执⾏： kubectl proxy 02-安装单机版Kubernetes 8 访问： http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/#!/overview? namespace=default 参考： https://kubernetes.i addons（插件） Addon是实现集群功能的Pod和Service。Pod可由Deployment、ReplicationController等进⾏管理。Namespace的插件 对象则是在 kube-system 这个namespace中被创建的。 Addon manager创建并维护addon的资源。详⻅这⾥： here 。 DNS 虽然其他Addon不是严格要求的，但所有Kubernetes集群都应该有 STATUS AGE default Active 1d kube-system Active 1d Kubernetes初始有两个Namespace： default ：对于没有其他Namespace的对象的默认Namespace kube-system ：由Kubernetes系统所创建的对象的Namespace 为请求设置Namespace

Containerize Applications • Micro Services Applications • Scalable Kubernetes Applications • Scalable Infrastructure for Applications Application Operating System Physical Infrastructure Platform Needed Application Operating System Physical Infrastructure Containers and VMs - A Practical Comparison Containers Containers virtualize the operating system limiting the the number of application applications on the same OS Allows you to run multiple OS on the same hardware Application Operating System Physical Infrastructure Containers VMware Hypervisor VMs Docker Containers User Cases 9

container orchestration and management project created by Google • Successor of Google Borg/Omega system • One of the most popular open source projects in this world • Written by, and heavily depends I have many Pod replicas Service I want to proxy my Pod replicas Ingress I want to expose my Services DaemonSet I run as daemon StatefulSet I am stateful Job I only run for once CronJob I run I have many Pod replicas Service I want to proxy my Pod replicas Ingress I want to expose my Services DaemonSet I run as daemon StatefulSet I am stateful Job I only run for once CronJob I run

• Technical Director of TKEx Platform , a Tencent internal Kubernetes platform for Tencent’s services • https://cloud.tencent.com/developer/column/2436 Introduction Challenges with Kubernetes Ø Tencent’s business by using kubernetes native approach. • Adapt to various internal systems like Route System, CMDB, CI, Security Platform, etc. • Declarative application lifecycle management. • Support big isolation of resources, and improve resource utilization using hybrid deployment of online and offline services. • Support Service Mesh. • Large-scale and high-performance autoscaling capabilities. • Multi-tenant

10 Why use Zones? Kubernetes will automatically spread the pods in replication controllers or services across zones - to reduce the impact of zone failures How it works: • Kubernetes supports running g. Oracle, MongoDB), present a workload which will attempt to detect and consume as much of the system’s memory as possible. Where does this lead? Node 0 32GB Node 1 21GB 2 CPU Nodes – NUMA host • Object counts • configmaps • persistentvolumeclaims • replicationcontrollers • secrets • services • loadbalancers 17 Kubernetes Default Resource Management Goals Efficiency Fairness Quotas

10 Why use Zones? Kubernetes will automatically spread the pods in replication controllers or services across zones - to reduce the impact of zone failures How it works: • Kubernetes supports running g. Oracle, MongoDB), present a workload which will attempt to detect and consume as much of the system’s memory as possible. Where does this lead? Node 0 32GB Node 1 21GB 2 CPU Nodes – NUMA host • Object counts • configmaps • persistentvolumeclaims • replicationcontrollers • secrets • services • loadbalancers 17 Kubernetes Default Resource Management Goals Efficiency Fairness Quotas

application Shared state in Redis and SQL database Scalable userfacing API in GoLang Queuing system Application technologies Best of breed-technologies Right tool for the right job Easy prototyping Dockerhub Pod Pod Pod -Build -Test -Push to dockerhub -Deploy Application infrastructure The services around Kubernetes Take control Easy to manage and scale Experience KOPS: Installation + Create

operators Component 从 CRD 到 扩展 Workload OpenFaaS CRD OpenFaaS 扩展Workload 可发现、可管理的运维能力：OAM Traits System 发现运维能力 查看能力用法 绑定能力给应用 提前暴露冲突 kubectl get traits crob-scaler –o yaml kubectl apply -f example Helm/CNAB • GitOps • Rollout • Workload Controller • K8s Operators • Kubernetes • FaaS • Cloud Services 理论基础：CNCF 倡导的“应用交付分层模型” OAM 项目近期计划 • OpenFaas、Terraform、Knative 集成 • K8s Operator 一键接入 • oamctl

:/ui 該 URL 將會被重導向到： https://:/api/v1/proxy/namespaces/kube-system/services/ kube-ui/#/dashboard/ 圖 4.6 顯示了 kube-ui 的主頁，展示所有 Node 的資訊，並且每秒更新顯示每個 Node 的 CPU 使用率、記憶體使用情況和檔案系統的使用情況。

辑上分组的不同项目、小组或用户组，便于不同的分组在共享使用整个集群的资源的同时还能被分别管理。 命名空间为K8s集群提供虚拟的隔离作用，K8s集群初始有两个名字空间，分别是默认名字空间default和系统名字空 间kube-system，除此以外，管理员可以创建新的名字空间满足需要。 28 www.h3c.com Confidential 秘密 28 28 K8s基本概念和术语介绍（资源限制） 资源限制： Kubern describe 4. 删除资源对象 kubectl delete –f pod.yaml （删除pod.yaml定义的名称删除Pod） kubectl delete pods，services –l name= （删除所有包含某个标签的pod和service） kubectl delete pods –all （删除所有的Pod） 注意：如果不先删除RC