<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office"> <head> <meta name="viewport" content="width=device-width,initial-scale=1"> <!--[if gte mso 9]>
<xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
<o:PixelsPerInch>96</o:PixelsPerInch>
</o:OfficeDocumentSettings>
</xml>
<![endif]--> <style type="text/css">* a:hover{cursor:pointer;}</style> <style>body {-webkit-animation:bugfix infinite 1s;}@-webkit-keyframes bugfix {from {position:relative;}to {position:relative;}}</style> </head> <body style="word-wrap:normal;word-break:break-word"> <style>a {word-wrap:normal;word-break:break-word;}.background-contain {background-size:contain;}@media only screen and (max-width:600px) {.container {-webkit-text-size-adjust:none !important;}.container,.palm-one-whole {width:100% !important;min-width:100% !important;}.palm-one-half {width:50% !important;min-width:50% !important;box-sizing:border-box;}blockquote .container,blockquote .container div,blockquote .container table {width:auto !important;min-width:0 !important;position:relative !important;}img {max-width:100%;}.border-outer,.border-middle,.border-inner,.inner,[title="separator"] {width:100% !important;}.innercell {padding:8px !important;}.palm-block {display:block !important;}td.palm-one-whole {display:inline-block !important;padding:0;}td.palm-one-whole:first-child:not(:only-child) {margin-bottom:16px;}td.hostname {padding-top:3px !important;}}@media only screen and (min-width:601px) {.preview-card {max-width:600px !important;}}@media only screen and (min-device-width :320px) and (max-device-width :568px),only screen and (min-device-width :768px) and (max-device-width :1024px),only screen and (max-device-width:640px),only screen and (max-device-width:667px),only screen and (max-width:480px){.container {width:100% !important;min-width:100% !important;}.p,.small,li,font[size="2"],font[size="3"] {font-size:1em !important;}}@media only screen and (min-device-width :320px) and (max-device-width :568px),only screen and (min-device-width :768px) and (max-device-width :1024px),only screen and (min-device-width :1224px) {.message-wrapper {padding-top:6px;}.apple-only[style] {display:block !important;max-height:none !important;line-height:normal !important;overflow:visible !important;height:auto !important;width:100% !important;position:relative !important;}.no-apple {display:none !important;}form {font-size:inherit;}input[type="text"] {height:43px;padding-left:4px !important;}button:hover {cursor:pointer;}}@media only screen and (min-device-width :1224px) {.apple-mail-form {display:block !important;background-color:white !important;}}* [office365] .outlook-com-hidden {display:none !important;}* [office365] .outlook-com-button {display:block;}* [office365] .outlook-com-only {display:block !important;max-height:none !important;line-height:normal !important;overflow:visible !important;height:auto !important;width:100% !important;position:relative !important;}.ExternalClass {width:100%;}.ExternalClass .outlook-com-button {display:block;}.ExternalClass button {height:auto;}.ExternalClass .outlook-com-hidden {display:none !important;}.ExternalClass .outlook-com-only {display:block !important;max-height:none !important;line-height:normal !important;overflow:visible !important;height:auto !important;width:100% !important;position:relative !important;}.ExternalClass .ecxlabels {display:none !important;}.ExternalClass .ecxlabels {display:none !important;}.ExternalClass .ecxarrow {display:none !important;}.ExternalClass cite >div + div {padding:0 0 4px 0;}.ExternalClass .h1 {padding-bottom:5px;}.ExternalClass .h2 {padding-bottom:5px;}.ExternalClass .h3 {padding-bottom:5px;}.ExternalClass [lang="brand-pinterest"] {width:280px !important;}</style> <!--[if (gte mso 9)|(IE)]>
<style>
a, body {
font-family: 'Calibri', Arial, sans-serif;
}
img {
border: none !important;
-ms-interpolation-mode:bicubic;
}
td {
mso-line-height-rule:exactly !important;
}
.mso-card-inner table {
border-collapse: collapse !important;
mso-table-lspace:0pt;
mso-table-rspace:0pt;
vertical-align: top;
}
.outlook-com-only {
display: none !important;
font-size: 0 !important;
}
#mso-one-whole {
width: 100% !important;
}
.border-outer,
.border-middle,
.border-inner {
