Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Kubernetes v1.7 の主な変更点 / Kubernetes v1.7 features
Search
Takashi Kusumi
August 08, 2017
0
1.6k
Kubernetes v1.7 の主な変更点 / Kubernetes v1.7 features
Kubernetes Meetup Tokyo #6
2017.08.08
https://k8sjp.connpass.com/event/60324/
Takashi Kusumi
August 08, 2017
Tweet
Share
More Decks by Takashi Kusumi
See All by Takashi Kusumi
Recap: eBPF セッションつまみ食い / eBPF sessions @ KubeCon EU 2023
tksm
1
3.7k
Unit Testing for Prometheus Rules
tksm
7
3.1k
Z Lab の教育への取組 / Cloud Native Education Efforts at Z Lab
tksm
7
1.5k
Recap: Securing Kubernetes with Admission Controllers
tksm
2
1.6k
Istio Mutual TLS
tksm
0
740
Debugging Applications in Kubernetes
tksm
16
4.3k
Kubernetes with Prometheus
tksm
5
2.5k
kubectl apply の仕組み / How kubectl apply works
tksm
1
9.9k
Prometheus による Kubernetes モニタリングの基礎 / Kubernetes monitoring with Prometheus
tksm
3
3.1k
Featured
See All Featured
Done Done
chrislema
185
16k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
danielanewman
230
22k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
kevinliebholz
35
6.1k
Art, The Web, and Tiny UX
lynnandtonic
303
21k
Docker and Python
trallard
46
3.6k
The World Runs on Bad Software
bkeepers
PRO
72
11k
Designing for humans not robots
tammielis
254
26k
[RailsConf 2023] Rails as a piece of cake
palkan
57
5.9k
Large-scale JavaScript Application Architecture
addyosmani
514
110k
ReactJS: Keep Simple. Everything can be a component!
pedronauck
667
120k
The Pragmatic Product Professional
lauravandoore
36
6.9k
Practical Orchestrator
shlominoach
190
11k
Transcript
,VCFSOFUFTWך⚺ז㢌刿挿 5BLBTIJ,VTVNJ ;-BC
,VCFSOFUFTW Ӝ Wٔٔ٦أ Ӝ ⚺ז㢌刿挿 إُؗٔذ؍ך䓼⻉ أذ٦زؿٕך؟ه٦ز䓼⻉ 䭁䓸䚍ךぢ♳ Ӝ ,VCFSOFUFTכ٠剢嫣ךٔٔ٦أ؟؎ؙٕ
Wכ剢劣✮㹀
2JJUBח鎸鯹׃גְתׅ http://qiita.com/tkusumi/items/817cf85917efd24c7a4f
إُؗٔذ؍ך䓼⻉ Ӝ FUDEך农〾⻉ BMQIB Ӝ 1PE鸐⥋ⵖ䖴ׅ/FUXPSL1PMJDZָTUBCMFח Ӝ /PEFך埄ꣲ״⿑㺘חׅ/PEF"VUIPSJ[BUJPOך鷄⸇ Ӝ
