Project Harbor Introduction Open source trusted cloud native registry Henry Zhang, Chief Architect, VMware R&D China Steven Zou, Staff Engineer, VMware R&D China Nov. 2018 2 Confidential � ©2018 Schedulers/Runtimes Consumers LDAP/Active Directory Supporting services Harbor Packaging Docker Kubernetes Cloud Foundry 12 Confidential � ©2018 VMware, Inc. SECURITY Isolation Access control Content Deployments DEPLOYMENT Helm Chart���� • Helm Chart����Kubernetes����� • ����������������� • ������������� • ������������Harbor�� • ������Kubernetes ������������Harbor��� Helm Chart���������Chart� �������������Chart���

Project Harbor Introduction Open source trusted cloud native registry Henry Zhang, Chief Architect, VMware R&D China Steven Zou, Staff Engineer, VMware R&D China Nov. 2018 2 Confidential � ©2018 Schedulers/Runtimes Consumers LDAP/Active Directory Supporting services Harbor Packaging Docker Kubernetes Cloud Foundry 12 Confidential � ©2018 VMware, Inc. SECURITY Isolation Access control Content Deployments DEPLOYMENT Helm Chart���� • Helm Chart����Kubernetes����� • ����������������� • ������������� • ������������Harbor�� • ������Kubernetes ������������Harbor��� Helm Chart���������Chart� �������������Chart���

Master password Security in DBeaver PRO SSH configuration SSL configuration Proxy configuration Kubernetes configuration User Guide Table of contents Configure connection Network configuration settings configuration Shell commands Changing current user password Authentication models overview Database native DBeaver profile Kerberos authentication Microsoft Entra ID Authentication MongoDB PostgreSQL different databases may use various types of authorizations. Common types include and . Database Native DBeaver Profile However, the number and type of connection properties are very dependent on the

Master password Security in DBeaver PRO SSH configuration SSL configuration Proxy configuration Kubernetes configuration User Guide Table of contents Configure connection Network configuration settings configuration Shell commands Changing current user password Authentication models overview Database native DBeaver profile Kerberos authentication Microsoft Entra ID Authentication MongoDB PostgreSQL different databases may use various types of authorizations. Common types include and . Database Native DBeaver Profile However, the number and type of connection properties are very dependent on the

Guide 24.2.ea. Page 3 of 1171. Kubernetes configuration AWS SSM configuration Shell commands Changing current user password Authentication models overview Database native DBeaver profile Kerberos authentication different databases may use various types of authorizations. Common types include and . Database Native DBeaver Profile However, the number and type of connection properties are very dependent on the if your connection requires encryption. configure SSL Kubernetes Configure Kubernetes settings if your database is hosted within a Kubernetes cluster. Setting Description Assign a specific name to

Quick Summary (from Google Cloud Next ’19 [1]) VM works on Istio! [1] Istio Service Mesh for VM Native, Chris Crall, Jianfei Hu, Google Cloud Next ‘19 #IstioCon Why Add VMs to the Mesh? ● = Why Service mesh ○ Istio control plane services (Pilot, Mixer, CA) accessible from the VMs ○ (optional) Kubernetes DNS server accessible from the VMs ● Onboard steps ○ Setup Internal Load Balancers (ILBs) for representation for the workloads themselves #IstioCon V1.6-1.8 Better VM Workload Abstraction Item Kubernetes Virtual Machine Basic schedule unit Pod WorkloadEntry Component Deployment WorkloadGroup Service

Full Traffic Proxy with Istio Jintao Zhang API7.ai #IstioCon About Me ● Apache APISIX PMC ● Kubernetes Ingress NGINX maintainer ● Microsoft MVP ● zhangjintao@apache.org ● https://github.com/tao12345666333 APISIX #IstioCon Apache APISIX ● ASF top level project ● Full Dynamic ● High Performance ● Cloud Native ● Out-of-the-box plugins ● Easy to extend https://github.com/apache/apisix #IstioCon Usage Scenarios Usage Scenarios for Apache APISIX ● L4/L7 Gateway（weibo、WPS） ● Microservices API Gateway（iQIYI） ● Kubernetes Ingress controller（UPYUN） ● https://github.com/apache/apisix-ingress-controller/ #IstioCon

Cloud, which based on these Opensource technologies. Before he was architect for Cloud Foundry on Kubernetes in IBM Cloud. #IstioCon ● Knative and Istio ● How Istio is leveraged in a Knative based platform that introduce event-driven and serverless capabilities for Kubernetes clusters for deploying, running, and managing serverless, cloud- native applications. It provides benefits: Focus on code Scale fully managed, serverless platform(including knative and istio) that can host all of your cloud native workloads: https://www.ibm.com/cloud/code-engine ● Kperf, a public Knative benchmark tool helps

io/latest/blog/2020/tradewinds-2020/ #IstioCon Other improvement areas ● Native Kubernetes API integration ○ Kubernetes Service APIs ○ Kubernetes Multi-cluster APIs ● Adopt & drive innovation in Envoy community

faster and easier We deliver a hybrid data platform with secure data management and portable cloud-native data analytics / 51 3 Confidential—Restricted Strategic Roadmap for Migrating Data Management to portability DATA ENG DATA WH AI/ML OP DB DATA FLOW Unified security & governance with open cloud-native storage formats Open data fabrics, lakehouses and data meshes with data anywhere at scale and billions of objects Scale API Compatibility Performance / 51 6 Confidential—Restricted … AND NATIVE INTEGRATION WITH BIG DATA WORKLOADS Support access control policy, lineage and governance Support