编辑“︁Kubernetes生态系统”︁（章节）

== 实际案例 ==  

=== 案例1：使用Argo CD实现GitOps ===  
Argo CD是一个声明式的GitOps工具，自动同步Git仓库中的配置到集群。工作流程如下：  

<mermaid>  
graph LR  
  A[Git仓库] -->|提交变更| B[Argo CD]  
  B -->|同步| C[Kubernetes集群]  
</mermaid>  

配置示例：  

<syntaxhighlight lang="yaml">  
apiVersion: argoproj.io/v1alpha1  
kind: Application  
metadata:  
  name: guestbook  
spec:  
  project: default  
  source:  
    repoURL: https://github.com/argoproj/argocd-example-apps.git  
    targetRevision: HEAD  
    path: guestbook  
  destination:  
    server: https://kubernetes.default.svc  
    namespace: default  
</syntaxhighlight>  

=== 案例2：使用Falco检测异常行为 ===  
Falco是一个运行时安全工具，通过规则检测容器中的异常活动。规则示例：  

<syntaxhighlight lang="yaml">  
- rule: Write below binary dir  
  desc: Attempt to write to a binary directory  
  condition: >  
    evt.type = write and dir and  
    (fd.directory = "/usr/bin" or fd.directory = "/usr/sbin")  
  output: >  
    Binary directory write detected (user=%user.name command=%proc.cmdline)  
</syntaxhighlight>