Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Kubernetes v1.7 の主な変更点 / Kubernetes v1.7 features
Search
Takashi Kusumi
August 08, 2017
0
1.5k
Kubernetes v1.7 の主な変更点 / Kubernetes v1.7 features
Kubernetes Meetup Tokyo #6
2017.08.08
https://k8sjp.connpass.com/event/60324/
Takashi Kusumi
August 08, 2017
Tweet
Share
More Decks by Takashi Kusumi
See All by Takashi Kusumi
Recap: eBPF セッションつまみ食い / eBPF sessions @ KubeCon EU 2023
tksm
1
3.6k
Unit Testing for Prometheus Rules
tksm
6
2.8k
Z Lab の教育への取組 / Cloud Native Education Efforts at Z Lab
tksm
7
1.4k
Recap: Securing Kubernetes with Admission Controllers
tksm
2
1.5k
Istio Mutual TLS
tksm
0
680
Debugging Applications in Kubernetes
tksm
16
4k
Kubernetes with Prometheus
tksm
5
2.4k
kubectl apply の仕組み / How kubectl apply works
tksm
1
9.7k
Prometheus による Kubernetes モニタリングの基礎 / Kubernetes monitoring with Prometheus
tksm
3
3k
Featured
See All Featured
How GitHub (no longer) Works
holman
310
140k
A Tale of Four Properties
chriscoyier
156
23k
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
29
2.3k
Mobile First: as difficult as doing things right
swwweet
222
8.9k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
25
1.8k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
irinanazarova
4
370
Docker and Python
trallard
40
3.1k
What's new in Ruby 2.0
geeforr
343
31k
Gamification - CAS2011
davidbonilla
80
5k
Designing for Performance
lara
604
68k
Practical Orchestrator
shlominoach
186
10k
The Illustrated Children's Guide to Kubernetes
chrisshort
48
48k
Transcript
,VCFSOFUFTWך⚺ז㢌刿挿 5BLBTIJ,VTVNJ ;-BC
,VCFSOFUFTW Ӝ Wٔٔ٦أ Ӝ ⚺ז㢌刿挿 إُؗٔذ؍ך䓼⻉ أذ٦زؿٕך؟ه٦ز䓼⻉ 䭁䓸䚍ךぢ♳ Ӝ ,VCFSOFUFTכ٠剢嫣ךٔٔ٦أ؟؎ؙٕ
Wכ剢劣✮㹀
2JJUBח鎸鯹׃גְתׅ http://qiita.com/tkusumi/items/817cf85917efd24c7a4f
إُؗٔذ؍ך䓼⻉ Ӝ FUDEך农〾⻉ BMQIB Ӝ 1PE鸐⥋ⵖ䖴ׅ/FUXPSL1PMJDZָTUBCMFח Ӝ /PEFך埄ꣲ״⿑㺘חׅ/PEF"VUIPSJ[BUJPOך鷄⸇ Ӝ
