20Gi 28 --- 29 apiVersion: apps/v1 # for versions before