SlideShare a Scribd company logo
1 of 36
Download to read offline
Helm + GitOps =
⚡⚡⚡
Scott Rigby, Developer Experience @Weaveworks
Weave Online User Group – Jan 11, 2021
1
● High-level Value
○ Benefits of Helm In General
○ Benefits of Helm in GitOps
● Flux 2 Awesomeness For Helm Users
● When to Migrate
● Demo: Helm Operator -> Controller Migration
● Q&A
2
Overview
Benefits of Helm in
General
3
Increases Velocity
4
Uses existing, well maintained "charts" to successfully install applications in kubernetes
🚀
Simplifies Kubernetes Complexity
5
Helps teams track resources by grouping them together in "releases"
☸
Decreases Downtime
6
Allows automatic recovery from rollout failures
💥
Improves Reliability
7
Decreases k8s configuration errors, via Helm's templating
🔨
Benefits of Helm in
GitOps
8
● GitOps is an app dev and operations methodology
● GitOps is a paradigm, not a specific tool or technology.
● GitOps applies to everything
and brings business value.
What is GitOps? … and why do I want it?
9
GitOps leverages:
● an entire system that is described declaratively
● code that is version controlled and
● software agents that reconcile and ensure correctness
(along with alerts, etc).
4 Principles of GitOps
10
Reconciliation
11
● All CI/CD systems experience points of error
○ DNS issues
○ Service API issues
○ Calling the Helm client for various reasons
● GitOps to the rescue
○ Flux uses Kubernetes for reconciliation
○ While scripted commands must be analyzed and rerun on failure, GitOps
assumes inevitable points of failure, so continues to ensure your Helm Release
● Your engineers still have control even with automation
○ Automatic reconciliation can sound scary, but you still have control
○ Can pause reconciliation at any time per Helm Release
🔁
Reliability and Consistency
12
● Desired state is declared in git
○ If your cluster has a problem, no need to manually identify the missing pieces or
manually manage a fix. Let kubernetes do it for you
● Retries
○ Flux adds retries functionality to Helm’s existing automatic rollback functionality
● Enhanced Debugging
○ Flux adds an option to keep last failed release for debugging
○ Useful for non-production environments
🧱
Observability
13
● All in One Place
○ Flux colocates logging and errors with your resources in kubernetes
○ More accessible by multiple team members all in one place
○ Easily integrates with existing telemetry export tools like Prometheus, which is
supported by default
🕵‍♀
Auditability
14
● Clear Audit Trail
○ Everything is controlled through git pull requests
○ Git history provides a sequence of transactions. This also allows you to recover
state from any snapshot
○ Notification controller integrates with Slack alerts and other team
communication tools
⛓
Flux GitOps introduces an additional layer of reliability, consistency, observability, and
auditability to the benefits of using Helm in any other way.
Better Together
15
Flux 2 Awesomeness
For Helm Users
16
Pause/Resume Reconciliation per Release
17
Flux 1 required pausing the Entire
Operator
Flux 2 allows pausing per Helm
Release
Helm Controller Depends On feature
18
More memory efficient than a large umbrella chart
Example: ingress controller and cert-manager installed
before applications that rely on those
SemVer Ranges for Charts
19
Flux 2 supports semver ranges from Helm
repositories
Examples: >=4.0.0 or <5.0.0
For details, compare the Helm Controller docs
with the Helm Operator docs
Install Charts from Storage
Bucket Source
20
S3, google storage, Azure blob storage, KFC
etc
Add a Helm Repo Without Restarting
21
Flux 1 Helm Operator required restarting
whenever a new Helm repo was added
No longer in Flux 2 Helm Controller! We
now use references
Greater isolation once again
Helm Repo Reference Reusability
22
Define a Helm repo once, use everywhere
Now Helm Releases can reference a Repo
by name
Optional Credentials Per git or Helm Repo
23
Greater flexibility, more
composability
If you have multiple sources locked
down in different ways, it’s no longer
a problem
Allows you to enforce principle of
least privilege more easily
Out of Cluster Helm Releases
24
Have an out of cluster experience
Flux can also sync Cluster API manifests,
allowing you to spin up multiple clusters
from a single management cluster
Demo: Helm Operator ->
Controller Migration
25
26
27
28
29
30
When To Migrate
31
Flux 1 or 2?
32
New users should prob go straight to Flux 2
Existing users can migrate to Flux 2 now (there is an
upgrade path, which we'll demo)
Image automation is available as a prerelease. If you require
this feature, please give it a go in non-production and let us
know how it goes! Hang tight with Flux 1 in production for
the moment. See docs for current status
Complex charts may raise use cases we haven't yet tested
for in Flux 2. Please test these in non-production and help
us by posting any issues. Thanks! 🌈 🦄 🙌
Thanks!
33
Alison Dowdney collaborated
on Slides!
Hidde Beydals collaborated
on demo! 🛠
Resources
34
Demo: https://gist.github.com/scottrigby/c2f34d2557113a1681acfc1fac969305
Flux Roadmap: https://toolkit.fluxcd.io/roadmap/
Q&A
35
谢谢
Thank You
Danke
Obrigado
Спасибо!
Merci
‫ﺷﻛرا‬

