June 2021
Intermediate to advanced
335 pages
5h 50m
Chinese
Content preview from Kubernetes编程
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
发布控制器和
Operator
｜
177
常规的配置管理系统
也可以使用任何常规的配置管理系统来满足打包和发布
Operator
的需求，
比如
Ansible
、
Puppet
、
Chef
和
Salt
。
云原生语言
使用一系列被称为云原生编程语言的语言，比如
Pulumi
和
Ballerina
，它
们在基本的语言功能之上，还提供了对原生
Kubernetes
应用的打包和生命
周期管理的能力。
ytt
ytt
是基于修改版的
Google
配置语言
Starlark
实现的
YAML
模版工具。
它可以对
YAML
结构进行语义化的操作，并且关注可复用性。
Ksonnet
一个为
Kubernetes
配置文件服务的配置管理工具，最初由
Heptio
（现已
被
VMware
收购）开发，
Ksonnet
目前已经过时了，并且不再活跃维护了，
需要谨慎使用。
要进一步了解这里列出的这些方案，可以参考
Jesse Suen
的文章“
The State
of Kubernetes Configuration Management: An Unsolved Problem
”。
讨论完通用的打包方案，下面我们来看看打包发布控制器和
Operator
的一些
最佳实践。
7.1.5
打包的最佳实践
当你要打包发布你的
Operator
，确保你已经知晓下列最佳实践。无论你用什
么机制（
Helm
、
Kustomize
、
Shell
脚本等），这些实践经验都很适用：
•
提供一个合适的准入控制设置：这意味着需要为控制器提供一个专门的服
务账号，该账号只需要基于最小权限完成
RBAC
许可，参考“
7.2.1
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.