This slide show some note about Authorization and Admission in Kubernetes.
It include some detail about:
Authorziation
ABAC
RBAC
Admission
Service Account
Secret
Link About Authenication:
Still working understanding how to do Authenication in Kubernetes.
Using access tokens to secure microservices
API Security: The 4 Defenses of The API Stronghold
How To Control User Identity Within Microservices
Microservices in Practice
Adding an OpenID Connect identity provider
OpenID Connect FAQ and Q&As
SCIM: System for Cross-domain Identity Management
前言 話說強者我同事 Simon Su 是 GCPUG 是主辦者. 當然還是得特地跟老婆請假來彭場一下,加上本週有不少資料科學相關的講題. 1. Apache Beam in Big Data Pipeline by Randy Huang - Data Architect at VMFive Why use beam? If you want to decompose your task into pipeline. You can focus on algorithm. It could run on Flink, Storm and Spark. So you can write code once run anywhere. Q&A What is the pain point if such application has so much runner? (spark, flink, storm) Ans: No, pain point until now. Sometime CEP for Flink but might not able to use in Beam. Beam is follow Flink related API closely. Related Link: Beam website Embulk: Pluggable Bulk Data Loader. 2.Kubernetes 使用心得分享 by Gene Liu / LIVEhouse.in Self healing in second. Master will use 0.4 CPU in etcd. Q&A Is any way to assign random port in Kubernetes Cluster if we want to run random replica? Ans: Use node pool Why use kubernetes? Ans:...
緣起 2016/09/26 Google 推出了新版的 Kubernetes 1.4 裡頭最讓人期待的,就是 kubeadm 這個新的功能. 本來很期待他能夠讓 Kubernetes 變得更容易安裝並且加入新的節點,所以就試玩了一下.發現功能都還蠻強大的.不僅僅是變得更容易安裝,其實根本就是跟 docker swarm mode 致敬啊.整個變得簡單到不行. 建立機器 這邊只建議兩個 OS 版本: Ubuntu 16.04 CentOS 7 備註: 如果你使用 docker-machine 來建立 VM 獲釋 GCP 上面的機器,預設的 Ubuntu 是 15.10 ,是無法順利安裝完畢的. 下載相關的 binary 每一台電腦(包括 Master 跟 Node 都得執行)所有的指令都是透過 sudo su - # curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | apt-key add - # cat <<EOF > /etc/apt/sources.list.d/kubernetes.list deb http://apt.kubernetes.io/ kubernetes-xenial main EOF # apt-get update # apt-get install -y docker.io kubelet kubeadm kubectl kubernetes-cni 啟動 Master 就像是 docker swarm mode 的 master 一樣,只要一行指令就好. kubeadm init 詳細會出現的螢幕如下 # kubeadm init <master/tokens> generated token: "306d01.da88f33b20103873" <master/pki> created keys and certificates in "/etc/kubernetes/pki" <util/kubeconfig> created "/etc/kubernetes/kubelet.conf" <util/kubeconfig> created "/etc/kubernetes/admin.conf" <master/apiclient> created API client configuration <master/apiclient> created API client, waiting for the control plane to become ready <master/apiclient> all control plane components are healthy after 51.538064 seconds <master/apiclient> waiting for at least one node to register and become ready <master/apiclient> first node is...
Data Q&A
How to get disk and network stat?
Try to usse sar (detail usage)
How could I get GPU info?
Try to use glxinfo (detail usage)
How to get OS version?
Checking your Ubuntu Version
You also can get other detail on /proc (detail spec), such as:
cpu
memory
process info (id, usage, … other)
DMA info
Other Links
How to get GPU info?
10 Useful Sar (Sysstat) Examples for UNIX / Linux Performance Monitoring
Checking your Ubuntu Version
/proc spec