Cloud Foundry Container Runtimeで快適Kubernetes運用

雖然執行 Docker Container 只需要一行指令，但是要利用 Docker 構築出 Immutable Infrastructure，並且無痛地運行在各個不同的環境中，可還有許多的事情要準備，其中最重要的就是幫 Immutable Infrastructure 建置完善的 CI/CD Pipeline ，在此場議程中會跟大家分享我 Build, Deployment, Test Docker Image 遇到的各種問題和做法，期望大家能藉由 Immutable Infrastructure 獲得更高效率的開發及運行環境

Kubernetes Meetup Tokyo #8 で発表した資料です

Technologie

Pivotal Japan - Platform Architect
Kazuto Kusama
@jacopen

• Cloud Application Platform
• PaaS
•
(AWS, Azure, GCP, vSphere,
OpenStack)
•

•
• Cloud Foundry
• Cloud Foundry
• Concourse CI, Prometheus BOSH

Project Kubo
• BOSH Kubernetes
Pivotal&Google
• 2017 2
• 2017 6 Cloud Foundry
Foundation
“Day 1” Build
•
•
“Day 2” Operate
•
•
•
Kubernetes BOSH
+

“A gift from the Cloud Foundry community.”
Sam Ramji, VP of product management for GCP

Cloud Foundry VM
VM VM VM VM
Cloud
Controller
UAA
garden-
runc
garden-
runc
... ... ... ...

VM
VM
VM VM VM VM
Cloud
Controller
UAA
garden-
runc
garden-
runc
... ... ... ...
VM
image

VM
VM
VM VM VM VM
Cloud
Controller
UAA
garden-
runc
garden-
runc
... ... ... ...
VM
image
AWS AMI
OpenStack
Glance image

BOSH Stemcell
VM VM VM VM
Cloud
Controller
UAA
garden-
runc
garden-
runc
... ... ... ...
VM
image
AWS AMI
OpenStack
Glance image
Stemcell

VM
VM VM VM VM
Cloud
Controller
UAA
garden-
runc
garden-
runc
... ... ... ...
VM
image
Stemcell

VM VM VM VM
Cloud
Controller
UAA
garden-
runc
garden-
runc
... ... ... ...
VM
image
Stemcell
VM
bundle install pip install
apt-get upgrade OS

BOSH
Release
VM VM VM VM
Cloud
Controller
UAA
garden-
runc
garden-
runc
... ... ... ...
VM
image
Stemcell
VM
Release

Stemcell VM VM
Release yaml
VM VM VM VM
Cloud
Controller
UAA
garden-
runc
garden-
runc
... ... ... ...
VM
image
Stemcell
Release

BOSH
yaml deployment
VM VM VM VM
Cloud
Controller
UAA
garden-
runc
garden-
runc
... ... ... ...
VM
image
Stemcell
Release
deployment
Infrastructure as code

OS
Stemcell VM
VM VM VM VM
Cloud
Controller
UAA
garden-
runc
garden-
runc
... ... ... ...
old
Stemcell
Release
NEW
Stemcell
Immutable Infrastructure

Stemcell, Release, Deployment 3
Immutable Infrastructure Infrastructure as Code
BOSH
Stemcell Release Deployment

CPI (Cloud Provider Interface)
AWS CPI GCP CPI Azure CPI vSphere CPI OpenSatck CPI

VM monit
VM VM VM VM
monit monit monit monit

VM bosh-agent
VM VM VM VM
agent monit agent monit agent monit agent monit
Messaging bus (NATS)

VM BOSH
VM VM VM VM
agent monit agent monit agent monit agent monit
Messaging bus (NATS)

VM (Resurrector )
VM VM VM
agent monit agent monit agent monit
Messaging bus (NATS)
VM
agent monit

Stemcell Release Deployment
AWS CPI GCP CPI Azure CPI vSphere CPI
OpenSatck
CPI
VM VM VM
agen
t
moni
t
agen
t
moni
t
agen
t
moni
t
Messaging bus (NATS)
VM
agen
t
moni
t

• Go!
• https://docs-cfcr.cfapps.io/
• v0.9.0
• GCP, AWS, vSphere, OpenStack

A turnkey solution to provision, operate and manage
enterprise grade Kubernetes clusters
+
+

BOSH
VMware GCP Azure Openstack AWS
Container
Registry
Kubernetes on BOSH (Kubo/CFCR)
NSX-T
GCP
Service
Broker
masteretcd workermasteretcd worker
PKS Control Plane

• VMware Registry
• Role-based
• AD/LDAP
• Clair
•
•
• Restful API

PKS API ODB-PKS
masteretcd worker
masteretcd worker
masteretcd worker
pks create mycluster cf create-service pks-odb

Cloud Foundry Container Runtimeで快適Kubernetes運用

Weitere ähnliche Inhalte

Was ist angesagt?

