16-Delivering Cloud Native Apps with Kubernetes on Azure by Dennis-Zielke

Transcript

1. Azure F.A.Q. about… ... building cloud native apps with Kubernetes on Azure Dennis Zielke GBB - Cloud native dennis.zielke@microsoft.com
3. DevOps is the union of people, processand productsto enable continuous delivery of valueto our end users. What do we need for continuous innovation ?
4. Kubernetes Why do we need Kubernetes ?
5. Where can I store my container images and helm charts?
6. Kubernetes
7. Azure Kubernetes Service (AKS) A fully managed Kubernetes cluster Managed Azure infrastructure services Docker Kubernetes • Managed control pane • Automated upgrades, patches • Easy cluster scaling • Self-healing • Cost savings Application architect Infrastructure architect Applications Operations
8. What is AKS?
9. apps
10. DevOps pipeline for containers Build/CI, Integrate, Test Run, Manage, Integrate Kubernetes Service Service Fabric Batch App Services … Azure Container Registry Code Run Validate Debug CD, Deploy Source Code Control (SCC) Functions Analyze, Understand, Improve ACI
11. How is application doing? Available Is my application available and performing for users? One Dashboard Succeeding Performing What’s wrong? Show me suspicious code and test cases Where do we invest next? Show me top features and customer Usage patterns Health Dashboards Notifications & Deep Insights Usage Dashboards
12. Debugging applications?
13. How is infrastructure doing?
14. How to scale correctly? Kubernetes control pane Azure Container Instances (ACI) ACI Connector Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod VM VM VM VM Deployment/ tasks Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Pod Waste Waste Waste Waste
15. security
16. Kubectl 1. API Server Security AKS Object ARM API Networking Compute Storage AKS RP Admins User Kube Event Dev Pull images Azure resources in MC_* Resource Group 6. Pod Security and Network Policy 4. Secrets to access external resources 2. Securing ingress and egress traffic towards users and services 3. Securing images 5. Network segmentation Lots of security issues?
17. Giving apps an aad-pod-identity
18. Compliance via openpolicyagent.org
19. How can I get started ? https://azure.microsoft.com/en-us/features/devops-projects/
20. Azure Q & A Demos: https://github.com/denniszielke/phoenix https://github.com/Azure-Samples/virtual-node-autoscale https://github.com/Azure/aad-pod-identity Dennis Zielke dennis.zielke@microsoft.com @denzielke