Containers, Kubernetes and Oracle Cloud Infrastructure

1. Containers, Kubernetes and Oracle
Cloud Infrastructure (OCI)
Jamal Arif
Oracle Cloud Infrastructure

2. Copyright © 2018, Oracle and/or its affiliates. All rights reserved.
Safe Harbor Statement
The following is intended to outline our general product direction. It is intended for
information purposes only, and may not be incorporated into any contract. It is not a
commitment to deliver any material, code, or functionality, and should not be relied upon
in making purchasing decisions. The development, release, and timing of any features or
functionality described for Oracle’s products remains at the sole discretion of Oracle.

3. 3Copyright © 2018, Oracle and/or its affiliates. All rights reserved. |
• What are containers?
• Orchestration of Container?
• Container engine for Kubernetes (OKE)
• Demo
Containers on Oracle Cloud Infrastructure

4. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
A little bit of history!
4
Dedicated Physical Server
Deployment ~ months
Hardware
Kernel / OS
Dependencies
Application
Hypervisor based Virtualization
Deployment ~ days (mins)
Hardware + Hypervisor
Kernel / OS
Dependencies
Application
VM
Kernel / OS
Dependencies
Application
VM
Containers
Deployment ~ mins (secs)
Hardware (VM or Physical)
Kernel/OS + container
Runtime (Docker)
Dependencies
Application
Container
Dependencies
Application
Container

5. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Containers are NOT VMs
Virtual Machines
● Each virtual machine (VM)
includes the app, the
necessary binaries and
libraries and an entire
guest operating system
Containers
● Containers include the app & all of its dependencies, but
share the kernel with other containers.
● Run as an isolated process in userspace on the host OS
● Not tied to any specific infrastructure – containers run
on any computer, infrastructure and cloud.
VMs
Containers
Copyright © 2017 Oracle and/or its affiliates. All rights reserved

6. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Docker
6

7. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
How to deploy Containers?
- Manually SSH into machines and run Docker
- Pro: Simple and easily understood
- Con: Not automated, no reproducible, doesn’t scale, doesn’t self heal
- Scripting or config management tools?
- Pro: Integrates with existing environments, easily understood
- Con: Doesn’t scale, doesn’t self heal, no scheduling mechanism
- Orchestration Systems
- Pro: Automated, reproducible, self healing, scalable
- Con: additional tooling and training required, some overhead

8. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
What is an Orchestration System
• Scheduling: Match containers to machines
– By resource needs (CPU, memory)
– By affinity requirements (Put A near B)
– By labels
• Replication : run N copies
• Handle machine failures
• Discovery: find peers and services in other containers
• Inspection: show current status
• Advanced Features like Load balancers, automated updates, handling
spikes via auto-scaling
• Examples : Mesos, Docker Swarm, Kubernetes

9. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Kubernetes
• Kubernetes is an open source system for automating deployment, scaling and management
of containerized applications
• K8s abstractions or primitives –
• Pods
• Nodes
• Deployment
• Services & Label
• Namespaces

10. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Kubernetes Architecture
• A k8s cluster consists of two types of machines:
• Master – brain of k8s
• Nodes or workers – running containers/Pods
• Master components
• API Server exposes the k8s API
• Scheduler places the containers into the Nodes
• Controller Manager – regulates the state of the cluster
through various controllers (node, replication..)
• Etcd – stores the state of the system
• Kubelet agent/Container runtime (Docker/rkt)
• A Node is an instance that serves as a worker machine in a k8s cluster. Node components
• Kubelet agent, a process responsible for communication between the k8s Master and Node
• Kube-proxy – manages the traffic for Pods

11. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |

12. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Kubectl
• Kubectl, a CLI tool is the official k8s client
• It is used for interacting with the k8s API and can be used to manage most k8s objects such as Pods
• $ kubectl version - displays two different versions: the version of the local kubectl tool, as well as the
version of the k8s API server
• $ kubectl cluster-info – URL response means kubectl is correctly configured
• $ kubectl get componentstatuses – displays the health of the cluster
• $ kubectl get nodes

13. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. | 13
Docker & Kubernetes Lead the Market
of enterprise companies
(500+ hosts) use Docker
of all the hosts at these
companies run Docker
60%
15%
40%
of Docker users also
use orchestrators
of these orchestration
users prefer Kubernetes80%
Containers (Docker) Orchestration (Kubernetes)

14. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Container Engine for Kubernetes - OKE

15. Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |
Oracle Strategy for Container Based Infrastructure
Deliver container services
that are complete, integrated
and open
• Continuous Integration &
Deployment, Registry,
Orchestration/Scheduling,
Management/Operations,
Analytics/Introspection
• With an application
development platform for
serverless and microservices
Complete Open Managed Services
Actively participate in com-
munity driven open source
container technologies
• Investing in Kubernetes, Docker,
Fn, & CNCF, with engineering
resources, code contributions &
sponsorships
• Active support from Oracle’s
portfolio of open source assets
(Java, etc.)
Differentiate on quality of
service and operational
excellence
• Full, transparent management
• Deployed to Oracle Cloud
Infrastructure
• Enterprise grade performance,
security, HA, and governance

16. 4 - 16Copyright © 2018, Oracle and/or its affiliates. All rights reserved.
OCI – Container Engine for Kubernetes (OKE)
OCI
DIY Container
Management
IaaS
Quickstart Experience
OSS Terraform Installer on GitHub
Unmanaged
Kubernetes Service
OCI – Container Engine
for Kubernetes
Enterprise Class Managed
Kubernetes Service
CaaS - OKE

17. Copyright © 2018, Oracle and/or its affiliates. All rights reserved.
Customer ManagedOracle Managed
Working with OKE and OCIR on OCI
OCI Container Engine
for Kubernetes
OCI Registry
Cluster Management
OKE Dashboard
in OCI Console
Oracle Cloud Infrastructure
Encryption for Data in
Transit (SSL) and at Rest
VM based Clusters and Nodes
Bare Metal Clusters and Nodes
Customer’s OCI
Account/Tenancy
HA - 3 Masters/etcd
across 3 ADs
17

18. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. Confidential – Oracle Restricted 18
OKE/OCIR Pricing and Packaging
Customer ManagedOracle Managed
OCI Container Engine
for Kubernetes
Cluster Management
Container Engine Dashboard
Oracle Cloud Infrastructure
OCI Registry
In-flight and at rest data
encryption
VM based Clusters and Nodes
Bare Metal Clusters and Nodes
Customer’s OCI
Account/Tenancy
HA - 3 Masters/etcd
across 3 ADsFree Free
Pay only for the
OCI resources used
to run your K8s clusters
(VM’s, Storage, LB, etc.)

19. Copyright © 2018, Oracle and/or its affiliates. All rights reserved.
Oracle Pipelines with OKE/OCIR

20. Copyright © 2018, Oracle and/or its affiliates. All rights reserved.
• Standard Docker & Kubernetes
Ø Deploy standard & open upstream
Docker and Kubernetes versions
for compatibility across
environments
• Registry Integration
Ø Full Docker v2 compatible private
registry to store and manage
images
• Container Engine
Ø Deploy and operate containers
and clusters
• Full integration to cloud
networking and storage
Ø Leverage the enterprise class
networking, load balancing and
persistent storage of Oracle Cloud
Infrastructure
20
Oracle Container Engine & Registry
Container Native Developer Friendly Enterprise Ready
• Streamlined Workflow
Ø Use your favorite CI to push
containers to the registry, then
Kubernetes to deploy to clusters
and manage operations
• Full REST API
Ø Automate the workflow, create
and scale clusters through full
REST API
• Built In Cluster Add-Ons
Ø Kubernetes Dashboard, DNS &
Helm
• Open Standards
Ø Docker Based Runtime
Ø Worker Node SSH Access
Ø Standard Kubernetes
• Simplified Cluster Operations
Ø Use the fully managed, highly
available registry, master nodes
and control plane
• Full Bare Metal Performance
and Highly Available IaaS
Ø Combine Kubernetes with bare
metal shapes for raw performance
Ø Deploy Kubernetes clusters across
multiple Availability Domains for
resilient applications
• Team Based Access Controls
Ø Control team access and
permissions to clusters
• Autonomous Clusters
Ø Maintain cluster size and
performance in face of node
failures and load fluctuations

21. Copyright © 2018, Oracle and/or its affiliates. All rights reserved. 21
Demo!!

22. Copyright © 2018, Oracle and/or its affiliates. All rights reserved.Copyright © 2017, Oracle and/or its affiliates. All rights reserved.
Questions
22
• Oracle Cloud Infrastructure
– https://cloud.oracle.com/en_US/tryit
• Containers on Oracle Cloud
– https://cloud.oracle.com/en_US/containers
• Documentations
– https://docs.cloud.oracle.com/iaas/Content/ContEng/Concepts/c
ontengoverview.htm
– https://docs.cloud.oracle.com/iaas/Content/Registry/Concepts/re
gistryoverview.htm
• https://github.com/oracle
• https://github.com/oracle/terraform-kubernetes-installer