Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up for free
Kubernetes v1.7 の主な変更点 / Kubernetes v1.7 features
Takashi Kusumi
August 08, 2017
0
1.3k
Kubernetes v1.7 の主な変更点 / Kubernetes v1.7 features
Kubernetes Meetup Tokyo #6
2017.08.08
https://k8sjp.connpass.com/event/60324/
Takashi Kusumi
August 08, 2017
Tweet
Share
More Decks by Takashi Kusumi
See All by Takashi Kusumi
Unit Testing for Prometheus Rules
tksm
6
1.7k
Z Lab の教育への取組 / Cloud Native Education Efforts at Z Lab
tksm
6
1.1k
Recap: Securing Kubernetes with Admission Controllers
tksm
2
1.2k
Istio Mutual TLS
tksm
0
410
Debugging Applications in Kubernetes
tksm
16
3.5k
Kubernetes with Prometheus
tksm
5
2.1k
kubectl apply の仕組み / How kubectl apply works
tksm
1
8.8k
Prometheus による Kubernetes モニタリングの基礎 / Kubernetes monitoring with Prometheus
tksm
2
2.6k
Kubernetes の認証・認可と RBAC
tksm
9
2.6k
Featured
See All Featured
Dealing with People You Can't Stand - Big Design 2015
cassininazir
351
21k
Practical Orchestrator
shlominoach
178
8.6k
Rails Girls Zürich Keynote
gr2m
86
12k
Java REST API Framework Comparison - PWX 2021
mraible
PRO
11
4.7k
Embracing the Ebb and Flow
colly
73
3.4k
How to Ace a Technical Interview
jacobian
265
21k
Designing the Hi-DPI Web
ddemaree
272
32k
Making the Leap to Tech Lead
cromwellryan
113
7.3k
Fantastic passwords and where to find them - at NoRuKo
philnash
27
1.5k
How To Stay Up To Date on Web Technology
chriscoyier
780
250k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
4
500
Six Lessons from altMBA
skipperchong
14
1.4k
Transcript
,VCFSOFUFTWך⚺ז㢌刿挿 5BLBTIJ,VTVNJ ;-BC
,VCFSOFUFTW Ӝ Wٔٔ٦أ Ӝ ⚺ז㢌刿挿 إُؗٔذ؍ך䓼⻉ أذ٦زؿٕך؟ه٦ز䓼⻉ 䭁䓸䚍ךぢ♳ Ӝ ,VCFSOFUFTכ٠剢嫣ךٔٔ٦أ؟؎ؙٕ
Wכ剢劣✮㹀
2JJUBח鎸鯹׃גְתׅ http://qiita.com/tkusumi/items/817cf85917efd24c7a4f
إُؗٔذ؍ך䓼⻉ Ӝ FUDEך农〾⻉ BMQIB Ӝ 1PE鸐⥋ⵖ䖴ׅ/FUXPSL1PMJDZָTUBCMFח Ӝ /PEFך埄ꣲ״⿑㺘חׅ/PEF"VUIPSJ[BUJPOך鷄⸇ Ӝ
