Tim Bannister
5c970ca1b0
Some blog articles with custom URIs have been localized into Chinese without removing the custom URI from the front matter. Update these articles to use appropriate URIs.
121 lines
3.5 KiB
Markdown
121 lines
3.5 KiB
Markdown
---
|
|
title: " Kubernetes 社区每周聚会笔记- 2015年5月1日 "
|
|
date: 2015-05-11
|
|
slug: weekly-kubernetes-community-hangout
|
|
---
|
|
|
|
<!--
|
|
---
|
|
title: " Weekly Kubernetes Community Hangout Notes - May 1 2015 "
|
|
date: 2015-05-11
|
|
slug: weekly-kubernetes-community-hangout
|
|
url: /zh/blog/2015/05/Weekly-Kubernetes-Community-Hangout
|
|
---
|
|
-->
|
|
|
|
<!--
|
|
Every week the Kubernetes contributing community meet virtually over Google Hangouts. We want anyone who's interested to know what's discussed in this forum.
|
|
-->
|
|
每个星期，Kubernetes 贡献者社区几乎都会在谷歌 Hangouts 上聚会。我们希望任何对此感兴趣的人都能了解这个论坛的讨论内容。
|
|
|
|
<!--
|
|
|
|
* Simple rolling update - Brendan
|
|
|
|
* Rolling update = nice example of why RCs and Pods are good.
|
|
|
|
* ...pause… (Brendan needs demo recovery tips from Kelsey)
|
|
|
|
* Rolling update has recovery: Cancel update and restart, update continues from where it stopped.
|
|
|
|
* New controller gets name of old controller, so appearance is pure update.
|
|
|
|
* Can also name versions in update (won't do rename at the end).
|
|
|
|
-->
|
|
|
|
* 简单的滚动更新 - Brendan
|
|
|
|
* 滚动更新 = RCs和Pods很好的例子。
|
|
|
|
* ...pause… (Brendan 需要 Kelsey 的演示恢复技巧)
|
|
|
|
* 滚动更新具有恢复功能:取消更新并重新启动，更新从停止的地方继续。
|
|
|
|
* 新控制器获取旧控制器的名称，因此外观是纯粹的更新。
|
|
|
|
* 还可以在 update 中命名版本(最后不会重命名)。
|
|
|
|
<!--
|
|
|
|
* Rocket demo - CoreOS folks
|
|
|
|
* 2 major differences between rocket & docker: Rocket is daemonless & pod-centric.
|
|
|
|
* Rocket has AppContainer format as native, but also supports docker image format.
|
|
|
|
* Can run AppContainer and docker containers in same pod.
|
|
|
|
* Changes are close to merged.
|
|
|
|
-->
|
|
|
|
* Rocket 演示 - CoreOS 的伙计们
|
|
|
|
* Rocket 和 docker 之间的主要区别: Rocket 是无守护进程和以 pod 为中心。。
|
|
|
|
* Rocket 具有原生的 AppContainer 格式，但也支持 docker 镜像格式。
|
|
|
|
* 可以在同一个 pod 中运行 AppContainer 和 docker 容器。
|
|
|
|
* 变更接近于合并。
|
|
|
|
<!--
|
|
|
|
* demo service accounts and secrets being added to pods - Jordan
|
|
|
|
* Problem: It's hard to get a token to talk to the API.
|
|
|
|
* New API object: "ServiceAccount"
|
|
|
|
* ServiceAccount is namespaced, controller makes sure that at least 1 default service account exists in a namespace.
|
|
|
|
* Typed secret "ServiceAccountToken", controller makes sure there is at least 1 default token.
|
|
|
|
* DEMO
|
|
|
|
* * Can create new service account with ServiceAccountToken. Controller will create token for it.
|
|
|
|
* Can create a pod with service account, pods will have service account secret mounted at /var/run/secrets/kubernetes.io/…
|
|
|
|
-->
|
|
|
|
* 演示 service accounts 和 secrets 被添加到 pod - Jordan
|
|
|
|
* 问题：很难获得与API通信的令牌。
|
|
|
|
* 新的API对象："ServiceAccount"
|
|
|
|
* ServiceAccount 是命名空间，控制器确保命名空间中至少存在一个个默认 service account。
|
|
|
|
* 键入 "ServiceAccountToken"，控制器确保至少有一个默认令牌。
|
|
|
|
* 演示
|
|
|
|
* * 可以使用 ServiceAccountToken 创建新的 service account。控制器将为它创建令牌。
|
|
|
|
* 可以创建一个带有 service account 的 pod, pod 将在 /var/run/secrets/kubernets.io/…
|
|
|
|
<!--
|
|
|
|
* Kubelet running in a container - Paul
|
|
|
|
* Kubelet successfully ran pod w/ mounted secret.
|
|
|
|
-->
|
|
|
|
* Kubelet 在容器中运行 - Paul
|
|
|
|
* Kubelet 成功地运行了带有 secret 的 pod。
|
|
|