PEERROUTES=yes IPV4_FAILURE_FATAL=no NAME=Internet UUID=b23b1970-690d-4af5-b014-4ac822dfd42c DEVICE=ens160 ONBOOT=yes IPADDR=202.114.193.101 GATEWAY=202.114.193.254 NETMASK=255.255.255.0 centos lvdisplay mkfs.xfs -n ftype=1 /dev/mapper/centos-docker mkdir -p /var/lib/docker mount /dev/mapper/centos-docker /var/lib/docker echo "/dev/mapper/centos-docker /var/lib/docker xfs defaults defaults 0 0" >> /etc/fstab xfs_growfs /dev/mapper/centos-docker df –Th A2. 创建 k8s-node1, k8s-node2, k8s-node3 内存：16GB, 系统盘：40GB，docker 数据盘：40GB，ceph 数据盘：200GB 【注】所有节点(k8s-master, k8s-node1, k8s-node2

President Booz Allen Hamilton KubeEdge and K3s seemed the most natural starting point, given the device-centric use case. After assessing other leading Kuber- netes distributions, it was clear that many view, the digital solutions business is seeing the impact of SmartEdge on the evolution of the device landscape. According to the team, Booz Allen’s clients can use a range of devices as the software info@rancherfederal.com Benefits • Highly portable, containerized infrastruc- ture, capable of running on any device in any environment. • Removal of the gap between data cap- ture and insight delivery. • 80% reduction

Solution • Same TEE-based KMS-plugin runtime • Deployment modes • N (>=3) SGX servers deployed w/ sgx-device- plugin daemonset [1] • kms-plugins deployed as deployment • Interfaces • https + connection reuse https endpoint • KMS plugin to support https [1] https://github.com/AliyunContainerService/sgx-device-plugin Secure Kubectl • Design goal • kubconfig transparent to kubectl users • kubeconfig credentials

project was to enable GPU on Kubernetes with vSphere. Also actively contributing to kubelet, device manager, device plugin area. GitHub: @figo Steve Wong Hui Luo Presenter Bios 3 Abstract ​Kubernetes

Registry 
 project CI/CD workspace Pod … resources CPU quota MEM quota Storage quota Device (GPU) quota …. quota Service Config group … k8s objects Application template ⽤用户场景

Kubernetes in GCP and on-prem ● Custom Resource Definitions support ● Service topology view ● Mobile device support ● Cost estimates ● CI/CD pipelines ● ...and more! Additional feature requests Get involved

process • orphaned containers • orphaned pod directories/volumes • orphaned cgroups • orphaned net device and so on, node recovery system can cleanup those dirty data or alert cluster admins to process

Kubernetes Pod 和 Node 状态通过云端 kubectl 查询， 从边缘端收集/报告数据。� ➔ 边缘节点在脱机时⾃自动恢复，并重新连接云端。� ➔ ⽀支持IoT设备通过Device twin 和 MQTT 协议与边缘节点 通信。� Release V2.0+ Function List：（TBD）� ➔ 使⽤用 KubeEdge 和 Istio 构建服务⽹网格。�

支持容器间共享GPU设备 ConvGPU 仅支持内存资源的共享且仅处理单个GPU 容器使用GPU的问题： • 需要特定的硬件设备 • 不支持容器共享 • 仅支持内存资源虚拟化 • 仅支持单个GPU卡 采用Device Plugin： • GPU资源的发现 • 为任务分配相应的硬件 资源及配置容器运行时环境 transparent. GaiaGPU不应修改Kubernetes代码或容器镜像以共享GPU。使用共享GPU执行应用程序应该就像