The Kubernetes 101 and some use experience sharing

1. 深入淺出
Kubernetes

2. Hello!
I am smalltown
MaiCoin Group Head of SRE
Taipei HashiCorp UG Organizer

4. Outline
K8s 101 Dive into K8s K8s in Action

5. K8s 101
01
MaiCoin 數位資產買賣平台
2013 年現代財富科技有限
公司成立，平台於 2014 年
上線，提供全年不間斷的個
人與法人交易服務，支援多
種幣別，主打小額入手並有
多元的支付管道－銀行轉
帳、超商繳款 (萊爾富)、台幣
餘額方式等，2021 年領先同
業完成台灣金管會的洗錢防
制法令遵循聲明。
☝ 以上為無情工商時間

6. What is Kubernetes?
🐦⬛Some Kind
of Bird?
🐕Some Kind of Dog?
🥭Some Kind of
Fruit?
🥙 Some Kind of
Food?
🏈 Some Kind of Sport? 🌏 A Country in Earth?

7. What is Container?
Virtual Machines Containers
Who is Responsible for ___ ?
● Container Lifecycle
● Service Discovery
● Configuration
Management
● Horizontal Scaling
● …

8. Containers & Kubernetes
Containers

9. Kubernetes Architecture

10. Master and Worker Nodes

11. Kubernetes Controllers

12. Kubernetes Schedulers

13. Container != Docker
Reference

14. Container Runtime
Reference

15. Dive into K8s
02
MAX 數位資產交易所
於 2018 年上線，提供用戶
P2P 交易撮合服務，為全球
排名於前 50 名且台灣最大
數位資產交易平台，亦為全
球首間將用戶法幣資金交由
銀行信託保管，真正落實法
幣信託安全保管；2018 年發
行 MAX Token ；2021 年領
先同業完成台灣金管會的洗
錢防制法令遵循聲明。
☝ 以上為無情工商時間

16. Kubernetes Pod
Reference

17. K8s Deployment & ReplicaSet
Reference

18. Services and Ingress
Reference

19. Kubernetes ConfigMaps
Reference

20. Kubernetes Secrets

21. K8s W/ Secret Management
Reference

22. Kubernetes StaefulSets
Reference

23. Kubernetes DeamonSets
Reference

24. Labels and Selectors
Reference

25. Resource Limitations and Priorities
Reference

26. Kubernetes Evicted Pods (1/2)
Reference

27. Kubernetes Evicted Pods (2/2)
Reference

28. Health Checks and Self-Healing
Reference

29. K8s in Action
03
AMIS 企業級數位資產託管
2016 年帳聯網路科技公司
成立，以太坊聯盟的創始成
員之一，獨家專利技術包含
伊斯坦堡拜占庭共識演算
法、Alice 階層式門檻簽章技
術，提供企業客製化區塊鏈
解決方案與企業級數位資產
保管服務，2021 年 AMIS
Custody 通過 SOC 2 Type I
及 Type II 安全性稽核，以及
ISO 27001 認證。
☝ 以上為無情工商時間

30. Application Deployment (1/2)
GNU/Linux
ELF Binaries Config in /etc
apt, yum, etc
Chef, Puppet, Ansible
Kubernetes
Images K8s Resource
Helm, Kustomize, etc
Argo CD, Flux 2, Fleet

31. Application Deployment (2/2)
Reference

32. Scalability: Horizontal Pod Autoscaler
Reference

33. Scalability: Vertical Pods Autoscaler
Reference

34. Scalability: Cluster Autoscaler
Reference

35. Appropriate Types of Applications
Stateless Stateful
Setup
Scale Out/Up
Backup
Upgrade
Operation

36. K8s Log Management
Reference

37. Morning W/ Prometheus Operator
Reference

38. Multi-Cluster Monitoring
Reference

39. Security and Update Management
Network Policy
RBAC
Image Scan
Version Upgrade
Logging/Monitoring

40. Common Issues No.1
● Configuration Errors
● Resource Constraints
● Dependency Issues
● Application Errors
Reference

41. Common Issues No.2
● Wrong Image Name
● Wrong Image Tag
● Network Problem or Image Repo
Not Available
● Pulling From a Private Registry But
Not imagePullSecret was Provided
Reference

42. Common Issues No.3
● Scheduling Issues
● Image Issues
● Dependency issues
Reference

43. Certificate VS. On-the-job training

44. Any Question?