The unhealthy node Cluster Healthy Terminating Pod Number Daily Report Validation Housekeepi ng High Available Fast Recovery Display Board Alert Analysis Platform Weekly Report SLO： Indicate unhealthy nodes can be recovered automatically. Otherwise manual intervention is required. 4. Generate daily report to show what happens, and programmers can improve the system with the reports continuously

#查看当前结点注册的pod子网信息 ⑦部署calico网络插件（与flannel二选一） 官 方 指 导 ： h�ps://docs.�gera.io/calico/latest/ge�ng- started/kubernetes/quickstart # mkdir ~/calico # cd ~/calico # wget h�ps://raw.githubusercontent sed -i 's/192.168.0.0\/16/10.244.0.0\/16/g' custom-resources.yaml #创建资源 Install Calico by crea�ng the necessary custom resource # kubectl create -f custom-resources.yaml #如果需要更改镜像，只能部署 2行命令 kubeadm join xxx）不过这命令的token默认是2小时有效期，超时后可重新生成 token再去node结点上执行 master1结点# kubeadm token generate #重新生成token，下面这一串 字符 ka8k02.9f2uowba7j21qv0g master1 结 点 # kubeadm token create

much much more. github.com/kubernetes/dashboard/releases In-progress work ● Migrating from ng1 to ng2 (#3152) ● Migrating metrics from Heapster to Kubernetes Metrics API (#2986) ● Apps list page

所有镜像自动生成 • 一键master镜像部署 1. 注册中心 2. Mysql Redis ES 3. 全链路微服务 4. 自动数据同步 • 一期多环境平台架构图 CDN / LB / WAF / NG K8S集群 namespace1 namespace… namespaceN service1 service2 service3 … … … … … service1 service2

master/pkg/network- controller/network_controller.go Pattern 2: Gode Generator • client-gen: generate typed Kubernetes AP client for type • client.Pod.Get().Resource(…).Do() • conversion-gen: seamless fields • go-to-protobuf: generate protobuf messages for your types • informer-gen: generate informers that can be used to watch for updates to your types • openapi-gen: generate openapi compatible API

CA certificate and key [2] Generate CA certificate and key Please enter your numeric choice [2]: 2 Enter the path to the SSH private key to use (leave empty to generate): /Users/karangoel/.ssh/vsphere

Envelope encryption: benefits Easier to manage Envelope encryption: best practices Managing DEKs: ● Generate DEKs locally ● Use a strong cryptographic algorithm ● For easy access, store the DEK near the are encrypted at rest ● Don’t use the same DEK to encrypt data from two different apps/users ● Generate a new DEK every time you write the data. This means you don't need to rotate the DEKs Managing

Docker daemon build Docker context generate github.com/GoogleContainerTools/jib Project ilovejava.io/petclinic-app build Docker daemon build Docker context generate Extended Configuration JVM flags

Dockerd Node Kube-ApiServer List&Watch Events / NodeConditon Create Events observe observe Generate Events Pod Migrate npd Kernel Kubelet Dockerd self-agent self-agent Patch Node Condition

微服务的开发阶段 配置 对接 Debug • 配置驱动 • 配置补齐 • 配置工具 • Proto的管理 • 错误码管理 • 调试gRPC • 调试信息 • 错误定位 Generate • protoc -I {error proto file} --go-errors_out={output directory} • 实现我们自定义的error类型，方便断言。 • 根