Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Kubernetes v1.7 の主な変更点 / Kubernetes v1.7 features
Search
Takashi Kusumi
August 08, 2017
0
1.5k
Kubernetes v1.7 の主な変更点 / Kubernetes v1.7 features
Kubernetes Meetup Tokyo #6
2017.08.08
https://k8sjp.connpass.com/event/60324/
Takashi Kusumi
August 08, 2017
Tweet
Share
More Decks by Takashi Kusumi
See All by Takashi Kusumi
Recap: eBPF セッションつまみ食い / eBPF sessions @ KubeCon EU 2023
tksm
1
3.6k
Unit Testing for Prometheus Rules
tksm
6
2.7k
Z Lab の教育への取組 / Cloud Native Education Efforts at Z Lab
tksm
7
1.4k
Recap: Securing Kubernetes with Admission Controllers
tksm
2
1.5k
Istio Mutual TLS
tksm
0
670
Debugging Applications in Kubernetes
tksm
16
4k
Kubernetes with Prometheus
tksm
5
2.4k
kubectl apply の仕組み / How kubectl apply works
tksm
1
9.7k
Prometheus による Kubernetes モニタリングの基礎 / Kubernetes monitoring with Prometheus
tksm
3
3k
Featured
See All Featured
Build The Right Thing And Hit Your Dates
maggiecrowley
32
2.4k
Mobile First: as difficult as doing things right
swwweet
222
8.9k
Intergalactic Javascript Robots from Outer Space
tanoku
268
27k
A better future with KSS
kneath
238
17k
Gamification - CAS2011
davidbonilla
80
5k
Practical Tips for Bootstrapping Information Extraction Pipelines
honnibal
PRO
9
670
What’s in a name? Adding method to the madness
productmarketing
PRO
22
3.1k
Save Time (by Creating Custom Rails Generators)
garrettdimon
PRO
27
770
Practical Orchestrator
shlominoach
186
10k
Unsuck your backbone
ammeep
668
57k
Distributed Sagas: A Protocol for Coordinating Microservices
caitiem20
328
21k
Optimising Largest Contentful Paint
csswizardry
33
2.9k
Transcript
,VCFSOFUFTWך⚺ז㢌刿挿 5BLBTIJ,VTVNJ ;-BC
,VCFSOFUFTW Ӝ Wٔٔ٦أ Ӝ ⚺ז㢌刿挿 إُؗٔذ؍ך䓼⻉ أذ٦زؿٕך؟ه٦ز䓼⻉ 䭁䓸䚍ךぢ♳ Ӝ ,VCFSOFUFTכ٠剢嫣ךٔٔ٦أ؟؎ؙٕ
Wכ剢劣✮㹀
2JJUBח鎸鯹׃גְתׅ http://qiita.com/tkusumi/items/817cf85917efd24c7a4f