border: none !important;
}
.border-middle,
.border-inner {
width: 100% !important;
}
.mso-border-outer,
.mso-border-middle,
.mso-border-inner {
padding: 1px;
}
.mso-border-outer { background-color: rgb(245, 255, 255); }
.mso-border-middle { background-color: rgb(223, 246, 255); }
.mso-border-inner { background-color: rgb(153, 176, 225); }
</style>
<![endif]--> <table class="container" lang="container" dir="ltr" border="0" cellpadding="0" cellspacing="0" valign="top" style="width:100%"> <tr> <td valign="top" class="message-wrapper" style="color:#222;font-family:arial,sans-serif"> <!--[if mso]><table border="0" cellpadding="0" cellspacing="0" valign="top" style="border-collapse:separate;"><tr><td valign="top"><![endif]--> <div>Thank you Tim,</div><div><br></div><div>I am reading this document, great job.</div><img align="left" width="0" height="0" style="border:0;width:0px;height:0px" src="https://track.mixmax.com/api/track/v2/2Rm2DvnnAGciM5WH2/gIoNnLyVGc5hGQ1hnI" alt=""> <!--[if mso]></td></tr></table><![endif]--> </td> </tr> </table> <div> <div> <p data-m-apply-default-font="true"><br></p> <div class="gmail_extra"> <p data-m-apply-default-font="true"><br></p> <div class="gmail_quote"> On Tue, Feb 13, 2018 11:43 AM, Tim Allclair <span dir="ltr"> <a href="mailto:tallclair@google.com" target="_blank">tallclair@google.com</a></span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <u></u> <div dir="ltr"><div style="font-size:small">I am overdue to give an update of the work i've been doing around secure isolation in Kubernetes.</div><div style="font-size:small"><br></div><div style=""><span style="font-size:small"><a href="https://docs.google.com/document/d/1QQ5u1RBDLXWvC8K3pscTtTRThsOeBSts_imYEoRyw8A/edit?usp=sharing" target="_blank">This document</a> captures much of my current understanding of the space. To q</span>uote the goals of this document:</div><div style=""><font face="arial, helvetica, sans-serif"><br></font></div><div style=""><font face="arial, helvetica, sans-serif"><b style="font-weight:normal" id="m_7700994340720060383gmail-docs-internal-guid-65c11887-8d30-2179-e5db-f03f62426332"><ol style="margin-top:0pt;margin-bottom:0pt"><li dir="ltr" style="list-style-type:decimal;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap">Define the specific problems we are trying to address with secure isolation.</span></p></li><li dir="ltr" style="list-style-type:decimal;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap">Develop common terminology & understanding of the problem & solution space.</span></p></li><li dir="ltr" style="list-style-type:decimal;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap">Capture all the requirements, considerations, notes, resources, and discussions around Kubernetes secure isolation in single place to defrag isolation discussions.</span></p></li><li dir="ltr" style="list-style-type:decimal;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap">Provide a structure for evaluating potential solutions.</span></p></li></ol></b><br></font></div><div style="">This is <i>not</i> a solution proposal, but I am hoping that it will provide a smooth path for follow up discussions and lead to a widely accepted solution.</div><div style=""><br></div><div style="">I will be presenting this document at the <a href="https://github.com/kubernetes/community/tree/master/sig-node">sig-node community meeting</a> on 02-13 (tomorrow), and am hoping to discuss it in more detail in sig-node on 02-20 and sig-auth on 02-21. Please join the discussion in any meetings or comments on the doc.</div><div style=""><br></div><div style="">Thank you,</div><div style=""><br></div><div style="">Tim Allclair</div><div style="">@tallclair</div></div> </blockquote> </div> </div> </div> </div> <br><br><div style="font-size:12.8px">--</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">Xu Wang</div><div style="font-size:12.8px">CTO & Cofounder, Hyper</div><div style="font-size:12.8px">github/twitter/wechat: @gnawux</div><div style="font-size:12.8px"><a href="http://hyper.sh/" target="_blank" style="color:rgb(17,85,204)">http://hyper.sh</a></div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">Hyper_: Make VM run like container</div> </body> </html>