to join The Roadmap Moving “Out of Tree” : vSphere cloud provider + storage (CSI) How to Get Information on an ongoing basis The VMware SIG How to Contribute Working Groups, GitHub, and more 5 The coupling the kube-controller-manager to cloud- provider specific code. In order to free the Kubernetes project of this dependency, the cloud-controller-manager was introduced. CSI provider for vSphere • Container Docker and Cloud Foundry. Cluster API provider for vSphere • The Cluster API is a Kubernetes project to bring declarative, Kubernetes-style APIs to cluster creation, configuration, and management.

fense initiatives. The company is delivering technology solutions that give warfight- ers the information edge on the battlefield. Booz Allen is transforming military opera- tions in complex and remote Department of Defense, Booz Allen Hamilton delivers technology solutions that give warfighters the information edge on the battlefield. Capitalizing on open source solutions like K3s, Booz Allen’s SmartEdge heterogeneous solution. It was devel- oped in recognition of the diverse range of hardware in the field—a project might run in AWS, Azure or GCP (or a mixture), and so the SmartEdge infrastructure had to support

Version Control sync / watch clean history jobs Basic Concepts（partial） Repository Managed Project Pipeline / Stage / Task Dockerfile / Scripts Common Configuration ConfigMap/Secret Data Volume prepare code repository - volumes DevOps Operator Manage the Job environment variables image information - volumes Storage Service rbd / nfs / glisters pvc pvc pvc registry credential using secret examples • Future plan Our Future Plan • More task templates to be added, integrate more CI/CD and project management tools • Optimize UI generation methodology • Improve development experience, such

Chair of Kubernetes VMware SIG. GitHub: @cantbewong Software Engineer VMware First open source project was to enable GPU on Kubernetes with vSphere. Also actively contributing to kubelet, device manager in multiple failure zones. • When nodes are started, labels are automatically added with zone information, based on tags pre-applied by a vSphere administrator. • The scheduler uses these labels Limitations

ilovejava.io/petclinic-app ${project.version} ... github.com/GoogleContainerTools/jib me/talk/docker-tips-and-tricks github.com/GoogleContainerTools/jib Containerizing with Docker Project JAR docker Docker Daemon Container Image Dockerfile build send build push Registry github Some Java Developer Somewhere github.com/GoogleContainerTools/jib Containerizing, simplified Project Container image build on registry github.com/GoogleContainerTools/jib Steps: github.com/Goo

today Our Journey to The Land of Containers Project X By the end of 2016, we started our Kubernetes journey by developing a deployment tool called Project X. The goal is to create a tool that is easy Well-Designed Abstraction • As the consequence of the first issue, it was hard for us to extend Project X to keep up with new features released in Kubernetes or Nomad. Not Easily Extendable • Because bandwidth to work on all of them at once. Start with a Bang! Multiple Approaches Kubeadm Improve Project X Focus on Kubernetes only Design better abstractions Work with small number of teams at a time

Kubernetes Clusters Desired state of Application The difference between PKS and Kubernetes Open Source Project – Google/Pivotal/VMware 21 Container scheduling, scale, resiliency, and Day 2 Desired state of Image Push Image Sign Trusted Image Scan Image For CVEs kubectl apply RBAC Project Project Project Replic ation Developer Structured Data Metrics Alerts Events VMware vRealize Operations

and install the latest version of apiserver-builder • Create project path in your GOPATH • Go into your project path and init your project ‘your-domain’ would be like your private tenant name. • Then

管理理基于规则的镜像仓库 • 其他企业需要的优化功能 企业典型的多租户模型 租户 Tenant User User group Namespace Deployment Registry 
 project CI/CD workspace Pod … resources CPU quota MEM quota Storage quota Device (GPU) quota Application template ⽤用户场景 - OPENSTACK 租户集成 • 企业真实场景 - 集成旧系 统，并⾏行行跑业务。 • 资源对照表 • Tenant 与 Project • Namespace 与 Network(Neutron) • Service/Ingress 与 LBaaS(Neutron) • openstack/kuryr- kubernetes

cr-get Kubertnetes集群 ⽤用户管理理 ⽤用户：U1、U2 Think in Cloud . 北北京 基于RBAC实现账号管理理隔离 • 抽象Project对象给User使⽤用 • Project与每个集群的NS⼀一⼀一对应 • User在每个集群上都有对应模拟账号，⽤用于NS授权 NS ServiceAccount：SS Kubertnetes集群 NS: