Kubernetes (GKE) PaaS (GAE) Serverless (GCF) App Engine 以原始碼為基礎佈署 Kubernetes Engine 以容器為基礎佈 隨選生成的K8S叢集 Compute Engine 隨選生成的虛擬機 IaaS and PaaS at Scale Google App Engine #全代管服務 #以容器為基礎 #適合Web應用 Google Kubernetes Engine GKE ○ 在 Google Cloud 提供技術的 Kubernetes 上部署、管理容器化應用程式及調整資源 為何 Google GKE 是佈署 K8S 的首選 全球佈署 業界最多的佈 署地區選擇 多重版本 支援最多的 GKE發佈版本 ，自動升級 高可用性 支援跨資料中 心自動配置叢 集 網路安全 毋須額外套件 過濾容器到容 器流量防護 configure, and manage clusters in GKE and GKE On-Prem ● Cluster environments are consistent (k8s version, OS image, plug-ins, components configuration) Orchestrate and manage on-prem containers

雖然OpenShift可延伸於邊緣裝置執行，Red Hat並未針對邊緣運算提供專屬的輕 量級Kubernetes發行版本。這表示使用者必須面對OpenShift及其眾多元件的完整 複雜度及規模。 7. Single-node edition單節點版本 使用者如果想在單一裝置執行Kubernetes，目前有輕量級的發行版本專門用於提 供單節點叢集，並可透過抽象化技術，排除Kubernetes固有的部分複雜度問題。 Canonical Canonical Kubernetes是在不可變容器中執行，因此開箱後可立即提供卓越的安全 性，此外也會針對最近的5個Kubernetes版本提供安全性修補，作為擴展安全性維 護計畫(ESM)的一部分。與K8s RBAC, Active Directory及LDAP整合、預設CIS強化、 靜態加密以及無需停機的自動安全性更新可確保使用者獲得高度安全的 Kubernetes 部署。企業也能利用Ubuntu

skills / manpower • Company culture • Tooling • Security & Compliance 10 Canonical (Ubuntu) – K8S Operation Survey @2021/Nov, 1300 受訪者 Click to edit Master title style 11 Tame operational complexity to edit Master title style 14 GitOps 與資安合規守門員一拍即合 14 iThome SRE 2022 - 結合 IaC 與 PaC 提供企業上雲與應用部署（K8S）的資安偵測與修補 Click to edit Master title style 15 GitOps 的好朋友 – xxxOperator • Operator 的目標是將 operation

overlay/development 17 18 19 Use generate YAML and apply on kubernetes •Generate yaml and apply to k8s •kubectl kustomize overlay/development | kubectl apply -f - 20 部署出dev deployment and service env

MRs + CI/CD GitOps is IaC done right ! DevOps, then GitOps ! GitOps is not for everyone ! (with K8S) 現階段

Controls Tools & Operators 編輯器 3D Viewport Image Editor UV Editor Compositor Texture Nodes Geometry Node Editor Shader Editor Video Sequencer Movie Clip Editor Dope Sheet Timeline Graph Editor Drivers Editor and Python editing improvements. This contained the results Project Apricot. 2.49 -- June 2009: Node-based textures, armature sketching (called Etch-a-Ton), Boolean mesh operation improvements, JPEG2000 menus are added and tooltips greatly improved, the Intersection modeling tool is added, new Sun Beam node for the Compositor, Freestyle now works with Cycles, texture painting workflow is improved, and more

Controls Tools & Operators 編輯器 3D Viewport Image Editor UV Editor Compositor Texture Nodes Geometry Node Editor Shader Editor Video Sequencer Movie Clip Editor Dope Sheet Timeline Graph Editor Drivers Editor and Python editing improvements. This contained the results Project Apricot. 2.49 -- June 2009: Node-based textures, armature sketching (called Etch-a-Ton), Boolean mesh operation improvements, JPEG2000 menus are added and tooltips greatly improved, the Intersection modeling tool is added, new Sun Beam node for the Compositor, Freestyle now works with Cycles, texture painting workflow is improved, and more

Controls Tools & Operators 編輯器 3D Viewport Image Editor UV Editor Compositor Texture Nodes Geometry Node Editor Shader Editor Video Sequencer Movie Clip Editor Dope Sheet Timeline Graph Editor Drivers Editor and Python editing improvements. This contained the results Project Apricot. 2.49 -- June 2009: Node-based textures, armature sketching (called Etch-a-Ton), Boolean mesh operation improvements, JPEG2000 menus are added and tooltips greatly improved, the Intersection modeling tool is added, new Sun Beam node for the Compositor, Freestyle now works with Cycles, texture painting workflow is improved, and more

Controls Tools & Operators 編輯器 3D Viewport Image Editor UV Editor Compositor Texture Nodes Geometry Node Editor Shader Editor Video Sequencer Movie Clip Editor Dope Sheet Timeline Graph Editor Drivers Editor and Python editing improvements. This contained the results Project Apricot. 2.49 -- June 2009: Node-based textures, armature sketching (called Etch-a-Ton), Boolean mesh operation improvements, JPEG2000 menus are added and tooltips greatly improved, the Intersection modeling tool is added, new Sun Beam node for the Compositor, Freestyle now works with Cycles, texture painting workflow is improved, and more

Controls Tools & Operators 編輯器 3D Viewport Image Editor UV Editor Compositor Texture Nodes Geometry Node Editor Shader Editor Video Sequencer Movie Clip Editor Dope Sheet Timeline Graph Editor Drivers Editor and Python editing improvements. This contained the results Project Apricot. 2.49 -- June 2009: Node-based textures, armature sketching (called Etch-a-Ton), Boolean mesh operation improvements, JPEG2000 menus are added and tooltips greatly improved, the Intersection modeling tool is added, new Sun Beam node for the Compositor, Freestyle now works with Cycles, texture painting workflow is improved, and more