网易云K8S应用实践 | practices for kubernetes cluster provisioning, management and ap...

Xiaohui Chen

"On-premises" FaaS on Kubernetes

Alex Casalboni

Docker 進階實務班

Philip Zheng

DevOps Summit 2016 - The immutable Journey

smalltown

23 meetup rancher

Juraj Hantak

Cloud Foundry V2 | Intermediate Deep Dive

OpenStack Korea Community

[OpenInfra Days Korea 2018] Day 2 - E3-2: "핸즈온 워크샵: Kubespray, Helm, Armada를 ...

Microservices at scale with docker and kubernetes - AMS JUG 2017

Kube-AWS

빈스톡 첫인상 with Git

利用K8S實現高可靠應用

Kubernetes 架構與虛擬化之差異

Tectonic Summit 2016: The Origins of Kubernetes

CoreOS

Kubernetes上で動作する機械学習モジュールの配信＆管理基盤Rekcurd について

LINE Corporation

Giving Back to Upstream | DockerCon 2019

Phil Estes

CyberAgent における OSS の CI/CD 基盤開発 myshoes #CICD2021

whywaita

Kubernetes in kubernetes 搭建高可用環境

inwin stack

In this session we will show how to set up, from scratch, a git repository to centrally manage, with Anthos Config Management, all the configurations and security policies of multiple Kubernetes clusters in different environments, using git as the source of truth and applying the processes typically used in source code lifecycle. We will also explore what is possible to do with ACM Policy Controller, based on Open Policy Agent Gatekeeper, and configure constraints to enforce many of the possible security policies that an enterprise organization would require.

Using source code management patterns to configure and secure your Kubernetes...

Giovanni Galloro

A talk given at Craft Conf in Budapest, Hungary on May 10th, 2019. In this talk, Phil walked through the history of the need for a Container Runtime Interface (CRI) in Kubernetes, followed by an overview of all available CRI implementations, focusing on containerd, the CNCF core container runtime used in many clouds and projects. Phil demonstrated the "layers" of interaction from Kubernetes API, to CRI API to a container runtime's native API using an IBM Cloud Kubernetes cluster using containerd 1.2.6.

CraftConf 2019: CRI Runtimes Deep Dive: Who Is Running My Pod?

Phil Estes

這是我在 Study4.TW 舉辦的【Study4Love - 與大師對談】活動演講簡報 (2018/1/6)！ http://study4.tw/Activity/Details/12 Windows 容器技術自從隨著 Windows Server 2016 推出之後，已經有越來越多企業開始考慮導入容器化技術，藉此實現微服務化企業，打造一個分散式、輕量、可靠的企業服務。以往在 Windows 平台架設叢集伺服器架構，不外乎透過 Windows 內建的叢集架構來實現，但由於容器化技術的發展迅速，現在你可以有更快、更穩定、更容易延展的 Kubernetes (k8s) 叢集來管理 Windows 容器。本次講座將分享 Kubernetes 叢集架構在 Windows 容器的相關研究，帶大家認識這個極具潛力的容器管理平台！現場示範的 Demo Script 整理如下： https://gist.github.com/doggy8088/644dc9e5b6dd702805cafa2acb592056

迎接嶄新的Windows容器叢集架構：Kubernetes

Will Huang

Was ist angesagt? (20)

网易云K8S应用实践 | practices for kubernetes cluster provisioning, management and ap...

"On-premises" FaaS on Kubernetes

Docker 進階實務班

DevOps Summit 2016 - The immutable Journey

23 meetup rancher

Cloud Foundry V2 | Intermediate Deep Dive

[OpenInfra Days Korea 2018] Day 2 - E3-2: "핸즈온 워크샵: Kubespray, Helm, Armada를 ...

Microservices at scale with docker and kubernetes - AMS JUG 2017

Kube-AWS

빈스톡 첫인상 with Git

利用K8S實現高可靠應用

Kubernetes 架構與虛擬化之差異

Tectonic Summit 2016: The Origins of Kubernetes

Kubernetes上で動作する機械学習モジュールの配信＆管理基盤Rekcurd について

Giving Back to Upstream | DockerCon 2019

CyberAgent における OSS の CI/CD 基盤開発 myshoes #CICD2021

Kubernetes in kubernetes 搭建高可用環境

Using source code management patterns to configure and secure your Kubernetes...

CraftConf 2019: CRI Runtimes Deep Dive: Who Is Running My Pod?

