Kuber-what?! Learn about Kubernetes

Transcription

1

2 DEVNET-1999 Kuber-what?! Learn about Kubernetes Ashley Roach, Principal Engineer Evangelist

3 Agenda Objectives A brief primer on containers The problems with running containers at scale Orchestration systems Kubernetes background Pods, Deployments, Services, Replica Sets, Network Policies, Ingress, etc. Cisco tie-ins

4 What are containers?

5 Virtual Machine vs. Container App 1 App 2 Bins/Libs Bins/Libs App 1 App 2 Guest OS Guest OS Bins/Libs Docker Engine Bins/Libs Hypervisor / Host OS Server Host OS Server DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 5

6 Container Technical: Changing how we deploy code into reality. app1 Manual RPM DEB Puppet app2 app1 app2 app3 app3 app3 /usr /etc /bin / Baked container images. app1 app1 app 2 app2 /usr /etc /bin /usr /etc /bin Container 1 / Container 2 / Server One. Server One. app1 app1 app 2 app2 /usr /etc /bin /usr /etc /bin Manual RPM DEB Puppet (Treat as servers) OR Bake Images (AMI / Packer) / / VM one VM two Hypervisor Server One. DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 6

7 Goes away on restart FROM ubuntu:15.04 COPY. /app RUN make /app CMD python /app/app.py DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 7

8 Why use an orchestrator

9 Application Anatomy Login Service Photo Upload Web Server Like Service Comment Service Application Server Profile Service Logging Service Database Photo Processing Friend Requests DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 9

10 Pets vs Cattle DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 10

11 Redesign Image Sharing App Web front End ios App Android App API Service Team 1 Team 2 Team n Microservice 1 Microservice 2 Microservice n DB1 DB2 DBn DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 11

12 Advantages of Microservices Autonomous Microservice can be upgraded independent of other systems Microservice can iterate as quickly as it needs Polyglot application stacks (Technology Heterogenity) Other microservices are black boxes to other services Service can be used by other projects in the organization DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 12

13 Using docker CLI is all well and good as a developer.. But you re probably not going to manage production like this Container Container Container Docker Engine Linux Kernel Host / VM 1 Docker Engine Linux Kernel Host / VM 2 $ssh host1 host1# docker run container $ssh host2 host2# docker run container $ssh host3 host3# docker run container Docker Engine Linux Kernel Host / VM 3 DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 13

14 Container orchestration is a must. Once you ve built your containers and pushed them. Container Orchestrators manage running containers across a pool of resources for you Load Balancing Container Container Container Health Checks Kubernetes Log Aggregation / Access Developer API $kubectl scale deployment <name> --replicas=3 DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 14

15 What are other orchestrators? Docker Swarm / EE Apache Marathon Rancher (seem to be moving towards k8s) DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 15

16 What is kubernetes?

17 Borg GIFE 2015 paper from Google: Engineers who worked on Borg now work on Kubernetes: Lessons Learned: Multi-Job services could not be managed as a single entity One IP address per Machine 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

18 What is Kubernetes? Container Orchestration Keeping your containers up, scaling them, routing traffic to them Kubernetes!= Docker though K8S uses Docker (or CoreOS rkt) DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 18

19 Installation options MiniKube (local workstation) Installers (on-prem, hybrid, custom) Kops (part of core kubernetes.io github) Kubespray (Ansible + Terraform) Etc, etc Cloud Google Container Engine (GKE ) Azure Container Service Amazon EKS Etc DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 19

20 Sidebar: K8S the hard way Step-by-step tutorial of how to assemble a kubernetes cluster DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 20

21 Source:

22 Deploying Containers Kubectl & ~/.kube/config Minikube CLI The Real Way : CI system DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 22

23 Simple Architecture Kubernetes Registry CI/CD Persistence DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 23

24 Kubernetes Components

25 Kubernetes main Features Pods Deployments Services Ingress DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 25

26 Pods Group of one or more containers, shared storage, and options for how to run the containers Share IP address and port space Atomic unit of management Source: DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 26

27 Deployments Rolling upgrades Declare intent: How many replicas should be running of a given pod? Namespace Labels Ports that should be exposed DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 27

28 Services Abstraction for the mortality of Pods Provide single stable name and address for a set of pods inside the cluster (aka service discovery). Source: DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 28

29 Ingress Abstraction for services An Ingress is a set of rules for directing inbound traffic to a service. An Ingress Controller is a service that listens for the creation of new services and does reverse proxy (nginx, traefik, f5 loadbalancer) See: DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 29

30 K8S templates: deployment # k8s/dev/api-deployment.yaml apiversion: extensions/v1beta1 kind: Deployment metadata: name: rest-api-swagger spec: replicas: 2 template: metadata: labels: app: rest-api-swagger spec: containers: - name: rest-api-swagger image: ciscodevnet/rest-api-swagger:latest ports: - containerport: DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 30

31 K8S templates: service # k8s/services/api-service-lb.yaml kind: Service apiversion: v1 metadata: name: rest-api-swagger spec: type: LoadBalancer # or NodePort, etc. ports: - name: http port: 8080 targetport: protocol: TCP selector: app: rest-api-swagger DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 32

32 Manual kubectl deployment $ kubectl apply -f k8s/dev/api-deployment.yaml $ kubectl apply -f k8s/services/api-service-lb.yaml $ kubectl describe deployment $ kubectl describe service rest-api-swagger $ kubectl delete -f k8s/dev/api-deployment.yaml $ kubectl delete -f k8s/services/api-service-lb.yaml DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 33

33 Drone CI kubectl deployment deploy: k8s: image: containers.ex.com/devnet/drone-kubectl apiserver: #kubectl cluster-info token: $$K8S_TOKEN commands: - 'kubectl apply -f k8s/services/*.yaml - 'kubectl apply -f k8s/dev/*.yaml --record - 'kubectl describe service ${SERVICE_NAME} when: branch: master DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 34

34 Cisco tie-ins Google-Cisco Partnership Soon to be released Cisco Container Platform allows simple management of multiple kubernetes clusters aimed at enterprise hybrid cloud. On-premises, Cisco s hyper-converged platform, Cisco HyperFlex, will provide a cloudready solution for Kubernetes and containers, and management tools to enforce security and consumption policies. Developers will be able to create new applications in the cloud or on-premises consistently using the same tools, runtime and production environment. And more Contiv Container Networking Interface plugin Ties into ACI for policy-based controls DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 35

35 Come find me after today I ll be waiting Ashley Roach Cisco DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 36

36 Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at Cisco and/or its affiliates. All rights reserved. Cisco Public

37 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Tech Circle Meet the Engineer 1:1 meetings Related sessions DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 38

38 Thank you

39