,VCFMFUך5-4鏾僇剅ךٗ٦ذ٦ءّٝ BMQIB Ӝ 넝䏝ז湊叨ؚٗך鷄⸇ BMQIB
أذ٦زؿٕך؟ه٦ز䓼⻉ Ӝ 4UBUFGVM4FUך荈⹛،حفر٦ز Ӝ 4UBUFGVM4FUח넝鸞זأ؛٦ٕךؔفءָّٝ鷄⸇ SFBEZ䖉׆ח⚛חأ؛٦ٕדֹٌ٦سָ鷄⸇ Ӝ %BFNPO4FUך،حفر٦زך䓼⻉ 㾶娖הٗ٦ٕغحؙ Ӝ
ٗ٦ٕؕر؍أؙ17ה׃ג⢪ִMPDBMأزٖ٦آ BMQIB ⴓ侔ؿ؋؎ٕءأذيזוח剑黝
䭁䓸䚍ךぢ♳ Ӝ "1*،ؚٔ٦ءّٝ堣腉 CFUB Ӝ $VTUPN3FTPVSDF%FOJUJPOך㼪Ⰵ CFUB 5IJSE1BSUZ3FTPVSDFכ䐖姺
Ӝ 䭁䓸דֹ"ENJTTJPO$POUSPMMFSך堣腉 CFUB Ӝ فٓؖـٕז$MPVE1SPWJEFS BMQIB Ӝ $POUBJOFS3VOUJNF*OUFSGBDF $3* ך䓼⻉
ך➭䫙磏 Ӝ %PDLFS⟃♳ך㜥さ1PEⰻכⰟ剣ך1*%瑞⢪ֲ״ֲח さׇג1*%㉏겗鍑寸 QBVTF؝ٝذشָ1*% ءؚشٕ鷏״ֲח Ӝ 1PEךFUDIPTUT鏣㹀דֹ״ֲחז BMQIB
Ӝ /PEFךIPTU*1ָEPXOXBSE"1*ד《״ֲחז Ӝ LVCFMFUךNFUSJDTחD"EWJTPSך䞔㜠ָろתזֻז
WGFBUVSF䫙磏
FUDEך农〾⻉ BMQIB Ӝ ٔا٦أ珏ⴽ䭷㹀׃ג农〾⻉ "&4$#$זוח㼎䘔 Ӝ "1*؟٦غ٦ךؔفءّٝד䭷㹀 鏣㹀ؿ؋؎ٕ䭷㹀 Ӝ 农〾⻉ׁر٦ةכQSFYָאֻ
LTFODBFTDCDW ⦼ך鿇ⴓֽ农〾⻉ׁ kind: EncryptionConfig apiVersion: v1 resources: - resources: - secrets providers: - aescbc: keys: - name: key1 secret: ...... - identity: {} 鏣㹀⢽ &ODSZQUJPO$POH
/PEF"VUIPSJ[BUJPO Ӝ /PEFכ荈ⴓחأ؛آُ٦ׁٕ 1PEח秡בֻ䞔㜠ָֽ鋅״ֲח ꟼ⤘זְ4FDSFUכ鋅ִזֻז Ӝ إُؗٔذ؍ٔأָؙ剑㼭ꣲח Ӝ 钠〳ה"ENJTTJPO$POUSPMMFSך鏣㹀 BVUIPSJ[BUJPONPEF/PEF
BENJTTJPODPOUSPM/PEF3FTUSJDUJPO 1PE" 1PE# 4FDSFU" 4FDSFU# /PEF /PEF
넝䏝ז湊叨ؚٗ BMQIB Ӝ 鑫稢ז湊叨ؚٗ鎸ꐮדֹ SFRVFTU SFTQPOTFךCPEZזו Ӝ XFCIPPLغحؙؒٝسָ鷄⸇ 넝䏝ז湊叨כXFCIPPLך㼎䘔 Ӝ
湊叨ךهٔء٦כ稢ַֻⵖ䖴דֹ rules: - level: Request resources: - group: "" resources: ["configmaps"] namespaces: ["kube-system"] - level: Metadata resources: - group: "" resources: ["secrets", "configmaps"] 鏣㹀⢽
/FUXPSL1PMJDZָTUBCMFח Ӝ 1PEך鸐⥋ⵖ䖴דֹ Ӝ OFUXPSL⩎ך؟ه٦زָ䗳銲 Ӝ 鏣㹀⢽ Ⰻגך1PEך鸐⥋犜姺 OBNFTQBDFⰻך鏩〳
1PE# 1PE& 1PE" 1PE% 1PE$ 1PE' OBNFTQBDF9 OBNFTQBDF:
D"EWJTPSךًزؙٔأך《倯JOW Ӝ D"EWJTPSNFUSJDTך《倯ָ㢌刿 LVCFMFUNFUSJDTחろתזֻז Ӝ Wַ㢌גְךד岣䠐 Ӝ QSPNFUIFVTך鏣㹀㢌刿ָ䗳銲 ؒٝسه؎ٝز
_WY NFUSJDT W_W NFUSJDT W_ NFUSJDTDBEWJTPS
LVCFSOFUFTW Ӝ Wכ剢劣ٔٔ٦أ✮㹀 'FBUVSFGSFF[F $PEFGSFF[F WSFMFBTF Ӝ ⦐➂涸ח孡חזך %FCVH$POUBJOFST *NQMFNFOU*174CBTFEJODMVTUFSTFSWJDFMPBECBMBODJOH
8FBSFIJSJOH CJUMZ[MBCDBSFFST