K8s in AWS: Europe, US and The Great Wall of China

K8s in AWS: Europe, US and The Great Wall of China

K8s in AWS: Europe, US and The Great Wall of China

A2c14a1c4e16aa337c7d36abe7d1cf8f?s=128

DevOpsPorto

October 10, 2019
Tweet

Transcript

  1. Joy in Motion +351 220 114 366 | +351 220

    114 368 criticaltechworks.com hello@criticaltechworks.com K8s in AWS: Europe, US and The Great Wall of China
  2. criticaltechworks.com Joy in Motion 2 About me

  3. criticaltechworks.com Joy in Motion 3 Critical TechWorks

  4. criticaltechworks.com Joy in Motion 4 DevOps @ CTW

  5. criticaltechworks.com Joy in Motion 5 Proof of Concept

  6. criticaltechworks.com Joy in Motion 6 KOPS @ AWS

  7. criticaltechworks.com Joy in Motion 7 KOPS @ AWS - Enterprise

    • IAM Permissions • AmazonEC2FullAccess • AmazonRoute53FullAccess • AmazonS3FullAccess • VPC already created with no IGW • IAM k8s policies already created
  8. criticaltechworks.com Joy in Motion 8 KOPS @ AWS - Enterprise

    • Add proxy configuration
  9. criticaltechworks.com Joy in Motion 9 KOPS @ AWS - Enterprise

  10. criticaltechworks.com Joy in Motion 10 KOPS @ AWS - Enterprise

    • Update cluster
  11. criticaltechworks.com Joy in Motion 11 KOPS @ AWS - Enterprise

  12. criticaltechworks.com Joy in Motion 12 AWS Frankfurt

  13. criticaltechworks.com Joy in Motion 13 AWS Frankfurt – Kentrikos

  14. criticaltechworks.com Joy in Motion 14 AWS North Virginia – Kentrikos

    EQUAL
  15. criticaltechworks.com Joy in Motion 15 AWS Beijing – Kentrikos EXPENSIVE

  16. criticaltechworks.com Joy in Motion 16 AWS Beijing – Issues

  17. criticaltechworks.com Joy in Motion 17 AWS Beijing – Issues

  18. criticaltechworks.com Joy in Motion 18 AWS Beijing – Issues •

    No good internet access • No access to some sources • Only two availability zones • Small amount of AWS services implemented • No Route53 • No AuroraDB • No EKS • No Secret Manager
  19. criticaltechworks.com Joy in Motion 19 AWS Beijing – Solution

  20. criticaltechworks.com Joy in Motion 20 AWS Beijing – Solution

  21. criticaltechworks.com Joy in Motion 21 Lessons Learned • Not easy

    to find documentation for enterprise grade K8s solutions • Beijing AWS region != Any other AWS region • Think about China solutions separately • No access to google in China (Great Wall of China) • Beijing AWS + Kubernetes = LOTS OF PAIN
  22. criticaltechworks.com Joy in Motion 22 Questions

  23. +351 220 114 366 | +351 220 114 368 criticaltechworks.com

    hello@criticaltechworks.com Joy in Motion Porto | Lisbon João Peixoto