Monitoring & troubleshooting ● Sharing with non-technical stakeholders ● Infrequent tasks ● Onboarding new K8s users / learning Kubectl Strengths: ● In-Terminal workflows ● Frequently-repeated tasks ● ● Scripting & automation ● Sharing workflows / reproducibility ● Customization Onboarding new K8s users https://unsplash.com/ Over 50% of survey takers said that Dashboard is very useful or extremely much much more. github.com/kubernetes/dashboard/releases In-progress work ● Migrating from ng1 to ng2 (#3152) ● Migrating metrics from Heapster to Kubernetes Metrics API (#2986) ● Apps list page

#查看当前结点注册的pod子网信息 ⑦部署calico网络插件（与flannel二选一） 官 方 指 导 ： h�ps://docs.�gera.io/calico/latest/ge�ng- started/kubernetes/quickstart # mkdir ~/calico # cd ~/calico # wget h�ps://raw.githubusercontent sed -i 's/192.168.0.0\/16/10.244.0.0\/16/g' custom-resources.yaml #创建资源 Install Calico by crea�ng the necessary custom resource # kubectl create -f custom-resources.yaml #如果需要更改镜像，只能部署 cd /etc/kubernetes/pki # openssl genrsa -out kube-user01.key 2048 #创建用户的私钥 # openssl req -new -key kube-user01.key -out kube-user01.csr \ -subj "/CN=kube-user01/O=kubeusers" #创建证书申请文件

The unhealthy node Cluster Healthy Terminating Pod Number Daily Report Validation Housekeepi ng High Available Fast Recovery Display Board Alert Analysis Platform Weekly Report SLO： Indicate

所有镜像自动生成 • 一键master镜像部署 1. 注册中心 2. Mysql Redis ES 3. 全链路微服务 4. 自动数据同步 • 一期多环境平台架构图 CDN / LB / WAF / NG K8S集群 namespace1 namespace… namespaceN service1 service2 service3 … … … … … service1 service2

Docker Containers User Cases 9 •Ready-to-go development •Self-service portal Developer Sandbox • New application development • 12-factor apps, PCF Cloud Native •Simplify app maintenance •Improve developer runs until the process returns a successful termination Deployments Manages the release rollout of new versions of Pods Singletons A single instance of a Pod which is not replicated or scaled 19 Developers user creates a new K8s Namespace 3. The K8s API Server notifies NCP of the change (addition) of Namespaces 4. NCP creates the network topology for the Namespace : a) Requests a new subnet from the

and discuss future work. We will also focus on how new contributors can get involved in the SIG. Kubernetes is in the process of moving to a new “out of tree” model, this effort spans all the touching to have independent feature and patch release cycles, learn how SIG VMware is working to meet this new model on VMware platforms. Agenda 4 What is the VMware SIG Purpose, Projects managed, How to join documentation are tracked and reported by the SIG as well as architectural planning and discussion related to new CRDs, plug-ins and KEPs that allow the vSphere platform to supplement and support Kubernetes How

space in VPC - Amazon EKS: Deep Learning Benchmarking Utility - New Amazon EKS Region: Paris, London, Mumbai - CNI v1.5.0 - New Regions: Hong Kong 即将发布 - Service linked role for Amazon EKS - parameter - IAM for Pods - New Amazon EKS Regions: Ningxia 研发中 - Amazon EKS on Fargate - Managed Nodes - Managed add-ons - DNS resolution of Amazon EKS private endpoints - New Amazon EKS Regions: Sao

• As the consequence of the first issue, it was hard for us to extend Project X to keep up with new features released in Kubernetes or Nomad. Not Easily Extendable • Because we hid complexity from Scalable • In the case of traffic spike, for instance, we can spin up new containers much more quickly than setting up new VMs. Faster MTTR Project X was used as deployment tool for Go-Jek International

) • Egress • Original way • Nf local-out -> ip_output nf post-route -> ip_finish_output • The new way • Call ip_finish_output directly Pre-route Conntrack Pre-route route IPVS entry Post-route Iptables nic nic Y N • How IPVS talks with eBPF program? • eBPF map id is passed to IPVS module • Ip_vs_new_conn() inserts eBPF map • Key: (protocol, cip:cport , rsip:rsport) • Value: (protocol, lip:lport https://careers.tencent.com/home.html Bugs solved – 1/2 • IPVS conn_reuse_mode=1 low cps Ip_vs_conn nf_conn New ip_vs_conn Bugs solved – 2/2 • DNS resolution delays for 5s Iptables SNAT Conntrack insert Udp

total total 1076 The next release Kops 1.5 wanted new features Kops 1.5 wanted new features brittle dev process Kops 1.5 wanted new features brittle dev process falling behind Kops 1.5