More Related Content

More from Weaveworks

How to Avoid Kubernetes Multi-tenancy Catastrophes
How to Avoid Kubernetes Multi-tenancy CatastrophesHow to Avoid Kubernetes Multi-tenancy Catastrophes
How to Avoid Kubernetes Multi-tenancy CatastrophesWeaveworks
 
Building internal developer platform with EKS and GitOps
Building internal developer platform with EKS and GitOpsBuilding internal developer platform with EKS and GitOps
Building internal developer platform with EKS and GitOpsWeaveworks
 
GitOps Testing in Kubernetes with Flux and Testkube.pdf
GitOps Testing in Kubernetes with Flux and Testkube.pdfGitOps Testing in Kubernetes with Flux and Testkube.pdf
GitOps Testing in Kubernetes with Flux and Testkube.pdfWeaveworks
 
Intro to GitOps with Weave GitOps, Flagger and Linkerd
Intro to GitOps with Weave GitOps, Flagger and LinkerdIntro to GitOps with Weave GitOps, Flagger and Linkerd
Intro to GitOps with Weave GitOps, Flagger and LinkerdWeaveworks
 
Implementing Flux for Scale with Soft Multi-tenancy
Implementing Flux for Scale with Soft Multi-tenancyImplementing Flux for Scale with Soft Multi-tenancy
Implementing Flux for Scale with Soft Multi-tenancyWeaveworks
 
Accelerating Hybrid Multistage Delivery with Weave GitOps on EKS
Accelerating Hybrid Multistage Delivery with Weave GitOps on EKSAccelerating Hybrid Multistage Delivery with Weave GitOps on EKS
Accelerating Hybrid Multistage Delivery with Weave GitOps on EKSWeaveworks
 
The Story of Flux Reaching Graduation in the CNCF
The Story of Flux Reaching Graduation in the CNCFThe Story of Flux Reaching Graduation in the CNCF
The Story of Flux Reaching Graduation in the CNCFWeaveworks
 
Shift Deployment Security Left with Weave GitOps & Upbound’s Universal Crossp...
Shift Deployment Security Left with Weave GitOps & Upbound’s Universal Crossp...Shift Deployment Security Left with Weave GitOps & Upbound’s Universal Crossp...
Shift Deployment Security Left with Weave GitOps & Upbound’s Universal Crossp...Weaveworks
 
Securing Your App Deployments with Tunnels, OIDC, RBAC, and Progressive Deliv...
Securing Your App Deployments with Tunnels, OIDC, RBAC, and Progressive Deliv...Securing Your App Deployments with Tunnels, OIDC, RBAC, and Progressive Deliv...
Securing Your App Deployments with Tunnels, OIDC, RBAC, and Progressive Deliv...Weaveworks
 
Flux’s Security & Scalability with OCI & Helm Slides.pdf
Flux’s Security & Scalability with OCI & Helm Slides.pdfFlux’s Security & Scalability with OCI & Helm Slides.pdf
Flux’s Security & Scalability with OCI & Helm Slides.pdfWeaveworks
 
Flux Security & Scalability using VS Code GitOps Extension
Flux Security & Scalability using VS Code GitOps Extension Flux Security & Scalability using VS Code GitOps Extension
Flux Security & Scalability using VS Code GitOps Extension Weaveworks
 
Deploying Stateful Applications Securely & Confidently with Ondat & Weave GitOps
Deploying Stateful Applications Securely & Confidently with Ondat & Weave GitOpsDeploying Stateful Applications Securely & Confidently with Ondat & Weave GitOps
Deploying Stateful Applications Securely & Confidently with Ondat & Weave GitOpsWeaveworks
 
Robust Network Security and Observability with GitOps and Cilium
Robust Network Security and Observability with GitOps and CiliumRobust Network Security and Observability with GitOps and Cilium
Robust Network Security and Observability with GitOps and CiliumWeaveworks
 
