"-cp", "/usr/local/petclinic/target/petclinic-1.0.jar", "petclinic.WebServer"] So I read some more tutorials github.com/GoogleContainerTools/jib FROM openjdk:8 COPY target/petclinic-*.jar /app.jar ENTRYPOINT FROM openjdk:8 COPY target/petclinic-*.jar /app.jar ENTRYPOINT java -jar /app.jar Some more searching github.com/GoogleContainerTools/jib FROM openjdk:8-jre-alpine COPY target/petclinic-*.jar /app ib ** !target/petclinic-*.jar .dockerignore Some more tutorials later github.com/GoogleContainerTools/jib FROM openjdk:8-jre-alpine COPY target/dependencies /app/dependencies COPY target/classes /app/classes

near time • Make CPU the bottleneck • 1 CPU handles 500,000 pps • Make LB the bottleneck • The target server and client server shall be powerful enough Performance measurement Test topology Test result

Degrade Data Analysis Failures/Machine Failures/Reason Report Lifecycle of Pod Failure Reason Target Kubelet Apiserver Scheduler Operator Runtime Daemonset Alert Gray Scale Bug Fix Success Rate

同一个cluster，在不同的时间段，性能可能不同 • cpu 超卖 • 使用同一个cluster，在相近的时间段，比较两种mode • 使得cpu成为瓶颈点 • cpu和网卡pps的比例关系 < 1/50w pps • Target server pool /client pool 的配置要足够强大。 测试拓扑 测试数据 • 处理每一个req耗费的指令数 目降低了38% 05 解决的BUG IPVS conn_reuse_mode

bits of information needed by applications at build or run time Why protect secrets? ● Attractive target ○ Controls access or use of sensitive resources ● Common attack vector ○ Checked into Github ○

contrast to earlier methods in which data was passed via an operations center, by which time the target may have moved or the environment altered. Outcomes have been transformed as a result. What’s

kind: Ingress metadata: name: test-ingress annotations: ingress.kubernetes.io/rewrite-target: / spec: rules: - http: paths: - path: /testpath backend: extensions/v1beta1 kind: Ingress metadata: name: test annotations: ingress.kubernetes.io/rewrite-target: / spec: rules: - host: foo.bar.com http: paths: - path: /foo