In Partnerschaft mit der Community - Cloud Native in Enterprise Umgebungen Dennis Zielke, Microsoft

Nachdem Kubernetes sich in den letzten 5 Jahren immer schneller entwickelt hat und heute als Plattform für moderne Applikationsentwicklung fest etabliert ist, soll es in diesem Vortrag um die Bedürfnisse des Enterprise Umfeld gehen. Dabei werden wir auf klassische Probleme rund um Governance, Automatisierung, Produktivität und Security im großflächigen Einsatz eingehen. Zudem werden Microsoft Initiativen in Kooperation mit der Open Source Community vorgestellt die dabei helfen können, die aufgezeigten Probleme zu lösen.

Transcript

1. Succeeding alone on Cloud native technology Dennis Zielke - Microsoft mindset with Partners
2. Cloud native is the new paradigm of software development > 35% of all production apps will be cloud-native by 20221 1IDC FutureScape, 2018
3. What is cloud native? The use of open source software, as well as technologies such as containers, microservices and service mesh, to develop and deploy scalable applications on cloud computing platforms.
4. What could cloud native be?
5. Budget Constraints Time consuming Development & Deployment Business processes change rapidly Security & Compliance Multiple hybrid data sources to connect Requirements lost in Translation Limited Developer Resources Identity and Authentication What is keeping customers from being successful?
6. Kubernetes on its own is not enough Networking Virtual machines IDE container support Artifact repository CI/CD Monitoring Microservice debugging Source code repository <\> Kubernetes Storage Data Automation layer for Security, Upgrades, Scaling, Monitoring, Deployment Application architect Invocation Governance Identity Packaging Integration Insights
7. Kubernetes on its own is not enough https://cloudblogs.microsoft.com/opensource/2019/05/21/kubecon-microsoft-updates-helm-3-virtual-kubelet-1-visual-studio-code-service-mesh-interface/
8. GitHub 40 million developers 96 million repositories Azure DevOps 1000’s of enterprises 15+ years of developer innovation VSCode 5 million monthly active users 15k contributors Loved by Developers – Trusted by Enterprises
9. Source Control Based on Git CI / CD Based on the Azure Pipelines technology Code packages Based on standard, open package formats Microsoft DevOps Engineering Team The GitHub and Azure DevOps engineering team sit in the same organization and have the same leadership. Focused on building best in class Azure integrations with GitHub. Best in class knowledge-sharing of DevOps on Azure scenarios. Loved by Developers – trusted by Enterprises Loved by Developers – Trusted by Enterprises
10. Metrics Logs Application Containers VM Monitoring Solutions Insights Dashboards Views Power BI Workbooks Visualize Metrics Explorer Log Analytics Analyze Alerts Autoscale Respond Event Hubs Ingest & Export APIs Logic Apps Integrate Azure Monitor Custom Sources Application Operating System Azure Resources Azure Subscription Azure Tenant Cross subscription multi-cluster health roll up view View overall health and perf across nodes, controllers and containers Drill down monitoring experience with namespace, service, and node filters Analyze Kubernetes event & container logs for troubleshooting Monitor containers on demand for AKS with virtual nodes Integrated in Azure DevOps Project Support Onboarding with Terraform What to monitor and how? Insights
11. CNABs facilitate the bundling, installing and managing of container-native apps— and their coupled services. Helm – find, share and use k8s apps Manage complexity Easy updates Simple sharing Rollbacks https://hub.helm.sh/ What to ship, how to upgrade and configure? Packaging
12. AWS CloudWatch AWS Simple Queue Service Azure Event Hub† Azure Service Bus Queues and Topics Azure Storage Queues GCP PubSub Kafka Liiklus Prometheus RabbitMQ Redis Lists How to trigger and interface with events? Invocation
13. AKS with RBAC Azure Storage SQL Database Cosmos DB Azure VNet Node Node Pod Pod AAD Pod Identity Active Directory Active Directory Use familiar tools like AAD for fine-grained identity and access control to Kubernetes resources from cluster to containers Azure Key Vault HashiCorp Vault Key Management System Certs Secrets Keys How to give apps an identity? Identity
14. Apps Tooling Ecosystem …and more Service Mesh Interface Connecting services trough a standardized interface? Integration
15. Example: Canary releases Connecting services trough a standardized interface? Integration
16. Developers Operations Cloud Custodian / Engineers responsible for Cloud environment How to ensure governance without slowing innovation? Governance Consider Kubernetes as an API
17. Developers Built-in controls through policy instead of workflow Operations Cloud Custodian Team How to ensure governance without slowing innovation? Governance Using policies to enforce governance
18. Fully integrated example Cloud Architect Developer Cluster-1 Cluster-2 Cluster-3 AKS Azure Policy Azure Pipelines Pass Fail Deny policy < /> Yes No Compliance check < /> Cluster-3 O Cluster-2 Cluster-1 Compliance reports Compliance reports for the entire environment, with pod- level granularity O How to ensure governance without slowing innovation? Governance
19. How we think partnerships to make cloud native successful! Developer Tools Invocation of Services Standardized Integration Artifacts Plattform Packaging of Apps Governance through Policy Apps with Identity Continuous Insights Links: https://aka.ms/ecn