Intro to GitOps & Flux.pdf
Intro to GitOps & Flux.pdfIntro to GitOps & Flux.pdf
Intro to GitOps & Flux.pdfWeaveworks
 
Simplifying Hybrid Kubernetes with Weaveworks and EKS.pdf
Simplifying Hybrid Kubernetes with Weaveworks and EKS.pdfSimplifying Hybrid Kubernetes with Weaveworks and EKS.pdf
Simplifying Hybrid Kubernetes with Weaveworks and EKS.pdfWeaveworks
 
Weave GitOps 2022.09 Release: A Fast & Reliable Path to Production with Progr...
Weave GitOps 2022.09 Release: A Fast & Reliable Path to Production with Progr...Weave GitOps 2022.09 Release: A Fast & Reliable Path to Production with Progr...
Weave GitOps 2022.09 Release: A Fast & Reliable Path to Production with Progr...Weaveworks
 
Building a Security First Approach Across Hybrid Cloud with GitOps and Policy...
Building a Security First Approach Across Hybrid Cloud with GitOps and Policy...Building a Security First Approach Across Hybrid Cloud with GitOps and Policy...
Building a Security First Approach Across Hybrid Cloud with GitOps and Policy...Weaveworks
 
Security & Resiliency of Cloud Native Apps with Weave GitOps & Tetrate Servic...
Security & Resiliency of Cloud Native Apps with Weave GitOps & Tetrate Servic...Security & Resiliency of Cloud Native Apps with Weave GitOps & Tetrate Servic...
Security & Resiliency of Cloud Native Apps with Weave GitOps & Tetrate Servic...Weaveworks
 
DevOps Automation with GitOps: Consistent and Secure End to End Deployments
DevOps Automation with GitOps: Consistent and Secure End to End DeploymentsDevOps Automation with GitOps: Consistent and Secure End to End Deployments
DevOps Automation with GitOps: Consistent and Secure End to End DeploymentsWeaveworks
 
Trusted Application Delivery: Achieving Ultimate Security
Trusted Application Delivery: Achieving Ultimate SecurityTrusted Application Delivery: Achieving Ultimate Security
Trusted Application Delivery: Achieving Ultimate SecurityWeaveworks
 

More from Weaveworks (20)

How to Avoid Kubernetes Multi-tenancy Catastrophes
How to Avoid Kubernetes Multi-tenancy CatastrophesHow to Avoid Kubernetes Multi-tenancy Catastrophes
How to Avoid Kubernetes Multi-tenancy Catastrophes
 
Building internal developer platform with EKS and GitOps
Building internal developer platform with EKS and GitOpsBuilding internal developer platform with EKS and GitOps
Building internal developer platform with EKS and GitOps
 
GitOps Testing in Kubernetes with Flux and Testkube.pdf
GitOps Testing in Kubernetes with Flux and Testkube.pdfGitOps Testing in Kubernetes with Flux and Testkube.pdf
GitOps Testing in Kubernetes with Flux and Testkube.pdf
 
Intro to GitOps with Weave GitOps, Flagger and Linkerd
Intro to GitOps with Weave GitOps, Flagger and LinkerdIntro to GitOps with Weave GitOps, Flagger and Linkerd
Intro to GitOps with Weave GitOps, Flagger and Linkerd
 
Implementing Flux for Scale with Soft Multi-tenancy
Implementing Flux for Scale with Soft Multi-tenancyImplementing Flux for Scale with Soft Multi-tenancy
Implementing Flux for Scale with Soft Multi-tenancy
 
Accelerating Hybrid Multistage Delivery with Weave GitOps on EKS
Accelerating Hybrid Multistage Delivery with Weave GitOps on EKSAccelerating Hybrid Multistage Delivery with Weave GitOps on EKS
Accelerating Hybrid Multistage Delivery with Weave GitOps on EKS
 
The Story of Flux Reaching Graduation in the CNCF
The Story of Flux Reaching Graduation in the CNCFThe Story of Flux Reaching Graduation in the CNCF
The Story of Flux Reaching Graduation in the CNCF
 
Shift Deployment Security Left with Weave GitOps & Upbound’s Universal Crossp...
Shift Deployment Security Left with Weave GitOps & Upbound’s Universal Crossp...Shift Deployment Security Left with Weave GitOps & Upbound’s Universal Crossp...
Shift Deployment Security Left with Weave GitOps & Upbound’s Universal Crossp...
 
