Intro

abstracts away the hardware infrastructure and exposes your whole data- center as a single enormous computational resource

Container

• linux namespace: each process sees its own personal view of the system (files, processes, network interfaces, hostname, and so on)
• cgroups (linux control groups): limit the amount of resources the process can consume (CPU, memory, network bandwidth, and so on)

VM and docker container

Image

filesystem, metadata

image is composed of layers

POD

• Why Pod?

resource isolation

• Container and pod relationship? Why Pod?

containers in the same pod shares the port and ip space.

• Pod allocation?

• Why assign label to pod?

• Replica Set and Replication Controller

Service