. . . . . . . . . . . . . . . . . . . . . . . . . . . 第 第 8 章 章 安全策略 安全策略 8.1. 关于工作负载安全性 8.2. KUBEVIRT-CONTROLLER 服务帐户的其他 OPENSHIFT CONTAINER PLATFORM 安全性上下文约束和 LINUX 功能 8.3. 授权 8.4. 其他资源 第 第 9 章 CR。然后，每个 Operator 会为 OpenShift Virtualization control plane 创建资源，如守护进程集、配置映射和其他组件。 例如，当 hco-operator 创建 KubeVirt CR 时，virt-operator 会协调它并创建其他资源，如 virt- controller、virt-handler 和 virt-api。 OLM 部署 hostpath-pro 工具二进制文件，以便直接从集群下载它 们。 KubeVirt/kubevirt-kubevirt-hyperconverged 包含 OpenShift Virtualization 需要的所有 operator、 CR 和对象。 SSP/ssp-kubevirt-hyperconverged SSP CR。这由 HCO 自动创建。 CDI/cdi-kubevirt-hyperconverged CDI

OPERATOR 更新 5.4. 监控更新状态 5.5. 其他资源 第 第 6 章 章 为 为 KUBEVIRT-CONTROLLER 和 和 VIRT-LAUNCHER 授予 授予额 额外的安全 外的安全权 权限 限 6.1. 为 VIRT-LAUNCHER POD 扩展 SELINUX 策略 6.2. KUBEVIRT-CONTROLLER 服务帐户的其他 OPENSHIFT CONTAINER PLATFORM "external-provisioner-": must be no more than 63 characters 1 $ oc patch csidriver kubevirt.io.hostpath-provisioner --type merge --patch '{"spec": {"storageCapacity": false}}' 第 第 3 章 章 hyperconverged kubevirt-hyperconverged kubevirt.kubevirt.io/jsonpatch='[ { "op": "add", "path": "/spec/configuration/cpuModel", "value": "" 1 } ]' apiVersion: cdi.kubevirt.io/v1beta1

OpenStack is too complex • Unified infrastructure • Better isolation VM related Projects Virtlet KubeVirt RancherVM Kata Container Focus : deploy REAL vm (traditional vm app) Focus : container security VM actions limited by Pod KubeVirt Building a virtualization API for Kubernetes https://github.com/kubevirt KubeVirt Architecture KubeVirt Application Layout KubeVirt Components • virt-controller virt-controller • virt-handler • libvirtd KubeVirt Managed Pods • VMI Foo • VMI Bar KubeVirt Pros & Cons Pros • Kubernetes cluster addon • freedom - not limited by Pod definition Cons • VMs need to be managed

the edge. In December 2021, SUSE announced Harvester, an HCI virtualization platform based on Kubevirt and Longhorn. It offers a flexible and affordable way to put VM workloads in your edge locations built for bare metal servers using enterprise-grade open source technologies including Kubernetes, Kubevirt and Longhorn. Harvester 1.0 GA launched in December 2021. All of Rancher’s solutions remain

Containerd Kusar StratoVirt Kata … 云原生业务调度 Rubik 在离线混布 Kmesh 高性能服务网格 Volcano Rancher RKE2/K3s KubeVirt … KubeSphere … Applications openEuler 社区项目 加入 openEuler 社区 立即体验 如何获取 openEuler 立即体验 1

engineering/simple-kubernetes-webhook/ ● How to develop a Robust Operator for Day-2 (Lesson Learned on KubeVirt/HCO) - https://www.youtube.com/watch?v=vbDX4gOQb5EThank you! https://www.linkedin.com/in/patryk-wasielewski/

Engine 兼容并支持 Red Hat Quay。 2.1.10. OpenShift Virtualization OpenShift Kubernetes Engine 包括对来自 kubevirt.io 开源项目提供的红帽产品产品支持。 2.1.11. 高级集群管理 第 第 2 章 章 关于 关于 {OKE} 9 OpenShift Kubernetes Engine 与您额外购买的

Support for both CRI-O and containerd runtimes • Support for container and VM workloads (using kubevirt) • Support for DPDK data plane acceleration The Contrail controller automatically detects workload

logs # Gather information using multiple plug-in images oc adm must-gather --image=quay.io/kubevirt/must-gather --image=quay.io/openshift/origin-must- gather # Gather information using a specific

logs # Gather information using multiple plug-in images oc adm must-gather --image=quay.io/kubevirt/must-gather --image=quay.io/openshift/origin-must- gather # Gather information using a specific