2021 IstioCon 2021 is the inaugural community conference for the industry's most popular service mesh. IstioCon is a community-led event, showcasing the lessons learned from running Istio in production roadmap sessions. Fun and games are also included with two social hours to take the load off and mesh with the Istio community, vendors, and maintainers! #IstioCon Agenda ● Introduction ● Target Audience Some service outside of cluster Version 1 Version 2 Extended Mesh Defines endpoints outside of cluster as a part of Service Mesh #IstioCon Brush up on Istio resources (cont’d) Target Audience

service mesh, and that’s the foundation of everything in terms of security.” — Nicolas Chaillan, former Chief Software Officer of the U.S. Air Force The DoD leverages Istio as its service mesh, and one make core DevSecOps practices the norm without any added effort. Leverage Flagger and a service mesh tool to execute complex progressive delivery patterns like canary releasing and blue-green deployments

以容器为中心 部署可预测性 可预测 弹性能力 弹性调度 恢复能力 自动化运维，快速恢复 蓝盾/TencentHub…… 每天可交付数十次 运维开发&应用开发 TSF,Service Mesh K8S（TKE） 云原生方法 业务最佳实践 K8S（TKE） K8S（TKE）+业务画像 K8S（TKE） ⚫ 云原生计算基金会（CNCF），2015年由谷歌牵头成立，第一个毕业的项目Kubernetes。

over and over again with identical results. For instance, a command that updates a field in a database to a fixed value can be issued multiple times safely. Doing so might be wasteful, but the result suppose the commands try to update a local database on a system where a schema change had occurred, or after an administrator had deleted the whole database. In those scenarios, the command will fail deleting the whole virtual system and creating a new container. So in the example of updating a database in the previous section, Kubernetes heals the system simply by starting a new set of containers

需要运维实现故障恢复逻辑 ❑ 如果没有故障恢复逻辑，需要运维介入 • 响应慢 有风险 ❑ 自动回复，秒 级 ❑ 每次请求都是一个新的实例 虚拟机 容器 Serverless 性能调优 Database Linux OS 虚拟机 Database Tomcat Network Runtime Serverless vs. IaaS 运维能力 安全保障 Serverless vs. IaaS 运维能力

evolved further by incorporating microservices-based architectures and even databases in the form of database DevOps. Now there’s a new kind of Ops. GitOps is rapidly gaining popularity to extend the scope

1）进入备份目录解压：gunzip fit2cloud_$date.sql.gz 2）登录数据库后新建数据库并导入数据 mysql -uroot -pPassword123@mysql CREATE DATABASE fit2cloud_01 /*!40100 DEFAULT CHARACTER SET utf8mb4 */; use fit2cloud_01; source /backup/mysq

OSS、华为云 OBS、Ceph、Swift、Azure； Kubernetes管理 ⽀持对 Kubernetes 进⾏运维审计。 JumpServer 的数据库审计功能 数据库运维安全审计 Database Auditing 连接⽅式 命令⾏⽅式 数据库代理直连⽅式，可使⽤数据库管理⼯具（例如 Navicat、SQLyog 等）进⾏直连操作 Web GUI ⽅式 远程应⽤ ⽀持的数据库 MySQL

方案，交互界面美观、用户体验好。采纳分布式架构，支持多机 房跨区域部署，支持横向扩展，无资产数量及并发限制。 CMDB 全称为配置管理数据库，Configuration Management Database, 用于保 存构筑企业 IT 及应用的资源信息、资源归属信息、应用系统应用信息、以 及资源与资源关系信息，为 IT 系统运维、运营、管理，应用开发测试运维 提供准确、一致的数据支持，比如统计分析资源投入、分组分类关联查找