Securing Your App Deployments with Tunnels, OIDC, RBAC, and Progressive Deliv...
Securing Your App Deployments with Tunnels, OIDC, RBAC, and Progressive Deliv...Securing Your App Deployments with Tunnels, OIDC, RBAC, and Progressive Deliv...
Securing Your App Deployments with Tunnels, OIDC, RBAC, and Progressive Deliv...
 
Flux’s Security & Scalability with OCI & Helm Slides.pdf
Flux’s Security & Scalability with OCI & Helm Slides.pdfFlux’s Security & Scalability with OCI & Helm Slides.pdf
Flux’s Security & Scalability with OCI & Helm Slides.pdf
 
Flux Security & Scalability using VS Code GitOps Extension
Flux Security & Scalability using VS Code GitOps Extension Flux Security & Scalability using VS Code GitOps Extension
Flux Security & Scalability using VS Code GitOps Extension
 
Deploying Stateful Applications Securely & Confidently with Ondat & Weave GitOps
Deploying Stateful Applications Securely & Confidently with Ondat & Weave GitOpsDeploying Stateful Applications Securely & Confidently with Ondat & Weave GitOps
Deploying Stateful Applications Securely & Confidently with Ondat & Weave GitOps
 
Robust Network Security and Observability with GitOps and Cilium
Robust Network Security and Observability with GitOps and CiliumRobust Network Security and Observability with GitOps and Cilium
Robust Network Security and Observability with GitOps and Cilium
 
Intro to GitOps & Flux.pdf
Intro to GitOps & Flux.pdfIntro to GitOps & Flux.pdf
Intro to GitOps & Flux.pdf
 
Simplifying Hybrid Kubernetes with Weaveworks and EKS.pdf
Simplifying Hybrid Kubernetes with Weaveworks and EKS.pdfSimplifying Hybrid Kubernetes with Weaveworks and EKS.pdf
Simplifying Hybrid Kubernetes with Weaveworks and EKS.pdf
 
Weave GitOps 2022.09 Release: A Fast & Reliable Path to Production with Progr...
Weave GitOps 2022.09 Release: A Fast & Reliable Path to Production with Progr...Weave GitOps 2022.09 Release: A Fast & Reliable Path to Production with Progr...
Weave GitOps 2022.09 Release: A Fast & Reliable Path to Production with Progr...
 
Building a Security First Approach Across Hybrid Cloud with GitOps and Policy...
Building a Security First Approach Across Hybrid Cloud with GitOps and Policy...Building a Security First Approach Across Hybrid Cloud with GitOps and Policy...
Building a Security First Approach Across Hybrid Cloud with GitOps and Policy...
 
Security & Resiliency of Cloud Native Apps with Weave GitOps & Tetrate Servic...
Security & Resiliency of Cloud Native Apps with Weave GitOps & Tetrate Servic...Security & Resiliency of Cloud Native Apps with Weave GitOps & Tetrate Servic...
Security & Resiliency of Cloud Native Apps with Weave GitOps & Tetrate Servic...
 
DevOps Automation with GitOps: Consistent and Secure End to End Deployments
DevOps Automation with GitOps: Consistent and Secure End to End DeploymentsDevOps Automation with GitOps: Consistent and Secure End to End Deployments
DevOps Automation with GitOps: Consistent and Secure End to End Deployments
 
Trusted Application Delivery: Achieving Ultimate Security
Trusted Application Delivery: Achieving Ultimate SecurityTrusted Application Delivery: Achieving Ultimate Security
Trusted Application Delivery: Achieving Ultimate Security
 

Recently uploaded

A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?Igalia
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUK Journal
 
Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024The Digital Insurer
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes
 
A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024Results
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationMichael W. Hawkins
 
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEarley Information Science
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationRadu Cotescu
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processorsdebabhi2
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024The Digital Insurer
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)wesley chun
 
IAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsIAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsEnterprise Knowledge
 
What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?Antenna Manufacturer Coco
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Enterprise Knowledge
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsJoaquim Jorge
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsMaria Levchenko
 

Recently uploaded (20)

A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organization
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
IAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsIAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI Solutions
 