,VCFMFUך5-4鏾僇剅ךٗ٦ذ٦ءّٝ BMQIB Ӝ 넝䏝ז湊叨ؚٗך鷄⸇ BMQIB
أذ٦زؿٕך؟ه٦ز䓼⻉ Ӝ 4UBUFGVM4FUך荈⹛،حفر٦ز Ӝ 4UBUFGVM4FUח넝鸞זأ؛٦ٕךؔفءָّٝ鷄⸇ SFBEZ䖉׆ח⚛חأ؛٦ٕדֹٌ٦سָ鷄⸇ Ӝ %BFNPO4FUך،حفر٦زך䓼⻉ 㾶娖הٗ٦ٕغحؙ Ӝ
ٗ٦ٕؕر؍أؙ17ה׃ג⢪ִMPDBMأزٖ٦آ BMQIB ⴓ侔ؿ؋؎ٕءأذيזוח剑黝
䭁䓸䚍ךぢ♳ Ӝ "1*،ؚٔ٦ءّٝ堣腉 CFUB Ӝ $VTUPN3FTPVSDF%FOJUJPOך㼪Ⰵ CFUB 5IJSE1BSUZ3FTPVSDFכ䐖姺
Ӝ 䭁䓸דֹ"ENJTTJPO$POUSPMMFSך堣腉 CFUB Ӝ فٓؖـٕז$MPVE1SPWJEFS BMQIB Ӝ $POUBJOFS3VOUJNF*OUFSGBDF $3* ך䓼⻉
ך➭䫙磏 Ӝ %PDLFS⟃♳ך㜥さ1PEⰻכⰟ剣ך1*%瑞⢪ֲ״ֲח さׇג1*%㉏겗鍑寸 QBVTF؝ٝذشָ1*% ءؚشٕ鷏״ֲח Ӝ 1PEךFUDIPTUT鏣㹀דֹ״ֲחז BMQIB
Ӝ /PEFךIPTU*1ָEPXOXBSE"1*ד《״ֲחז Ӝ LVCFMFUךNFUSJDTחD"EWJTPSך䞔㜠ָろתזֻז
WGFBUVSF䫙磏
FUDEך农〾⻉ BMQIB Ӝ ٔا٦أ珏ⴽ䭷㹀׃ג农〾⻉ "&4$#$זוח㼎䘔 Ӝ "1*؟٦غ٦ךؔفءّٝד䭷㹀 鏣㹀ؿ؋؎ٕ䭷㹀 Ӝ 农〾⻉ׁر٦ةכQSFYָאֻ
LTFODBFTDCDW ⦼ך鿇ⴓֽ农〾⻉ׁ kind: EncryptionConfig apiVersion: v1 resources: - resources: - secrets providers: - aescbc: keys: - name: key1 secret: ...... - identity: {} 鏣㹀⢽ &ODSZQUJPO$POH
/PEF"VUIPSJ[BUJPO Ӝ /PEFכ荈ⴓחأ؛آُ٦ׁٕ 1PEח秡בֻ䞔㜠ָֽ鋅״ֲח ꟼ⤘זְ4FDSFUכ鋅ִזֻז Ӝ إُؗٔذ؍ٔأָؙ剑㼭ꣲח Ӝ 钠〳ה"ENJTTJPO$POUSPMMFSך鏣㹀 BVUIPSJ[BUJPONPEF/PEF
BENJTTJPODPOUSPM/PEF3FTUSJDUJPO 1PE" 1PE# 4FDSFU" 4FDSFU# /PEF /PEF
넝䏝ז湊叨ؚٗ BMQIB Ӝ 鑫稢ז湊叨ؚٗ鎸ꐮדֹ SFRVFTU SFTQPOTFךCPEZזו Ӝ XFCIPPLغحؙؒٝسָ鷄⸇ 넝䏝ז湊叨כXFCIPPLך㼎䘔 Ӝ
湊叨ךهٔء٦כ稢ַֻⵖ䖴דֹ rules: - level: Request resources: - group: "" resources: ["configmaps"] namespaces: ["kube-system"] - level: Metadata resources: - group: "" resources: ["secrets", "configmaps"] 鏣㹀⢽
/FUXPSL1PMJDZָTUBCMFח Ӝ 1PEך鸐⥋ⵖ䖴דֹ Ӝ OFUXPSL⩎ך؟ه٦زָ䗳銲 Ӝ 鏣㹀⢽ Ⰻגך1PEך鸐⥋犜姺 OBNFTQBDFⰻך鏩〳
1PE# 1PE& 1PE" 1PE% 1PE$ 1PE' OBNFTQBDF9 OBNFTQBDF:
D"EWJTPSךًزؙٔأך《倯JOW Ӝ D"EWJTPSNFUSJDTך《倯ָ㢌刿 LVCFMFUNFUSJDTחろתזֻז Ӝ Wַ㢌גְךד岣䠐 Ӝ QSPNFUIFVTך鏣㹀㢌刿ָ䗳銲 ؒٝسه؎ٝز
_WY NFUSJDT W_W NFUSJDT W_ NFUSJDTDBEWJTPS
LVCFSOFUFTW Ӝ Wכ剢劣ٔٔ٦أ✮㹀 'FBUVSFGSFF[F $PEFGSFF[F WSFMFBTF Ӝ ⦐➂涸ח孡חזך %FCVH$POUBJOFST *NQMFNFOU*174CBTFEJODMVTUFSTFSWJDFMPBECBMBODJOH
8FBSFIJSJOH CJUMZ[MBCDBSFFST