Kailun Qin, Ant Group Putting an Invisible Shield on Kubernetes Secrets Agenda • K8s Secrets: Overview • TEE-based K8s Secrets Protection: Solution • Production Experience @ Ant Group • Demo • Summary

. . . . . . . . . . . . 57 Eeschema vi 7.7.1 Labels, hierarchical labels, global labels and invisible power pins . . . . . . . . . . . . . . . . . 58 7.7.1.1 Simple labels . . . . . . . . . . . . labels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 7.7.1.3 Invisible power pins . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 7.7.2 Global Switch units to millimeters. Choose the cursor shape (full screen/small). Toggle visibility of ”invisible” pins. Toggle free angle/90 degrees wires and buses placement. 2.10 Pop-up menus and quick editing

. . . . . . . . . . . . . . . . . . . 48 6.7.1 Labels, hierarchical labels, global labels and invisible power pins . . . . . . . . . . . . . . . . . . . . . . . 50 6.7.1.1 Simple labels . . . . . . labels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 6.7.1.3 Invisible power pins . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 6 the grid. Switch to inches. Switch to millimeters. Choose the cursor shape. Visibility of ”invisible” pins. Allowed orientation of wires and buses. Eeschema 13 / 139 2.11 Pop-up menus and quick

Switch units to millimeters. Choose the cursor shape (full screen/small). Toggle visibility of "invisible" pins. Toggle free angle/90 degrees wires and buses placement. 2.10. Pop-up menus and quick editing horizontal lines. Otherwise buses and wires can be placed at any orientation. Show hidden pins: Display invisible (or hidden) pins, typically power pins. Show page limits If checked, shows the page boundaries they must be connected, as for any other signal. Symbols such as gates and flip-flops may have invisible power pins. Care must be taken with these because: You cannot connect wires, because of their invisibility

the grid. Switch to inches. Switch to millimeters. Choose the cursor shape. Visibility of "invisible" pins. Allowed orientation of wires and buses. 2.11. Pop-up menus and quick editing A right-click parts (U1A, U1.A, U1-1, etc.) Show Grid: If checked: display grid. Show hidden pins: Display invisible (or hidden) pins, typically power pins. If checked, allows the display of power pins. Do not center they must be connected, as for any other signal. Components such as gates and flip-flops may have invisible power pins. Care must be taken with these because: You cannot connect wires, because of their invisibility

visible entity 'i' int k = l; // POD, introduces entity 'k' // POL, names invisible entity 'l' // entity 'l' is not yet declared // (relative invisibility) (POD), introduces entity 'l' int m = n; // POD, introduces entity 'm' // POL, names invisible entity 'n' // entity 'n' is declared in a different TU // (total invisibility) auto y = &f; // POL, names entity 'f', UL // FAIL: entity 'N::f' is invisible to UL auto z = &S::f; // POL, names entity 'f' in scope 'S', class member lookup (CML)

mils, or millimeters. Switches between full-screen and small editing cursor (crosshairs). Turns invisible pin display on/off. Switches between free angle and horizontal/vertical placement of new wires drawn with hidden power input pins which are connected implicitly. KiCad automatically connects invisible pins with type "power input" to a global net with the same name as the pin. For example, if a symbol nature, hidden pins are invisible and do not display their pin name. This makes it easy to accidentally connect two power pins to the same net. For this reason, using invisible power pins in symbols is

mils, or millimeters. Switches between full-screen and small editing cursor (crosshairs). Turns invisible pin display on/off. Switches between free angle and horizontal/vertical placement of new wires drawn with hidden power input pins which are connected implicitly. KiCad automatically connects invisible pins with type "power input" to a global net with the same name as the pin. For example, if a symbol nature, hidden pins are invisible and do not display their pin name. This makes it easy to accidentally connect two power pins to the same net. For this reason, using invisible power pins in symbols is

mils, or millimeters. Switches between full-screen and small editing cursor (crosshairs). Turns invisible pin display on/off. Switches between free angle, 90 degree mode, and 45 degree mode for placement drawn with hidden power input pins which are connected implicitly. KiCad automatically connects invisible pins with type "power input" to a global net with the same name as the pin. For example, if a symbol nature, hidden pins are invisible and do not display their pin name. This makes it easy to accidentally connect two power pins to the same net. For this reason, using invisible power pins in symbols is

mils, or millimeters. Switches between full-screen and small editing cursor (crosshairs). Turns invisible pin display on/off. Switches between free angle, 90 degree mode, and 45 degree mode for placement symbols used invisible power input pins, which make implicit global connections based on the pin name as described below. Beginning in KiCad 8, power symbols do not need to use invisible pins, and the drawn with hidden power input pins, which are connected implicitly. KiCad automatically connects invisible pins with type Power Input to a global net with the same name as the pin. For example, if a symbol