Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Kubernetes v1.7 の主な変更点 / Kubernetes v1.7 features
Search
Takashi Kusumi
August 08, 2017
0
1.6k
Kubernetes v1.7 の主な変更点 / Kubernetes v1.7 features
Kubernetes Meetup Tokyo #6
2017.08.08
https://k8sjp.connpass.com/event/60324/
Takashi Kusumi
August 08, 2017
Tweet
Share
More Decks by Takashi Kusumi
See All by Takashi Kusumi
Recap: eBPF セッションつまみ食い / eBPF sessions @ KubeCon EU 2023
tksm
1
3.7k
Unit Testing for Prometheus Rules
tksm
7
3.1k
Z Lab の教育への取組 / Cloud Native Education Efforts at Z Lab
tksm
7
1.5k
Recap: Securing Kubernetes with Admission Controllers
tksm
2
1.6k
Istio Mutual TLS
tksm
0
740
Debugging Applications in Kubernetes
tksm
16
4.2k
Kubernetes with Prometheus
tksm
5
2.5k
kubectl apply の仕組み / How kubectl apply works
tksm
1
9.8k
Prometheus による Kubernetes モニタリングの基礎 / Kubernetes monitoring with Prometheus
tksm
3
3k
Featured
See All Featured
Side Projects
sachag
455
43k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
smashingmag
252
21k
Imperfection Machines: The Place of Print at Facebook
scottboms
268
13k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
31
2.2k
Java REST API Framework Comparison - PWX 2021
mraible
33
8.8k
Building a Scalable Design System with Sketch
lauravandoore
462
33k
Reflections from 52 weeks, 52 projects
jeffersonlam
351
21k
Documentation Writing (for coders)
carmenintech
73
5k
Practical Orchestrator
shlominoach
190
11k
Automating Front-end Workflow
addyosmani
1370
200k
CSS Pre-Processors: Stylus, Less & Sass
bermonpainter
358
30k
What’s in a name? Adding method to the madness
productmarketing
PRO
23
3.6k
Transcript
,VCFSOFUFTWך⚺ז㢌刿挿 5BLBTIJ,VTVNJ ;-BC
,VCFSOFUFTW Ӝ Wٔٔ٦أ Ӝ ⚺ז㢌刿挿 إُؗٔذ؍ך䓼⻉ أذ٦زؿٕך؟ه٦ز䓼⻉ 䭁䓸䚍ךぢ♳ Ӝ ,VCFSOFUFTכ٠剢嫣ךٔٔ٦أ؟؎ؙٕ
Wכ剢劣✮㹀
2JJUBח鎸鯹׃גְתׅ http://qiita.com/tkusumi/items/817cf85917efd24c7a4f