迎接嶄新的Windows容器叢集架構：Kubernetes

Ähnlich wie Cloud Foundry Container Runtimeで快適Kubernetes運用

Tectonic Summit 2016: Brandon Philips, CTO of CoreOS, Keynote

CoreOS

Kubermatic.pdf

LibbySchulze

Kubermatic CNCF Webinar - start.kubermatic.pdf

LibbySchulze

Kubernetes has exploded in popularity among developers. But as operations teams prepare to support Kubernetes in production, they have more considerations—namely, how to operate a stable platform while maintaining security and compliance. How Kubernetes is configured and deployed has a marked impact on these attributes. Attend this session with Pivotal’s Vice President of Technology, Cornelia Davis, to learn the following: ● How to isolate tenants in your Kubernetes environment. ● How to make upgrading Kubernetes clusters boring. ● What you should—and shouldn’t—let your developers do. ● What you need around your Kubernetes clusters to keep them safe. Presenter : Cornelia Davis, Author and Vice President of Technology, Pivotal

6 Things You Need to Know to Safely Run Kubernetes

This session covers how the team at Ubisoft evolved For Honor's infrastructure using Amazon ECS and supporting systems (Amazon CloudFront, Amazon ElastiCache, Amazon Elasticsearch Service, Amazon SQS, and AWS Lambda, with monitoring through DataDog) from a proof of concept to an infrastructure as code solution. The team shares war stories about supporting both internal and live environments, and the challenges of bridging cloud and on-premises systems.

GAM307_Ubisoft How For Honor Runs Using Amazon ECS

You’re at the Cloud Foundry Summit, which means you are by definition a cloud-native enthusiast. There’s no question that building apps in this architectural style will produce resilient, scalable software in an agile manner, and allow you to operate it far more efficiently than you’ve been able to in the past. But you’ve also got a whole lot of software in your company’s portfolio that isn’t there yet. Do you have to resign yourself to the pains of managing those applications the old way until you can finally refactor them to be cloud-native? Kubo to the rescue. You can run legacy applications on Kubo without significant refactoring – pure and simple. As an added bonus, it allows you to satisfy the CIO mandate of running containers (check). But it’s far more than that – running those workloads on Kubo offers advantages over running them on traditional virtualized infrastructure. This session covers those advantages –resource consolidation, health management, multi-cloud and more. It will also present the abstractions in Kubernetes, things like pods and stateful sets, that support running legacy workloads in the cloud environments that are far more distributed and changing than they have been in the past. It’s a first step to cloud-native.

Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native

cornelia davis

Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native

Cloud computing is rapidly evolving with the introduction of revolutionary container technologies. Virtual machine based deployments are now being replaced with containers, Infrastructure as a Service (IaaS) platforms are being replaced with Containers as a Service (CaaS) platforms and monolithic applications are being decomposed into microservices. The world is now moving towards a new era of cloud computing with containerization. Aligning with this movement, enterprises that are building cloud solutions may need public, private and hybrid cloud platforms. In this session Imesh will walk you through how WSO2 Cloud and Platform as a Service (PaaS) solutions can be used to build a complete enterprise cloud solution. The first half of the session will cover WSO2 Cloud features; application hosting, service hosting, microservice hosting, API management and WSO2 Managed Cloud features. The second half will cover how WSO2 middleware can be deployed on PaaS solutions based on Kubernetes, Mesos DC/OS, Cloud Foundry and OpenShift.

WSO2Con EU 2016: WSO2 Cloud and Platform as a Service Strategy

WSO2

WSO2 Cloud and Platform as a Service Strategy

Imesh Gunaratne

Some of the best businesses today are deploying their code dozens of times a day. How? By making heavy use of automation, smart tools, and repeatable patterns to get process out of the way and keep the workflow moving. Come to this session to learn how you can do this too, using services such as AWS OpsWorks, AWS CloudFormation, Amazon Simple Workflow Service, and other tools. We'll discuss a number of different deployment patterns, and what aspects you need to focus on when working toward deployment automation yourself.

(ARC402) Deployment Automation: From Developers' Keyboards to End Users' Scre...

Operations practices have historically lagged behind development. Agile and Extreme Programming have become common practice for development teams. In the last decade, the DevOps and SRE movements have brought these concepts to operations, borrowing heavily from Lean principles such as Kanban and Value Stream Mapping. So, how does all of this play out if we’re using Kubernetes? In this class, Paul Czarkowski, Principal Technologist at Pivotal, will explain how Kubernetes enables a new cloud-native way of operating software. Attend to learn: ● what cloud-native operations are; ● how to build a cloud-native CI/CD stack; and ● how to deploy and upgrade an application from source to production on Kubernetes. Presenter: Paul Czarkowski, Principal Technologist, Pivotal Software

Cloud-Native Operations with Kubernetes and CI/CD

Cloud Native Night November 2019, Munich: Talk by Matthias Häusslerr (Cloud Consultant at Novatec) === Please download slides if blurred! === Abstract: Containers, applications, functions: When deploying workloads to the cloud, developers have various options. With this talk, we intend to clarify the different possibilities, with closer focus on Cloud Foundry, Kubernetes, Project Eirini, and Knative. We'll compare and contrast the latest experiences of those platforms in order to extract a meaningful comparison of their features from a developer perspective, providing answers to the following questions: - Which type of workloads are suitable for which platform? - Which programming model applies for each platform? - Where are the differences/where are the overlaps? - How mature are the individual solutions? - How simple and user-friendly are they? Additionally, we'll measure and compare key metrics that affect the developer experience (e.g., time to deploy, time to scale, and other such metrics). The overall goal is to better understand what makes each individual useful in the best way and how they can work together.

