Elastic Container Service Amazon Elastic Container Service for Kubernetes 主机 容器在哪里运行 Amazon EC2 AWS Fargate 服务注册发现 云端服务的黄页 AWS Cloud Map 服务网格 服务间通信的基础设施层 © 2019, Amazon Web Services, Inc. Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential 自由 - 选择需要的实例类型 标准的EC2计算实例类型 P2和P3 的GPU加速实例 I3裸金属实例 竞价实例 © 2019, Amazon Web Services, Inc. or its Affiliates. All rights Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential 云原生的CNI插件 Pod与EC2相同， 拥 有VPC地址段中地址 简单安全 GitHub开源 … { } Amazon VPC CNI Plugin 支持 © 2019, Amazon Web Services, Inc. or

Container Registry & Builder Stackdriver GCP Services Securing Your Connection to GCP ● GKE Connect Agent installs in your cluster ● Encrypted connection from the K8s cluster to GCP ● No public Cloud ML Big Query Jurisdictional / PII Europe Secure records US IT policy Interconnect Connect Peering + VPN Fully and partially-managed offerings extend to non-GCP clouds and on-prem Cluster

"openservice.name" . }} helm.sh/chart: {{ include "openservice.chart" . }} app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/managed-by: {{ .Release.Service }} data: config "openservice.name" . }} helm.sh/chart: {{ include "openservice.chart" . }} app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/managed-by: {{ .Release.Service }} spec: serviceName: kubernetes.io/instance: {{ .Release.Name }} template: metadata: labels: app.kubernetes.io/name: {{ include "openservice.name" . }} app.kubernetes.io/instance: {{ .Release

kubelet ECI: Elastic Container Instance • Run Containers without Managing Infrastructure • 容器成为云上的一等公民 • 安全隔离的容器运行环境 • 支持CPU 0.25c – 64c，GPU，按需创建按秒收费 • Spot Instance：极大降低计算成本 • Startup time: ~10s 7 layer • Knative serving on ASK：automatic scaling in knative • 集成ARMS, SLS Elastic Container Instance ECI ECI ECI ECI ECI ECI ECI ECI ECI ECI ECI ECI ECI ECI ECI ASK Cluster Serverless Kubernetes resource change ECI Two-way sync of resources K8S resources CRUD K8S Client Elastic Container Instance Pod Viking agent Container Container Pod Get Pod status Service/Ingress DNS Entry SLB Private

Get involved Try out Dashboard github.com/kubernetes/dashboard github.com/kubernetes/minikube Connect with us #sig-ui @danielromlein github.com/kubernetes/ community/tree/master/ sig-ui Thank you

Aggregation Architecture ETCD API Server Kubernetes Core Extend API Server Service Instance-1 Instance-2 Instance-3 Expose service & registry API ETCD/ Other Storage © 2017 Rancher Labs, Inc .

decision-mak- ing. Pisano continues: “By putting processing power directly into operational kit, we can connect teams and allow collective con- sciousness in the field. Not only can I check my heart rate, I can

affold official website code Development Process application k8s config build push deploy connect update code Development Process application k8s config skaffold github.com/GoogleContainerTools/jib

Inc. All Rights Reserved. 14 7. OIDC for GitHub Actions 试验 推荐实现 CI/CD 的零信任安全的技术之一是通过使用 OpenID Connect（OIDC）等联合身份机制对流水线进行 身份验证，以访问云服务。这一重要的技术仍未被充分利用在 GitHub Actions 中，因此推荐 OIDC for GitHub Actions。

difference Machine and Node state, manage Node softwares and configure files. • Machine: the instance of Machine CRD with node basic information, which represent a node desired in the Kubernetes