cloud native架构图，囊括了架构、模式、设计、开源软件等方方面面
需积分: 9 71 浏览量
2019-04-16
23:42:12
上传
评论 1
收藏 429KB PDF 举报
MetadataRuntime defaults
Container Image
Packages BinariesLibraries Data SecretsImage
ConfigsBase
Image Layers
Container Principles
Image Immutability
High Observability
Lifecycle Conformance
Process Disposability
Runtime Confinement
Self-Containment
Single Concern
Sidecar
Adapter
Initializer
Ambassador
Dispatcher
Worker Queue
Self Awareness
Container Pattern
K8s Master
Etcd
Kubelet
Kubeproxy
DevOps User
Scheduler
Controller Manager
node machine availabilty sets
Storage (CSI)Network (CNI)
CRI CRI
API-Server
Pod Design
LoadbalancerFirewall /DNS
Network Interfaces
Ports
Init
Containers
Metadata State
Pod
Container
Ports
probe lifecycle
Command
Args
Resources
Volumes
Secrets
ConfigMapsPlacingConstraints
SecurityConstraints
Containers
ImageResources
State
Volumes
Environment
SecurityContext
Pod A
https
Performer
Pod A
Pod B
Pod C
Execution Sequence
containers
init containers
Pod
Worker Queue
Persistence
Tasks
agent
Intel-VT-x Virtual Machine
io.kubernetes.cri-o.TrustedSandbox: ”false”
containerd-shim
Pod Namespace
Pod CGroup
Pod Sandbox
OCI Image
Containerd Client
OCI CRI Client
CNI
io.kubernetes.cri-o.TrustedSandbox: ”true”
cri-o
runc
cc-runtime
gvisor
runsv
frakti
hyperd
runV
dockerd
runc
K8s Minion Node
Container Runtime Engine
(CRI)
CRI-O
devops-gathering.io
Do you
need more?
PostStart
PreStop
Readyness
Liveness
Container 1
Container 2
Custom
Worker
Handler
cri containerd
runc
Kubeproxy
Kubelet
dockerd
runc
Container Runtime Engine (CRI)
Container
Pod X
Container
Container
Pod A
Container
Container
Pod B
Container
Sandbox
Pause Container
Container A
common
runc
master machine availabilty set
cri-o
OCI Runtime
Service
Data
Job
VirtualMachine
Function
Installer
Tool
Container Types
Packages
stateless
stateful
BaseImage
static
dynamic
Sandbox
Pause Container
Container A
Sandbox
Pause Container
Container A
App
Container
Sidecar
Worker
Execution
Container
Pod B
Custom
Worker
Handler
Worker
Execution
Container
Worker
Coordinating Pod
dockershim
TLS certs
Auth
CI-CD
Package
Security
NoSQL
DNS
Tools
Scale
Proxy
Operator
MetricsExporter UI Logging
Helm
Chart Museum
Database
Monitoring
K8s Extensions
Mix
Applications
RDMBS
Kubernetes Architecture
Kubernetes Manifests
Kubernetes and Helm
POWERED BY
CNCF
SPONSORED BY
rethink IT – Improve your systems with passion
Process Health
Image Immutability Principle
Build fashionable container systems with Kubernetes
Runtime Confinement Principle
High Observability Principle
Process Disposability Principle
Self-Containment Principle
Lifecycle Conformance Principle
Single Concern Principle
Container
Metrics
Tracing
Logs
Readyness
Container 1
Single concern
Container 2
Single concern
Deployment Unit (Pod)
Container
SIGTERM
SIGKILL
PreStop
PostStart
Liveness
Start/Stop
Container
SecretsConfigMaps
Network Storage
Container
app.jar
Java
Run time
Build time
Container
go app
alpine
Dev Test Prod
Container
CPU
Memory
Limits & Policies
Image Size
Security Constrains
GitLab/CI
debian-slim
Sidecar Pattern Ambassador Pattern
Initializer Pattern
Application Sidecar
node.js git
Volume
Pod
Adapter Pattern
Self Awareness Pattern
Worker Queue PatternDispatcher Pattern
mariadb
mssql-linux
mysql
mysqldump
percona
percona-xtradb-cluster
postgresql
aerospike
centrifugo
cockroachdb
consul
elastic-stack
elasticsearch