What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 

Helm + GitOps = ⚡️⚡️⚡️

  • 1. Helm + GitOps = ⚡⚡⚡ Scott Rigby, Developer Experience @Weaveworks Weave Online User Group – Jan 11, 2021 1
  • 2. ● High-level Value ○ Benefits of Helm In General ○ Benefits of Helm in GitOps ● Flux 2 Awesomeness For Helm Users ● When to Migrate ● Demo: Helm Operator -> Controller Migration ● Q&A 2 Overview
  • 3. Benefits of Helm in General 3
  • 4. Increases Velocity 4 Uses existing, well maintained "charts" to successfully install applications in kubernetes 🚀
  • 5. Simplifies Kubernetes Complexity 5 Helps teams track resources by grouping them together in "releases" ☸
  • 6. Decreases Downtime 6 Allows automatic recovery from rollout failures 💥
  • 7. Improves Reliability 7 Decreases k8s configuration errors, via Helm's templating 🔨
  • 8. Benefits of Helm in GitOps 8
  • 9. ● GitOps is an app dev and operations methodology ● GitOps is a paradigm, not a specific tool or technology. ● GitOps applies to everything and brings business value. What is GitOps? … and why do I want it? 9
  • 10. GitOps leverages: ● an entire system that is described declaratively ● code that is version controlled and ● software agents that reconcile and ensure correctness (along with alerts, etc). 4 Principles of GitOps 10
  • 11. Reconciliation 11 ● All CI/CD systems experience points of error ○ DNS issues ○ Service API issues ○ Calling the Helm client for various reasons ● GitOps to the rescue ○ Flux uses Kubernetes for reconciliation ○ While scripted commands must be analyzed and rerun on failure, GitOps assumes inevitable points of failure, so continues to ensure your Helm Release ● Your engineers still have control even with automation ○ Automatic reconciliation can sound scary, but you still have control ○ Can pause reconciliation at any time per Helm Release 🔁
  • 12. Reliability and Consistency 12 ● Desired state is declared in git ○ If your cluster has a problem, no need to manually identify the missing pieces or manually manage a fix. Let kubernetes do it for you ● Retries ○ Flux adds retries functionality to Helm’s existing automatic rollback functionality ● Enhanced Debugging ○ Flux adds an option to keep last failed release for debugging ○ Useful for non-production environments 🧱
  • 13. Observability 13 ● All in One Place ○ Flux colocates logging and errors with your resources in kubernetes ○ More accessible by multiple team members all in one place ○ Easily integrates with existing telemetry export tools like Prometheus, which is supported by default 🕵‍♀
  • 14. Auditability 14 ● Clear Audit Trail ○ Everything is controlled through git pull requests ○ Git history provides a sequence of transactions. This also allows you to recover state from any snapshot ○ Notification controller integrates with Slack alerts and other team communication tools ⛓
  • 15. Flux GitOps introduces an additional layer of reliability, consistency, observability, and auditability to the benefits of using Helm in any other way. Better Together 15
  • 16. Flux 2 Awesomeness For Helm Users 16
  • 17. Pause/Resume Reconciliation per Release 17 Flux 1 required pausing the Entire Operator Flux 2 allows pausing per Helm Release
  • 18. Helm Controller Depends On feature 18 More memory efficient than a large umbrella chart Example: ingress controller and cert-manager installed before applications that rely on those
  • 19. SemVer Ranges for Charts 19 Flux 2 supports semver ranges from Helm repositories Examples: >=4.0.0 or <5.0.0 For details, compare the Helm Controller docs with the Helm Operator docs
  • 20. Install Charts from Storage Bucket Source 20 S3, google storage, Azure blob storage, KFC etc
  • 21. Add a Helm Repo Without Restarting 21 Flux 1 Helm Operator required restarting whenever a new Helm repo was added No longer in Flux 2 Helm Controller! We now use references Greater isolation once again
  • 22. Helm Repo Reference Reusability 22 Define a Helm repo once, use everywhere Now Helm Releases can reference a Repo by name
  • 23. Optional Credentials Per git or Helm Repo 23 Greater flexibility, more composability If you have multiple sources locked down in different ways, it’s no longer a problem Allows you to enforce principle of least privilege more easily
  • 24. Out of Cluster Helm Releases 24 Have an out of cluster experience Flux can also sync Cluster API manifests, allowing you to spin up multiple clusters from a single management cluster
  • 25. Demo: Helm Operator -> Controller Migration 25
  • 26. 26
  • 27. 27
  • 28. 28
  • 29. 29
  • 30. 30
  • 32. Flux 1 or 2? 32 New users should prob go straight to Flux 2 Existing users can migrate to Flux 2 now (there is an upgrade path, which we'll demo) Image automation is available as a prerelease. If you require this feature, please give it a go in non-production and let us know how it goes! Hang tight with Flux 1 in production for the moment. See docs for current status Complex charts may raise use cases we haven't yet tested for in Flux 2. Please test these in non-production and help us by posting any issues. Thanks! 🌈 🦄 🙌
  • 33. Thanks! 33 Alison Dowdney collaborated on Slides! Hidde Beydals collaborated on demo! 🛠