Security & Compliance 访问控制、审计、安全链接、加密存储等等。 Patching & Upgrades 小版本升级、大版本升级、安全漏洞修复等等。 Data Migrations 迁移、同步、清洗、跨地域、灾备、多活等等。 DB Operator Day-2 Operations Operator 基础模型 第二部分 K8s 架构 Cache Informer

③创建Secret secret资源是区分命名空间的 ★命令行方式创建secret 创建账号密码验证secret # kubectl create secret generic database-auth --from-literal=username=root --from- literal=password=passwd123 创建存储于某文件的认证secret # kubectl kubernetes.io/tls 2 7s database-auth Opaque 2 10m myssh-key-secret Opaque 2 3m43s # kubectl get secret database-auth -oyaml #secret的文本信息均以base64编码 "2023-12-05T21:19:48Z" name: database-auth namespace: default resourceVersion: "1167" uid: 38790a7e-30ee-4b75-8132-18bca66ca512 type: Opaque ★基于清单文件创建secret # cat > database-auth2.yaml <

0 码力 | 126 页 | 4.33 MB | 1 年前

3

Protocal = tcp Host = redis-cluster-headless Port = 6379 Password = redis123 Database = 0 MaxIdle = 10 MaxActive = 300 IdleTimeout = 180 DialConnectTimeout = t:27017 Direct = true Timeout = 3 PoolLimit = 10 Mode = monotonic Database = admin User = Password = [InfluxDB] Address = http://influxdb2-headless:9999 t:27017 Direct = true Timeout = 3 PoolLimit = 10 Mode = monotonic Database = admin User = Password = [OpenService] Address =

path value: "/" applicationScopes: - my-vpc-network - componentName: backend instanceName: database applicationScopes: - my-vpc-network vpc-3a1p8n container- 8q93re slb-7yt83n rds- 1uy31m OAM 运维 研发 监控报警 灰度发布 日志 扩缩容 负载均衡 web backend Trait Promethus Operator Elasticsearch Operator database Component OpenKruise RDS operator …… • OAM • Helm/CNAB • GitOps • Rollout • Workload Controller

architecture Application architecture PHP-based Admin application Shared state in Redis and SQL database Scalable userfacing API in GoLang Queuing system Application technologies Best of breed-technologies

2010 2015- Now 2010- Now 2012- Now Bare metals Way to Kubernetes Search Grid Hadoop PoP Database Frontend VM Kubernetes plays magic api etcd kind: metadata: spec: control loop control loop

Memory Architecture 12 Why should you care about NUMA? Memory intensive workloads Nearly all database servers (e.g. Oracle, MongoDB), present a workload which will attempt to detect and consume as

Memory Architecture 12 Why should you care about NUMA? Memory intensive workloads Nearly all database servers (e.g. Oracle, MongoDB), present a workload which will attempt to detect and consume as

namespace: prod spec: type: ExternalName externalName: my.database.example.com 当查找主机 my-service.prod.svc.CLUSTER 时，集群DNS服务将会返回⼀条值为 my.database.example.com 的 CNAME 记 录。访问这样的Service与访问其他Service的⼯作⽅式相