elasticsearch-curator
hadoop
hazelcast
janusgraph
mcrouter
memcached
metabase
minio
mongodb
mongodb-replicaset
nats
neo4j
pachyderm
presto
rabbitmq
rabbitmq-ha
redis
redis-ha
rethinkdb
spark
stolon
zeppelin
datadog
heapster
influxdb
prometheus
auditbeat
cerebro
chronograf
coscale
dmarc2logstash
elastabot
elastalert
filebeat
fluent-bit
fluentd-elasticsearch
sumologic-fluentd
elasticsearch-exporter
heartbeat
kapacitor
kube-state-metrics
metrics-server
newrelic-infrastructure
prometheus-xxx-exporter
sematext-docker-agent
sensu
sentry
stackdriver-exporter
sumokube
grafana
kibana
kube-ops-view
kubernetes-dashboard
kubewatch
phpmyadmin
weave-cloud
weave-scope
bitcoind
dask
dask-distributed
distributed-tensorflow
dokuwiki
drupal
ethereum
ghost
hlf-ca
hlf-couchdb
hlf-ord
hubot
inbucket
jasperreports
joomla
lamp
locust
luigi
magento
mailhog
mediawiki
minecraft
mood
opencart
openvpn
orangehrm
osclass
owncloud
parse
phpbb
redmine
rocketchat
rookout
schema-registry-ui
selenium
sonarqube
tensorflow-notebook
tensorflow-serving
wordpress
openebs
Container Runtime Engines
Service
Ingress
Ingress Proxy
Endpoints
Loadbalancer
watch
ClusterIP
watch
request/response
request/response
selector
manage manage
manage
HorizontalPod
Autoscaler
NetworkPolicy
Quota
ServiceAccount
Role
RoleBinding
PodSecurityPolicy
PodDisruptionPolicy
Namespace
PersistentVolumeClaims
StorageClass
NodePort
Loadbalancer
ExternalName
Kubernetes Service Architecture
Dockerd and CRI-Containerd
kubeconfig
K8s API-Service
Namespace: kube-system
Tiller Release
ConfigMap
PodSecurityPolicy
NetworkPolicy
LimitRanges
Tiller Service
Tiller Roles
Role
RoleBinding
Service
Account T
Namespace: X with App I Release v1.0.1
Helm Client
Tiller Pod
Helm Deployment
Container Images
Container Principles
Container Pattern
Kubernetes Core Components
Kube
Aggregator
Kube
Resources
decoding
defaulting
pruning
conversion
mutating
webhooks
validating
webhooks
Admission Controller
result
conversion
encode
Custom Resource Handlers
Authn/z
Naming Controller CRD Finalizer
API-Extension
request response
AlwaysPullImages
DefaultStorageClass
DefaultTolerationSeconds
DenyExecOnPrivileged
DenyEscalatingExec
ExtendedResourceToleration
ImagePolicyWebhook
NodeRestriction
OwnerReferencesPermissionEnforcement
PodNodeSelector
PersistentVolumeClaimResize
PodPreset
PodSecurityPolicy
PodTolerationRestriction
Priority
ResourceQuota
SecurityContextDeny
ServiceAccount
ValidatingAdmissionWebhook
MutatingAdmissionWebhook
NamespaceLifecycle
NamespaceExists
NamespaceAutoProvision
LimitRanger
LimitPodHardAntiAffinityTopology
InitialResources
Initializers
Etcd
K8s API-Server
validation
REST-Logic
conversion
pruning
GET
CREATE
LIST
UPDATE
DELETE
WATCH
EXEC
defaulting
Design of Controllers and Operators
Service
Ambassador
Retry
Circuit Breaking
Monitoring
Auth
Audit
Tracing
Security
bee42.com
© 2019
bee42 solutions gmbh – Bochum
PodDisruptionBudget
PodSecruityPolicy
NetworkPolicy
LimitRange
DaemonSet ReplicationController
ConfigMap
Secret
StorageClass
PriorityClass
ResourceQuota
PodPreset
gcePersistentDisk
PodTemplate
ComponentenStatus EventControllerRevision
Node
CertificateSigningRequest
ServiceAccount
Kubernetes Resources
ReplicatSet
Deployment
HorizontalPodAutoscaler
Dispatcher
request
Producer
response
Namespace
CustomResourceDefinition
Service
Ingress
Job
CronJob
(Cluster)Role
(Cluster)RoleBinding
