3 3 18s 请注意，ReplicaSet的名称的格式始终为 [DEPLOYMENT-NAME]-[POD-TEMPLATE-HASH-VALUE] 。创建Deployment时会⾃动⽣ 成该hash。 要查看为每个Pod⾃动⽣成的label，请运⾏ kubectl get pods --show-labels 。 可返回类似以下输出： NAME 18s app=nginx,pod-template-hash=203538 4211 nginx-deployment-2035384211-kzszj 1/1 Running 0 18s app=nginx,pod-template-hash=203538 4211 nginx-deployment-2035384211-qqcnn 211-qqcnn 1/1 Running 0 18s app=nginx,pod-template-hash=203538 4211 ReplicaSet会确保在任何时候都有三个 nginx Pod运⾏。 注意：您必须在Deployment中指定适当的选择器和Pod模板标签（在本例中为 app: nginx ）。不要与其他 Contr

IPVS��Service���� Iptables vs. IPVS ���IPVS�IP Virtual Server� • Linux�����L4 LB�LVS������� • ��netfilter, hash table • ��TCP, UDP�SCTP���IPV4�IPV6 • ���������� Ø rr, wrr, lc, wlc, sh, dh, lblc… • ������ Ø �prerouting, postrouting, forward, input, output�������� ���� • IPVS ü �����(hash vs. chain) ü ��������� - rr, wrr, lc, wlc, ip hash… ü ���� - IPVS service������������ ü ������� - nf_conntrack_ipv4, ip_vs

未加入集群的，执行加入命令时添加--cri-socket选项： # kubeadm join x.x.x.x:6443 --token xxxx \ --discovery-token-ca-cert-hash xxxxxxxx --cri-socket unix:///var/run/cri- dockerd.sock ★第3章、安装后续步骤 ④k8s认证文件.kube/config node结点执行# kubeadm join 10.99.1.51:6443 --token ka8k02.9f2uowba7j21qv0g \ --discovery-token-ca-cert-hash sha256:a2818d9ac38a6bbaef4220c8498065658f8ad2b04391601220be3e11006c0f9 7 出现： This node has joined #初始化集群 kubeadm join 10.99.1.54:6443 --token abcdef.0123456789abcdef \ --discovery-token-ca-cert-hash sha256:63b5f34842ec20db12f19f6f4ca535b03e498e95842b97b452a04f9dc94b1151 \ --control-plane --cer�ficate-key

scheduling algorithm • Iptables rules are difficult to debug IPVS mode • Services are organized in hash table • IPVS DNAT • conntrack/iptables SNAT • Pros • O(1) time complexity in control/data plane

k，成功！ • Conntrack Post routing 函数中，将请求2的lport插入conntrack，失败，丢包，导致延迟。 • 解决方法 • eBPF代码在分配lport和插入hash的外围，加了一个大循环，插入失败会重新分配lport。 06 未来的工作 未来的工作 • 适配更多的linux 发行版本 • Tencent linux , ubuntu, centos

重启机制 ① 区分异常原因 ② 本地重启/跨机重启 • 黑名单机制 • 集群核心数据的备份和恢复 ① Etcd ② 核心数据库 • 云盘机制保护应用数据 • 举例：1.4升级1.9版本 • Pod Hash发生变化 • Container名称发生变化，点分隔改为了下划线分隔 • 容器标签发生变化 pause容器的标签io.kubernetes.container.name=POD改为 io.kubernetes

cluster kubeadm join k8s-master:6443 --token xvxx9v.ugbbvrdncqv061hk \ --discovery-token-ca-cert-hash sha256:c6538b73d36284378aaf0bf312bcd851f30d621d97465bdd5bace528e23e5b2b Step3: k8s master 上查看节点

details • Demo What is serverless ? What is serverless ? Serverless＝ Backend as a Service Functions as a Service • Zero server ops – No provisioning, updating, and managing server infrastructure event Trigger Rule Action Result A serverless, open source cloud platform that executes functions in response to events at any scale. Apache OpenWhisk offers: • Apache Software Foundation (ASF)

Others Why We Run VM on Kubernetes? • Traditional Applications • No linux based Applications • Functions provided by host kernel are not satisfied • OpenStack is too complex • Unified infrastructure

on • Hardware configurations • Biz scenarios • Solutions evaluated • Go KMS Plugin + C Go SGX Functions • C++ KMS Plugin • Rust KMS Plugin ü Go KMS Plugin + TEE LibOS (Occlum [1]) [1] https://github