Kubernetes: Simple to Manage Anywhere (self-hosted, Tectonic upgrade demo)

Keynote at KubeCon 2016 in Seattle

Transcript

1. Brandon Philips @brandonphilips | brandon@coreos.com | coreos.com Simple to Manage Anywhere Kubernetes Upgrades
2. 90+ Projects on GitHub, 1,000+ Contributors OPEN SOURCE Secure solutions, support plans, training + more ENTERPRISE CoreOS is Running the World’s Containers Linux
3. Two Vulnerabilities Oct. 20th 2016
4. Linux Kernel Local Root Escalation Released fix same day for CoreOS Linux Majority of hosts running the patch within 24 hours
5. Kubernetes Client Cert Validation Failure Released fix 10 days after disclosure Manual upgrade for users
6. Kubernetes Client Cert Validation Failure Released fix 10 days after disclosure Manual upgrade for users Mask
7. MasK Kubernetes Client Cert Validation Failure Released fix 10 days after disclosure Manual upgrade for users
8. Automation Opportunity
9. Container Linux Updating CoreOS Linux VM / Bare Metal OS Update
10. Updating CoreOS Linux Container Linux OS Update VM / Bare Metal
11. Updating CoreOS Linux Container Linux VM / Bare Metal
12. Kubernetes Updating Kubernetes Deployment Application Container
13. Kubernetes Updating Kubernetes Application Container Deployment
14. Kubernetes Updating Kubernetes Deployment
15. Self-Hosting
16. gcc // gcc source code #include <stdio.h> int main() { compile_c(argv[1]); } gcc
17. go // golang source code package main import "os" func main() { compile_go(os.Args[1:]) } go
19. $ uname -s minix $ gcc linux.c
20. $ uname -s minix $ gcc linux.c
22. $ uname -s linux $ gcc linux.c
23. $ uname -s linux $ gcc linux.c
24. Running our components in pods would solve many problems, which we'll otherwise need to implement other, less portable, more brittle solutions to... Full self-hosting is the eventual goal. - Brian Grant Kubernetes Project Co-Founder
25. Kubernetes Updating Kubernetes Deployment API Server Container
26. Kubernetes Updating Kubernetes API Server Container Deployment
27. Kubernetes Updating Kubernetes Deployment
28. Today's World
29. AWS APIs AWS VPC v1.4.3 kube-aws kargo Kops kube-up.sh EC2 EC2 EC2 EBS EBS EBS
30. AWS VPC v1.4.4 EC2 EC2 EC2 EBS EBS EBS AWS APIs kube-aws kargo Kops kube-up.sh
31. A Better Way
32. AWS APIs kube-aws kargo kops k8s API kubectl AWS VPC v1.4.3 EC2 EC2 EC2 EBS EBS EBS
33. AWS APIs kube-aws kargo kops k8s API kubectl AWS VPC v1.4.4 EC2 EC2 EC2 EBS EBS EBS
34. Azure APIs k8s API kubectl VirtualNet v1.4.3 VM VM VM PD PD PD
35. Azure APIs k8s API kubectl VirtualNet v1.4.4 VM VM VM PD PD PD
36. k8s API kubectl Ethernet v1.4.3 Bare Metal Bare Metal Bare Metal SAN SAN SAN
37. k8s API kubectl Ethernet v1.4.4 Bare Metal Bare Metal Bare Metal SAN SAN SAN
38. - Foundation to automate cluster upgrades - Use Kubernetes compute, net, storage abstractions and APIs - Let infrastructure tools focus on infrastructure Self-hosted Goals
39. Self-Driving Kubernetes Preview
40. kind: TectonicVersionUpdate spec: desiredVersion: 1.4.5 paused: false status: currentVersion: 1.4.3 paused: false Behind The Button Press
41. Cluster is running v1.4.3 and configured to run v1.4.5 • API Server is v1.4.3 • Scheduler is v1.4.3 Kubernetes Version Operator Differences from desired config • API Server should be v1.4.5 • Scheduler should be v1.4.5 How to get there • Upgrade all API servers Daemons to v1.4.5 safely one-by-one • Upgrade all Scheduler Deployments to v1.4.5 • Update status to v1.4.5
42. - A self-hosted cluster launched via Bootkube - Upgraded via Kubernetes APIs and an Operator - Automated by single-button or fully automatic Self-Driving Kubernetes Cluster
43. - Use Bootkube; provide feedback - Learn more 9am Tomorrow "KubeCeption" talk - Join SIG Cluster Lifecycle, discuss, tweet Next Steps
44. Kubernetes Client Cert Validation Failure Released fix 10 days after disclosure Manual upgrade for users MasK
45. Secure
46. Sekure Deal with it
47. tectonic.com/summit - @TectonicSummit December 12 & 13 2016 - New York City
48. Thank you! Brandon Philips @brandonphilips | brandon@coreos.com | tectonic.com We’re hiring in all departments! Email: careers@coreos.com Positions: coreos.com/ careers