إُؗٔذ؍ך䓼⻉ Ӝ FUDEך农〾⻉ BMQIB Ӝ 1PE鸐⥋ⵖ䖴ׅ/FUXPSL1PMJDZָTUBCMFח Ӝ /PEFך埄ꣲ״⿑㺘חׅ/PEF"VUIPSJ[BUJPOך鷄⸇ Ӝ
,VCFMFUך5-4鏾僇剅ךٗ٦ذ٦ءّٝ BMQIB Ӝ 넝䏝ז湊叨ؚٗך鷄⸇ BMQIB
أذ٦زؿٕך؟ه٦ز䓼⻉ Ӝ 4UBUFGVM4FUך荈⹛،حفر٦ز Ӝ 4UBUFGVM4FUח넝鸞זأ؛٦ٕךؔفءָّٝ鷄⸇ SFBEZ䖉׆ח⚛חأ؛٦ٕדֹٌ٦سָ鷄⸇ Ӝ %BFNPO4FUך،حفر٦زך䓼⻉ 㾶娖הٗ٦ٕغحؙ Ӝ
ٗ٦ٕؕر؍أؙ17ה׃ג⢪ִMPDBMأزٖ٦آ BMQIB ⴓ侔ؿ؋؎ٕءأذيזוח剑黝
䭁䓸䚍ךぢ♳ Ӝ "1*،ؚٔ٦ءّٝ堣腉 CFUB Ӝ $VTUPN3FTPVSDF%FOJUJPOך㼪Ⰵ CFUB 5IJSE1BSUZ3FTPVSDFכ䐖姺
Ӝ 䭁䓸דֹ"ENJTTJPO$POUSPMMFSך堣腉 CFUB Ӝ فٓؖـٕז$MPVE1SPWJEFS BMQIB Ӝ $POUBJOFS3VOUJNF*OUFSGBDF $3* ך䓼⻉
ך➭䫙磏 Ӝ %PDLFS⟃♳ך㜥さ1PEⰻכⰟ剣ך1*%瑞⢪ֲ״ֲח さׇג1*%㉏겗鍑寸 QBVTF؝ٝذشָ1*% ءؚشٕ鷏״ֲח Ӝ 1PEךFUDIPTUT鏣㹀דֹ״ֲחז BMQIB
Ӝ /PEFךIPTU*1ָEPXOXBSE"1*ד《״ֲחז Ӝ LVCFMFUךNFUSJDTחD"EWJTPSך䞔㜠ָろתזֻז
WGFBUVSF䫙磏
FUDEך农〾⻉ BMQIB Ӝ ٔا٦أ珏ⴽ䭷㹀׃ג农〾⻉ "&4$#$זוח㼎䘔 Ӝ "1*؟٦غ٦ךؔفءّٝד䭷㹀 鏣㹀ؿ؋؎ٕ䭷㹀 Ӝ 农〾⻉ׁر٦ةכQSFYָאֻ
LTFODBFTDCDW ⦼ך鿇ⴓֽ农〾⻉ׁ kind: EncryptionConfig apiVersion: v1 resources: - resources: - secrets providers: - aescbc: keys: - name: key1 secret: ...... - identity: {} 鏣㹀⢽ &ODSZQUJPO$POH
/PEF"VUIPSJ[BUJPO Ӝ /PEFכ荈ⴓחأ؛آُ٦ׁٕ 1PEח秡בֻ䞔㜠ָֽ鋅״ֲח ꟼ⤘זְ4FDSFUכ鋅ִזֻז Ӝ إُؗٔذ؍ٔأָؙ剑㼭ꣲח Ӝ 钠〳ה"ENJTTJPO$POUSPMMFSך鏣㹀 BVUIPSJ[BUJPONPEF/PEF
BENJTTJPODPOUSPM/PEF3FTUSJDUJPO 1PE" 1PE# 4FDSFU" 4FDSFU# /PEF /PEF
넝䏝ז湊叨ؚٗ BMQIB Ӝ 鑫稢ז湊叨ؚٗ鎸ꐮדֹ SFRVFTU SFTQPOTFךCPEZזו Ӝ XFCIPPLغحؙؒٝسָ鷄⸇ 넝䏝ז湊叨כXFCIPPLך㼎䘔 Ӝ
湊叨ךهٔء٦כ稢ַֻⵖ䖴דֹ rules: - level: Request resources: - group: "" resources: ["configmaps"] namespaces: ["kube-system"] - level: Metadata resources: - group: "" resources: ["secrets", "configmaps"] 鏣㹀⢽
/FUXPSL1PMJDZָTUBCMFח Ӝ 1PEך鸐⥋ⵖ䖴דֹ Ӝ OFUXPSL⩎ך؟ه٦زָ䗳銲 Ӝ 鏣㹀⢽ Ⰻגך1PEך鸐⥋犜姺 OBNFTQBDFⰻך鏩〳
1PE# 1PE& 1PE" 1PE% 1PE$ 1PE' OBNFTQBDF9 OBNFTQBDF:
D"EWJTPSךًزؙٔأך《倯JOW Ӝ D"EWJTPSNFUSJDTך《倯ָ㢌刿 LVCFMFUNFUSJDTחろתזֻז Ӝ Wַ㢌גְךד岣䠐 Ӝ QSPNFUIFVTך鏣㹀㢌刿ָ䗳銲 ؒٝسه؎ٝز
_WY NFUSJDT W_W NFUSJDT W_ NFUSJDTDBEWJTPS
LVCFSOFUFTW Ӝ Wכ剢劣ٔٔ٦أ✮㹀 'FBUVSFGSFF[F $PEFGSFF[F WSFMFBTF Ӝ ⦐➂涸ח孡חזך %FCVH$POUBJOFST *NQMFNFOU*174CBTFEJODMVTUFSTFSWJDFMPBECBMBODJOH
8FBSFIJSJOH CJUMZ[MBCDBSFFST