Success Story Industry and Location Technology | United States Product and Service K3s Advancing the Tactical Edge with K3s and SUSE RGS 2 www.susergs.com Advancing the Tactical Edge with K3s and innovation into strategic de- fense initiatives. The company is delivering technology solutions that give warfight- ers the information edge on the battlefield. Booz Allen is transforming military opera- tions integrator for the U.S. Department of Defense, Booz Allen Hamilton delivers technology solutions that give warfighters the information edge on the battlefield. Capitalizing on open source solutions like K3s

container isolation gVisor is special Machine-level virtualization Rule-based execution gVisor Technology landscape DEMO

reports continuously. Daily Report Tips on increasing SLO Case 1: Image Download Image lazyload technology provides the ability to run a container without downloading image. Case 2: Retry Pod should be

to join The Roadmap Moving “Out of Tree” : vSphere cloud provider + storage (CSI) How to Get Information on an ongoing basis The VMware SIG How to Contribute Working Groups, GitHub, and more 5 The vSphere Cloud Provider Why it exists Handles identification of nodes Labels nodes with zone information (optional) Used to handle persistent volume provisioning, now done by CSI A plug-in mechanism

Node softwares and configure files. • Machine: the instance of Machine CRD with node basic information, which represent a node desired in the Kubernetes. • NPD(Node Problem Detector): post Node

& Plan K8s Secrets: Overview Background: K8s Secrets Cluster • What they are? • Sensitive information • Passwords • OAuth tokens • ssh keys etc. • Stored in etcd • distributed Key-Value data store

prepare code repository - volumes DevOps Operator Manage the Job environment variables image information - volumes Storage Service rbd / nfs / glisters pvc pvc pvc registry credential using secret

Protecting secrets What’s a secret? Credentials, configurations, API keys, and other small bits of information needed by applications at build or run time Why protect secrets? ● Attractive target ○ Controls

in multiple failure zones. • When nodes are started, labels are automatically added with zone information, based on tags pre-applied by a vSphere administrator. • The scheduler uses these labels Limitations

in multiple failure zones. • When nodes are started, labels are automatically added with zone information, based on tags pre-applied by a vSphere administrator. • The scheduler uses these labels to place