إُؗٔذ؍ך䓼⻉ Ӝ FUDEך农〾⻉ BMQIB Ӝ 1PE鸐⥋ⵖ䖴ׅ/FUXPSL1PMJDZָTUBCMFח Ӝ /PEFך埄ꣲ״⿑㺘חׅ/PEF"VUIPSJ[BUJPOך鷄⸇ Ӝ
,VCFMFUך5-4鏾僇剅ךٗ٦ذ٦ءّٝ BMQIB Ӝ 넝䏝ז湊叨ؚٗך鷄⸇ BMQIB
أذ٦زؿٕך؟ه٦ز䓼⻉ Ӝ 4UBUFGVM4FUך荈⹛،حفر٦ز Ӝ 4UBUFGVM4FUח넝鸞זأ؛٦ٕךؔفءָّٝ鷄⸇ SFBEZ䖉׆ח⚛חأ؛٦ٕדֹٌ٦سָ鷄⸇ Ӝ %BFNPO4FUך،حفر٦زך䓼⻉ 㾶娖הٗ٦ٕغحؙ Ӝ
ٗ٦ٕؕر؍أؙ17ה׃ג⢪ִMPDBMأزٖ٦آ BMQIB ⴓ侔ؿ؋؎ٕءأذيזוח剑黝
䭁䓸䚍ךぢ♳ Ӝ "1*،ؚٔ٦ءّٝ堣腉 CFUB Ӝ $VTUPN3FTPVSDF%FOJUJPOך㼪Ⰵ CFUB 5IJSE1BSUZ3FTPVSDFכ䐖姺
Ӝ 䭁䓸דֹ"ENJTTJPO$POUSPMMFSך堣腉 CFUB Ӝ فٓؖـٕז$MPVE1SPWJEFS BMQIB Ӝ $POUBJOFS3VOUJNF*OUFSGBDF $3* ך䓼⻉
ך➭䫙磏 Ӝ %PDLFS⟃♳ך㜥さ1PEⰻכⰟ剣ך1*%瑞⢪ֲ״ֲח さׇג1*%㉏겗鍑寸 QBVTF؝ٝذشָ1*% ءؚشٕ鷏״ֲח Ӝ 1PEךFUDIPTUT鏣㹀דֹ״ֲחז BMQIB
Ӝ /PEFךIPTU*1ָEPXOXBSE"1*ד《״ֲחז Ӝ LVCFMFUךNFUSJDTחD"EWJTPSך䞔㜠ָろתזֻז
WGFBUVSF䫙磏
FUDEך农〾⻉ BMQIB Ӝ ٔا٦أ珏ⴽ䭷㹀׃ג农〾⻉ "&4$#$זוח㼎䘔 Ӝ "1*؟٦غ٦ךؔفءّٝד䭷㹀 鏣㹀ؿ؋؎ٕ䭷㹀 Ӝ 农〾⻉ׁر٦ةכQSFYָאֻ
LTFODBFTDCDW ⦼ך鿇ⴓֽ农〾⻉ׁ kind: EncryptionConfig apiVersion: v1 resources: - resources: - secrets providers: - aescbc: keys: - name: key1 secret: ...... - identity: {} 鏣㹀⢽ &ODSZQUJPO$POH
/PEF"VUIPSJ[BUJPO Ӝ /PEFכ荈ⴓחأ؛آُ٦ׁٕ 1PEח秡בֻ䞔㜠ָֽ鋅״ֲח ꟼ⤘זְ4FDSFUכ鋅ִזֻז Ӝ إُؗٔذ؍ٔأָؙ剑㼭ꣲח Ӝ 钠〳ה"ENJTTJPO$POUSPMMFSך鏣㹀 BVUIPSJ[BUJPONPEF/PEF
BENJTTJPODPOUSPM/PEF3FTUSJDUJPO 1PE" 1PE# 4FDSFU" 4FDSFU# /PEF /PEF
넝䏝ז湊叨ؚٗ BMQIB Ӝ 鑫稢ז湊叨ؚٗ鎸ꐮדֹ SFRVFTU SFTQPOTFךCPEZזו Ӝ XFCIPPLغحؙؒٝسָ鷄⸇ 넝䏝ז湊叨כXFCIPPLך㼎䘔 Ӝ
湊叨ךهٔء٦כ稢ַֻⵖ䖴דֹ rules: - level: Request resources: - group: "" resources: ["configmaps"] namespaces: ["kube-system"] - level: Metadata resources: - group: "" resources: ["secrets", "configmaps"] 鏣㹀⢽
/FUXPSL1PMJDZָTUBCMFח Ӝ 1PEך鸐⥋ⵖ䖴דֹ Ӝ OFUXPSL⩎ך؟ه٦زָ䗳銲 Ӝ 鏣㹀⢽ Ⰻגך1PEך鸐⥋犜姺 OBNFTQBDFⰻך鏩〳
1PE# 1PE& 1PE" 1PE% 1PE$ 1PE' OBNFTQBDF9 OBNFTQBDF:
D"EWJTPSךًزؙٔأך《倯JOW Ӝ D"EWJTPSNFUSJDTך《倯ָ㢌刿 LVCFMFUNFUSJDTחろתזֻז Ӝ Wַ㢌גְךד岣䠐 Ӝ QSPNFUIFVTך鏣㹀㢌刿ָ䗳銲 ؒٝسه؎ٝز
_WY NFUSJDT W_W NFUSJDT W_ NFUSJDTDBEWJTPS
LVCFSOFUFTW Ӝ Wכ剢劣ٔٔ٦أ✮㹀 'FBUVSFGSFF[F $PEFGSFF[F WSFMFBTF Ӝ ⦐➂涸ח孡חזך %FCVH$POUBJOFST *NQMFNFOU*174CBTFEJODMVTUFSTFSWJDFMPBECBMBODJOH
8FBSFIJSJOH CJUMZ[MBCDBSFFST