Endpoint
Container
Pod
Container
Container
PersistentVolumeClaim
StatefulSet
PersistentVolume
K8s Cluster
Standard Controller
Deployment
ReplicaSet
common
runc
cc-runtimecommon
dockershim
dockerd
containerd
OCI Image
Containerd Client
OCI CRI Client
CNI
cri-containerd
OCI Runtime
runc
containerd-shim
runc
Application
Tomcat
Adapter
metrics
gateway
Pod
Application Ambassador
PhP Proxy
Pod
localhost
jmx
Container A
/etc/annotations
/etc/labels
Volume A
Container B
inject
API-Server
Pod
query
mount
Pod
Manifest
+
Runtime
Information
ENV_A1
ENV_A2
ENV_B1
ENV_B2
ro
rw
Secrets
ConfigMaps
K8s-Client
Service Roles
Role
RoleBinding
Service
Account S
Deployment
ReplicaSet
HorizontalPodAutoscaler
Containers
Pod
(Cluster)Role
ServiceAccount
Namespace
(Cluster)RoleBinding
K8s manifest I
K8s manifest II
K8s manifest X
Release
ConfigMap
zsh/bash
Tiller
local helm env
$HELM_HOME
Chart
repositories
values.yaml
templates/*.yaml
Chart
Release
Chart.yaml
Helm
Client
~/.kube/config
Design of Helm
repo
fetch
inspect
search
serve
add
index
list
remove
update
Repository
dependency
create
build
update
list
template
verify
lint
package
Charts
get
Release
manifest
values
hooks
history
rollback
status
Certs
requirements.yaml
Admin Roles
ClusterRole
Service
Account A
ClusterRoleBinding
Service
Endpoints
Ingress
App I Release v1.0.1
grpc
https
plugin
completion
init
home
version
install
list
remove
update
Environment
reset
Container
Container
Pod A
Container
Container
Pod B
Container
Container
Pod X
manage
dex
keycloak
kiam
kube2iam
kuberos
nginx-ldapauth-proxy
oauth2-proxy
openldap
anchore-engine
cert-manager
kube-lego
magic-namespace
nginx-lego
sysdig
vault-operator
artifactory
artifactory-ha
chartmuseum
docker-registry
mission-control
sonatype-nexus
verdaccio
buildkite
concourse
drone
gitlab-ce
gitlab-ee
gocd
jenkins
keel
spinnaker
downwardAPI
CSI
FlexVolume
awsElasticBlockStore
projectedglusterfs
emptyDirazureDisk
portworxVolumehostPath
fc (fibre channel)azureFile
quobyteiscsi
flockercephfs
nfs
scaleIO
storageos
vsphereVolume
rbd
Apache
@PRossbach
@bee42solutions
bee42.com
K8s-poster@bee42.com
Author
Peter is founder of the bee42 solutions.
The goal of the company is to create
fashionable IT systems. We share our
ideas, our knowledge and train people.
Peter is Apache Member, Tomcat
Committer, Cloud Native Architect,
Agile consultant and Infracoder.
The bee42 works in Bochum the heart of
the Ruhr Valley and organizes the
DevOps Gathering conference.
Connect with us and create independent self healing systems
with Container, Kubernetes and Cloud Native Technologies.
Peter Rossbach
Defaults
python
debian
https://kubernetes-charts.
storage.googleapis.com
Concept: Peter Rossbach -- Design: Petra Rüth & Regina Potthoff
No Print | No Digital Copies | No RedistributionRelease: April 2019 © bee42.com
delete
install
upgrade
list
etcd-operator
kafka-operator
kanister-operator
influxdb-operator
postgres-operator
prometheus-operator
redis-operator
rook-ceph-operator
tf-operator
vault-operator
envoy
kong
linkerd
metallb
namerd
nginx-ingress
tomcat
traefik
acs-engine-autoscaler
aws-cluster-autoscaler
cluster-autoscaler
k8s-spot-rescheduler
ark
chaoskube
efs-provisioner
eventrouter
gcloud-endpoints
gcloud-sqlproxy
ipfs
katafygio
kube-slack
nfs-client-provisioner
nfs-server-provisioner
openebs
risk-advisor
spotify-docker-gc
coredns
external-dns
unbound
资源评论
