master/pkg/network- controller/network_controller.go Pattern 2: Gode Generator • client-gen: generate typed Kubernetes AP client for type • client.Pod.Get().Resource(…).Do() • conversion-gen: seamless fields • go-to-protobuf: generate protobuf messages for your types • informer-gen: generate informers that can be used to watch for updates to your types • openapi-gen: generate openapi compatible API

CA certificate and key [2] Generate CA certificate and key Please enter your numeric choice [2]: 2 Enter the path to the SSH private key to use (leave empty to generate): /Users/karangoel/.ssh/vsphere

Envelope encryption: benefits Easier to manage Envelope encryption: best practices Managing DEKs: ● Generate DEKs locally ● Use a strong cryptographic algorithm ● For easy access, store the DEK near the are encrypted at rest ● Don’t use the same DEK to encrypt data from two different apps/users ● Generate a new DEK every time you write the data. This means you don't need to rotate the DEKs Managing

Docker daemon build Docker context generate github.com/GoogleContainerTools/jib Project ilovejava.io/petclinic-app build Docker daemon build Docker context generate Extended Configuration JVM flags

unhealthy nodes can be recovered automatically. Otherwise manual intervention is required. 4. Generate daily report to show what happens, and programmers can improve the system with the reports continuously

Dockerd Node Kube-ApiServer List&Watch Events / NodeConditon Create Events observe observe Generate Events Pod Migrate npd Kernel Kubelet Dockerd self-agent self-agent Patch Node Condition

微服务的开发阶段 配置 对接 Debug • 配置驱动 • 配置补齐 • 配置工具 • Proto的管理 • 错误码管理 • 调试gRPC • 调试信息 • 错误定位 Generate • protoc -I {error proto file} --go-errors_out={output directory} • 实现我们自定义的error类型，方便断言。 • 根

adminUser: organization: "iSurpass" bucket: "openservice" user: "admin" ## Leave empty to generate a random password and token. ## Or fill any of these values to use fixed values. password:

2行命令 kubeadm join xxx）不过这命令的token默认是2小时有效期，超时后可重新生成 token再去node结点上执行 master1结点# kubeadm token generate #重新生成token，下面这一串 字符 ka8k02.9f2uowba7j21qv0g master1 结 点 # kubeadm token create