,VCFMFUך5-4鏾僇剅ךٗ٦ذ٦ءّٝ BMQIB Ӝ 넝䏝ז湊叨ؚٗך鷄⸇ BMQIB
أذ٦زؿٕך؟ه٦ز䓼⻉ Ӝ 4UBUFGVM4FUך荈⹛،حفر٦ز Ӝ 4UBUFGVM4FUח넝鸞זأ؛٦ٕךؔفءָّٝ鷄⸇ SFBEZ䖉׆ח⚛חأ؛٦ٕדֹٌ٦سָ鷄⸇ Ӝ %BFNPO4FUך،حفر٦زך䓼⻉ 㾶娖הٗ٦ٕغحؙ Ӝ
ٗ٦ٕؕر؍أؙ17ה׃ג⢪ִMPDBMأزٖ٦آ BMQIB ⴓ侔ؿ؋؎ٕءأذيזוח剑黝
䭁䓸䚍ךぢ♳ Ӝ "1*،ؚٔ٦ءّٝ堣腉 CFUB Ӝ $VTUPN3FTPVSDF%FOJUJPOך㼪Ⰵ CFUB 5IJSE1BSUZ3FTPVSDFכ䐖姺
Ӝ 䭁䓸דֹ"ENJTTJPO$POUSPMMFSך堣腉 CFUB Ӝ فٓؖـٕז$MPVE1SPWJEFS BMQIB Ӝ $POUBJOFS3VOUJNF*OUFSGBDF $3* ך䓼⻉
ך➭䫙磏 Ӝ %PDLFS⟃♳ך㜥さ1PEⰻכⰟ剣ך1*%瑞⢪ֲ״ֲח さׇג1*%㉏겗鍑寸 QBVTF؝ٝذشָ1*% ءؚشٕ鷏״ֲח Ӝ 1PEךFUDIPTUT鏣㹀דֹ״ֲחז BMQIB
Ӝ /PEFךIPTU*1ָEPXOXBSE"1*ד《״ֲחז Ӝ LVCFMFUךNFUSJDTחD"EWJTPSך䞔㜠ָろתזֻז
WGFBUVSF䫙磏
FUDEך农〾⻉ BMQIB Ӝ ٔا٦أ珏ⴽ䭷㹀׃ג农〾⻉ "&4$#$זוח㼎䘔 Ӝ "1*؟٦غ٦ךؔفءّٝד䭷㹀 鏣㹀ؿ؋؎ٕ䭷㹀 Ӝ 农〾⻉ׁر٦ةכQSFYָאֻ
LTFODBFTDCDW ⦼ך鿇ⴓֽ农〾⻉ׁ kind: EncryptionConfig apiVersion: v1 resources: - resources: - secrets providers: - aescbc: keys: - name: key1 secret: ...... - identity: {} 鏣㹀⢽ &ODSZQUJPO$POH
/PEF"VUIPSJ[BUJPO Ӝ /PEFכ荈ⴓחأ؛آُ٦ׁٕ 1PEח秡בֻ䞔㜠ָֽ鋅״ֲח ꟼ⤘זְ4FDSFUכ鋅ִזֻז Ӝ إُؗٔذ؍ٔأָؙ剑㼭ꣲח Ӝ 钠〳ה"ENJTTJPO$POUSPMMFSך鏣㹀 BVUIPSJ[BUJPONPEF/PEF
BENJTTJPODPOUSPM/PEF3FTUSJDUJPO 1PE" 1PE# 4FDSFU" 4FDSFU# /PEF /PEF
넝䏝ז湊叨ؚٗ BMQIB Ӝ 鑫稢ז湊叨ؚٗ鎸ꐮדֹ SFRVFTU SFTQPOTFךCPEZזו Ӝ XFCIPPLغحؙؒٝسָ鷄⸇ 넝䏝ז湊叨כXFCIPPLך㼎䘔 Ӝ
湊叨ךهٔء٦כ稢ַֻⵖ䖴דֹ rules: - level: Request resources: - group: "" resources: ["configmaps"] namespaces: ["kube-system"] - level: Metadata resources: - group: "" resources: ["secrets", "configmaps"] 鏣㹀⢽
/FUXPSL1PMJDZָTUBCMFח Ӝ 1PEך鸐⥋ⵖ䖴דֹ Ӝ OFUXPSL⩎ך؟ه٦زָ䗳銲 Ӝ 鏣㹀⢽ Ⰻגך1PEך鸐⥋犜姺 OBNFTQBDFⰻך鏩〳
1PE# 1PE& 1PE" 1PE% 1PE$ 1PE' OBNFTQBDF9 OBNFTQBDF:
D"EWJTPSךًزؙٔأך《倯JOW Ӝ D"EWJTPSNFUSJDTך《倯ָ㢌刿 LVCFMFUNFUSJDTחろתזֻז Ӝ Wַ㢌גְךד岣䠐 Ӝ QSPNFUIFVTך鏣㹀㢌刿ָ䗳銲 ؒٝسه؎ٝز
_WY NFUSJDT W_W NFUSJDT W_ NFUSJDTDBEWJTPS
LVCFSOFUFTW Ӝ Wכ剢劣ٔٔ٦أ✮㹀 'FBUVSFGSFF[F $PEFGSFF[F WSFMFBTF Ӝ ⦐➂涸ח孡חזך %FCVH$POUBJOFST *NQMFNFOU*174CBTFEJODMVTUFSTFSWJDFMPBECBMBODJOH
8FBSFIJSJOH CJUMZ[MBCDBSFFST