AKS - Azure Kubernetes Services - kubernetes meetup may 2018

Jorge Arteiro

Cloud Platforms "demystified": Docker, Kubernetes, Knative & Cloud Foundry

QAware GmbH

SpringOne Platform 2017 Cornelia Davis, Pivotal; Fred Melo, Pivotal Because of its well thought out and powerful abstractions, robust and cloud-native architecture, and the vibrant community around it, the use of Kubernetes for containerized workloads has surged. And while Kubernetes is theoretically ready to run applications in production, the actual viability is highly dependent on how Kubernetes itself is managed. In this session Cornelia and Fred will cover role of the container orchestration system in your IT landscape, and they’ll dive under the covers to show how it provides the enterprise-class Kubernetes services you need to trust your most critical workloads to it. Yes, technical details revealed!

PKS: The What and How of Enterprise-Grade Kubernetes

Mauricio (Salaboy) Salatino

AWS reinvent 2019 recap - Riyadh - Containers and Serverless - Paul Maddox

AWS Riyadh User Group

Delivering a production Cloud Foundry Environment with Bosh | anynines

anynines GmbH

The Challenges of building Cloud Native Platforms

AWS Webcast - Build Agile Applications in AWS Cloud for Government

Join us for this talk and learn how to programmatically create a fully managed continuous deployment pipelines for containerized applications.This talk will demonstrate the creation of end to end CI/CD pipelines utilizing the AWS Developer Tools suite and open source tools.We will focus on the integration with AWS container orchestrators as deployment targets, Mainly Amazon EKS.The talk will present and discuss advanced container based CI/CD Architecture patterns.

From Code to a running container | AWS Summit Tel Aviv 2019

AWS Summits

From Code to a running container | AWS Summit Tel Aviv 2019

Ähnlich wie Cloud Foundry Container Runtimeで快適Kubernetes運用 (20)

Tectonic Summit 2016: Brandon Philips, CTO of CoreOS, Keynote

Kubermatic.pdf

Kubermatic CNCF Webinar - start.kubermatic.pdf

6 Things You Need to Know to Safely Run Kubernetes

GAM307_Ubisoft How For Honor Runs Using Amazon ECS

Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native

WSO2Con EU 2016: WSO2 Cloud and Platform as a Service Strategy

WSO2 Cloud and Platform as a Service Strategy

(ARC402) Deployment Automation: From Developers' Keyboards to End Users' Scre...

Cloud-Native Operations with Kubernetes and CI/CD

AKS - Azure Kubernetes Services - kubernetes meetup may 2018

Cloud Platforms "demystified": Docker, Kubernetes, Knative & Cloud Foundry

PKS: The What and How of Enterprise-Grade Kubernetes

AWS reinvent 2019 recap - Riyadh - Containers and Serverless - Paul Maddox

Delivering a production Cloud Foundry Environment with Bosh | anynines

The Challenges of building Cloud Native Platforms

AWS Webcast - Build Agile Applications in AWS Cloud for Government

From Code to a running container | AWS Summit Tel Aviv 2019

Mehr von Kazuto Kusama

Concourseで快適な自動化の旅

Istio, Kubernetes and Cloud Foundry (修正版)

Istio, Kubernetes and Cloud Foundry

『コンテナ疲れ』と戦う、k8s・PaaS・Serverlessの活用法

コンテナ時代だからこそ要注目! Cloud Foundry

改めてPaaSについて考えてみる

Cloud Foundry Container-to-Container Networking

CFの便利機能を他の環境でも。Open Service Broker

グループ会社を巻き込んで勉強会をやってみるには

Docker PaaSとしての OpenShift, Deis, Flynn比較

ひしめき合うOpen PaaSを徹底解剖！ PaaSの今と未来

クラウドを『作る』ってどういうこと？

Lattice深掘り話

Cloud Foundryで学ぶ、PaaSのしくみ講座

OpenShift 3で、DockerのPaaSを作る話

知って欲しいPaaSの話

Cloud FoundryでDockerも.NETも。新しいDiegoの仕組み入門

KubernetesとOpenShiftの話

最近のKubernetesとDocker Machine/Swarmの話

DockerとKubernetesが作る未来