This document summarizes a presentation about running microservices in production with IBM. It discusses that while initially deploying a microservice container may seem simple, there are many additional considerations for production including orchestration, availability, scalability, security, monitoring and logging. It then outlines IBM's managed Kubernetes offerings of IBM Cloud Kubernetes Service (IKS) and IBM Cloud Private (ICP) which address these needs, as well as services for continuous integration/delivery. Specific IBM tools are also highlighted that can help with areas like backup/restore, automation, and serverless computing.

1. Berlin, October 16-17 2018
Running Microservices in Production
with IBM
Nico Meisenzahl, panagenda

2. PLATINUM SPONSORS
GOLD SPONSORS
BRONZE SPONSORS
SILVER SPONSORS
SPEEDSPONSORING BEER SPONSOR

3. @panagenda Consultant.
@soccnx & @DockerRosenheim team member.
Blogger, speaker & IBM Champion.
Loves DevOps, K8s & Connections. His desk is a ping
pong table.
Nico Meisenzahl
@nmeisenzahl
https://meisenzahl.org
nico.meisenzahl@panagenda.com

4. Can’t be that hard...
docker run -d my-microservice
4

5. But wait, what’s about...
• Container Orchestration
• High availability
• Scalability
• Support, Updates
• Security
• Monitoring, Metrics
• Log management
• Tools, Services, Integrations
5

6. And there is even more...
• there are different Container runtimes
– Docker, containerd, rkt, ...
• and different Orchestrators
– Swarm, Kubernetes, Nomad, ...
• and even more tools/systems integrating with them
– Openshift, Apache Mesos, DC/OS, Rancher, IKS, AKS, GKE, EKS (just to mention
some of them)
6

7. Managed solution vs. own installation
• this does not mean Cloud vs. on-premises!
• pro managed solution
– ready to go
– less complicated
– support
– easy updates
– pre installed services like Monitoring, Registry, Security, GUI, ...
• pro own installation
– customizable on your needs
– integrate tools/services you need
7

8. A summary
• Kubernetes is de facto the standard
• I recommend (for most use-cases) to use a managed solution in
production
– provider will manage your cluster or provide setups/updates
– you can focus on your apps
• Bootstrap at least one Cluster to understand the underlying technology
– https://github.com/kelseyhightower/kubernetes-the-hard-way
8

9. How IBM can help
• IBM Cloud Kubernetes Service (IKS)
– full-managed Cloud solution
• IBM Cloud Private (ICP)
– on-premises solution
– Setup/updates provided by IBM
– integrates with on-premises environment (LDAP, WebSphere, ...)
• Feature overview
– CLI to manage your environment (ic/bx)
– Security features (Vulnerability Advisor, Authentication)
– Monitoring, Metrics, Log management, Registry and other tools/services
– integrated with other IBM services
– Integration between ICP and IKS
9

10. IBM Cloud Kubernetes Service (IKS) cluster versions
• Lite cluster
– free of charge, 30 days lifetime
– single-cluster only
– no Load Balancer, local persistent volume only and other restrictions
• Standard cluster
– Pay-as-you-go
– multi-node, multizone
– virtual, bare metal
– full feature set
10

11. IBM Cloud Private (ICP) bundles
• Community Edition
– free of charge
– Community Support only, not intended for production
– no master node high availability, no Vulnerability Advisor
• Cloud Native
– Support by IBM
– full feature set
– IBM Cloud Automation Manager
• Enterprise
– all Cloud Native features
– WAS ND, IBM MQ Advanced, IBM API Connect
• optional: IBM UrbanCode Deploy, IBM Cloud Foundry, and more
11

12. Continuous Integration / Continuous Delivery
• IBM Cloud Private (via Catalog)
– Jenkins, GitLab
– Microclimate
• IBM Cloud Toolchain
– IBM Cloud tools
– Integrations
12

13. Kubernetes tool/services which will help you
• Helm (part of ICP)
– a packet manager for Kubernetes
– ICP Catalog is based on Helm
• Heptio Ark
– a tools to backup/restore Kubernetes cluster resources and persistent volumes
• Istio (part of ICP)
– an open platform to connect, manage, and secure microservices
• cert-manager
– cert-manager is a addon to automate the management of TLS certificates
• Knative/Riff, Kaniko
– Serverless, Function as a Service (FaaS)
13

14. It’s demo time
• Automated deployment on IBM Kubernetes Service (IKS) with
– IBM Cloud Toolchain
– GitLab CI / CD
14

15. Slides will be available soon!
• https://medium.com/@nicomeisenzahl
Demo is available here
• https://gitlab.com/nmeisenzahl/soccnx14-demo
Questions?
@nmeisenzahl
https://meisenzahl.org
nico.meisenzahl@panagenda.com

16. PLATINUM SPONSORS
GOLD SPONSORS
BRONZE SPONSORS
SILVER SPONSORS
SPEEDSPONSORING BEER SPONSOR

17. Headquarters, Austria:
panagenda GmbH (Ltd.)
Schreyvogelgasse 3/10
AT 1010 Vienna
Phone: +43 1 89 012 89
Fax: +43 1 89 012 89-15
E-Mail: info@panagenda.com
Headquarters, Germany:
panagenda GmbH (Ltd.)
Lahnstraße 17
DE 64646 Heppenheim
Phone: +49 6252 67 939-00
Fax: +49 6252 67 939-16
E-Mail: info@panagenda.com
USA:
panagenda Inc.
60 State Street, Suite 700
MA 02109 Boston
Phone: +1 617 855 5961
Fax: +1 617 488 2292
E-Mail: info@panagenda.com
Germany:
panagenda Consulting GmbH (Ltd.)
Donnersbergstrasse 1
DE 64646 Heppenheim
Phone: +49 6252 67 939-86
Fax: +49 6252 67 939-16
E-Mail: info@panagenda.com
The Netherlands:
Trust Factory B.V.
11th Floor,
Koningin Julianaplein 10
NL 2595 AA The Hague
Phone: +31 70 80 801 96
E-Mail: info@trust-factory.com
© 2007-2015 panagenda
Make Your Data Work for You