implement your business logic of managed resource • Natural Kubernetes experience for operating your own resource with Kubernetes RBAC and authentication. • What it comes from • From ThirdPartyResource Inc. API Aggregation • What API aggregation provides • Extended with additional APIs • Build your own API server • Requirements of aggregation layer • Running Kubernetes 1.7 Cluster • Enable apiserver flags © 2017 Rancher Labs, Inc. Setup an Extension API Server • Use apiserver-builder to build your own API server • https://github.com/Kubernetes-incubator/apiserver-builder • Download and install the

developers: • The Golang programming patterns of Kubernetes (Controller, codegen etc) • Write your own Controller • gPRC based interface design in Kubernetes (CRI as example) • For Kubernetes users: getDesiredState() current := getCurrentState() makeChanges(desired, current) } • Write your own controller! Why DIY? Container Pod Deployment I need co-scheduling I have many Pod replicas Service configure file Secret I need confidential data HPA I need auto-scaling My Awesome Object I have my own special case Demo • I want to have a Asta Xie object into k8s API • I want a controller to handle

允许⽤户使⽤⾃定义信息来装饰资源以⽅便他们的⼯作流程， 并为管理⼯具提供检查点状态的简单⽅法。 此外， Kubernetes control plane 所⽤的API 与开发⼈员和⽤户可⽤的API相同。⽤户可以使⽤ their own API 编写⾃⼰ 的控制器，例如 scheduler ，这些API可由通⽤ command-line tool 定位。 这种 design 使得许多其他系统可以构建在Kubernetes上。 Credential的使⽤可禁⽤或覆盖。但是，如果你只是想安全访问apiserver，默认⽅式是推荐 的⼯作流程。 参阅 Service Account ⽂档查看其如何⼯作的更多信息。 Creating your own Secrets（创建⾃⼰的Secret） Creating a Secret Using kubectl create secret（使⽤kubectl create secret命令 创建Secret） name: https protocol: TCP 26-Service 118 port: 443 targetPort: 9377 Choosing your own IP address（选择⾃⼰的IP地址） Service 创建时，可指定⾃⼰的Cluster IP。可通过 spec.clusterIP 字段设置Cluster IP。 例如，如果您想替换⼀条现

linux.c Self hosting Self-hosted Kubernetes? What is self-hosted Kubernetes? ● Kubernetes manages own core components ● Core components deployed as native API objects Self-hosted k8s Architecture Why

Stackdriver Logmon GCP Services Google Kubernetes Engine Node Control Plane Node “Bring-your-own” Kubernetes Node Control Plane Node GKE On-Prem Node Control Plane Node Hybrid Use Cases Legacy

an approach to developing a single application as a suite of small services, each running in its own process and communicating with lightweight mechanisms, often an HTTP resource API. These services