User Experience • Installation and clusters creation Deploy OpsMgr OVA Upload PKS tile Deploy BOSH pks create cluster A pks create cluster B Worker Worker Worker Kubernetes Master API Cluster Harbor • Manages Cluster Day 2 - Scaling - Patching - Upgrades - Failures Kubernetes (As a Bosh Release) BOSH (Deploys/Manages VMs) CPI CNI Harbor Private Container Registry Worker Worker Worker create-cluster K8s-2 n=3 #pks create-cluster K8s-3 n=3 #pks resize K8s-3 n=5 Architecture NSX-T Bosh PKS Admin Network NCP POD 1 POD 4 POD 2 POD 3 POD 5 POD 6 T0 kube-system PODs – Logical

Worker Pod Pod kube-cluster PKS API BOSH Ops Manager BOSH Director IaaS K8s API K8s API Platform Reliability Engineer Ops Manager / BOSH Admin Manages OpsMan Tiles Developer Kubernetes NameSpace NameSpace NameSpace NameSpace VMware PKS Broker UAA VMware PKS API BOSH CredHub ©2019 VMware, Inc. 15 PKS已經做好11大領域超過百項的安全強化措施 PKS對於容器底層核心(Stemcell)就做了非常多的安全強化並驗證

安全性 VIC 服务引擎 存储虚拟化 计算虚拟化 网络虚拟化 Physical Infrastructure Kubernetes on BOSH (Kubo) BOSH NSX Analytics Automation Security Operations Monitoring GCP Service Broker