COPY target/dependencies /app/dependencies COPY target/classes /app/classes ENTRYPOINT java -cp /app/dependencies/*:/app/classes petclinic.WebServer $ mvn dependencies:copy-dependencies to target/dependencies/ com/GoogleContainerTools/jib Dockerfile “script” FROM base container image RUN commands to install dependencies COPY application files over Configure the ENTRYPOINT Run the container Produces some layers io/distroless/java COPY target/dependencies /app/dependencies COPY target/resources /app/resources COPY target/classes /app/classes ENTRYPOINT java -cp /app/dependencies/*:/app/resources:/app/classes

can be exposed as K8s services • In OpenWhisk, usually, we deploy those core components’ dependencies lib or tools as Deployment: – CouchDB – Redis – Zookeeper – Nginx StatefulSet/DaemonSet applications to communicate with each other on K8s platform • In OpenWhisk, we deploy all the dependencies as service, usually, they are deployed as ClusterIP service: – Controller – Invoker

Personal Identifiable Information (PII) • gotchas: leaks, GDPR (in Europe) { host container dependencies code config user data © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved AWS Security Hub AWS CloudHSM AWS Certificate Manager AWS CloudTrail host container dependencies code config userdata © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved

approach Motivation: microservices ● Increased operational cost ○ a lot of components ○ dynamic dependencies ○ fast deployment iteration ● Solution: automation Cluster management system ● Automation

aster/cmd/libs/go2idl Pattern 3: gRPC based Interface • Decouple Kubernetes from external dependencies • kubelet -> gRPC -> dockershim -> dockerd • go2idl: gogoprotobuf based protobuf gen CRI

Containers Containers virtualize the operating system limiting the the number of application dependencies that you need to install on the OS. Virtualization The hypervisor virtualizes the hardware

力的爆炸式增 长，如用户故事编写辅助、用户研究、电梯演讲和其他基于语言的任务。同时，我们希望开发人员能够负责任 地使用所有这些工具，并且始终掌控主导权，比如 hallucinated dependencies 就是其中一个需要注意的安全 和质量风险。 衡量生产力有多有效 对于非技术人员来说，软件开发有时似乎很神奇，这导致管理者需要努力衡量开发人员在完成其神秘任务时的 生产效率。我们的首席科学家