Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up for free
Kuma
Takafumi Ikeda
March 26, 2020
Technology
2
2.8k
Kuma
https://k8sjp.connpass.com/event/170099/
Takafumi Ikeda
March 26, 2020
Tweet
Share
More Decks by Takafumi Ikeda
See All by Takafumi Ikeda
APIゲートウェイとサービスメッシュ
ikeike443
0
71
はじめてのKong Konnect
ikeike443
0
100
10分で分るGitHub Actions
ikeike443
3
1.4k
GitHub Actionsはどのような未来を描くのか
ikeike443
3
2.3k
GitHubber@日本
ikeike443
6
9.7k
GitHub Business Seminar
ikeike443
1
110
How we ship GitHub with GitHub -- ChatOps
ikeike443
0
200
効果的にGitHubを使うために
ikeike443
10
3.3k
How People Build Software
ikeike443
0
160
Other Decks in Technology
See All in Technology
2022年度ロボットフロンティア第1回
ryuichiueda
0
130
msal.jsのあれこれ
takas0522
0
1.5k
SRENEXT2022 組織にSREを実装していくまでの道のり
marnie0301
1
240
Power BI Premiumでデータ準備!
hanaseleb
1
180
目と耳を持った自然言語処理 - スタートアップにおける価値創出のために
yag_ays
PRO
0
520
1年間のポストモーテム運用とそこから生まれたツール sre-advisor / SRE NEXT 2022
fujiwara3
6
3k
GitHub 엔터프라이즈 어카운트 소개 및 엔터프라이즈 서버 구축 경험
posquit0
1
140
キャッチアップ Android 13 / Catch up Android 13
yanzm
2
990
OSS ことはじめ
hsbt
3
370
如何使用 Argo Event& Workflow 快速建置自定義的工作流程 @ #CNTUG #47
line_developers_tw
PRO
0
6k
Oracle Database Technology Night #55 Oracle Autonomous Database 再入門
oracle4engineer
PRO
1
120
Steps toward self-service operations in eureka
fukubaka0825
0
440
Featured
See All Featured
Adopting Sorbet at Scale
ufuk
63
7.5k
The Invisible Customer
myddelton
110
11k
Fontdeck: Realign not Redesign
paulrobertlloyd
73
4.1k
Art, The Web, and Tiny UX
lynnandtonic
280
17k
The Mythical Team-Month
searls
208
39k
Faster Mobile Websites
deanohume
294
28k
Designing for Performance
lara
596
63k
What's in a price? How to price your products and services
michaelherold
229
9.3k
How to train your dragon (web standard)
notwaldorf
57
3.8k
Rebuilding a faster, lazier Slack
samanthasiow
62
7.2k
We Have a Design System, Now What?
morganepeng
35
2.9k
Build The Right Thing And Hit Your Dates
maggiecrowley
19
1.1k
Transcript
Kuma ৮ͬͯΈͨ Takafumi Ikeda Solution Engineer, Kong
@ikeike443 Takafumi Ikeda Solutions Engineer
None
Kuma ͱ
• ϢχόʔαϧίϯτϩʔϧϓϨʔϯ • ܰྔͳσʔλϓϨʔϯ: Envoyϕʔε, L4/L7 • DPΠϯδΣΫγϣϯ: ίʔυมߋͳ͠Ͱk8s, VMʹDPೖ
• ๛ͳػೳ: mTLS, Traffic Segmentation, Traffic Routing, Traffic Metrics, Traffic Logs, Health- checking, etc • ϚϧνϓϥοτϑΥʔϜ: k8s, VM, ϕΞϝλϧ • ήʔτΣΠ࿈ܞ: KongΛ࢝Ίͱ͢ΔAPI Gateway/IngressʹରԠ
Kuma.io/install
./conf/kuma-cp.conf ./bin/kuma-dp ./bin/kuma-cp ./bin/kumactl Kuma Files ./bin/kuma-tcp-echo ./kuma-prometheus-sd ./bin/envoy ./README
Kuma.io In Kubernetes In Universal
CPΠϯετʔϧ͓ΑͼDPΠϯδΣΫγϣϯ
backend-api elasticsearch redis frontend-app αϯϓϧΞϓϦέʔγϣϯ
None
None
None
None
None
Mutual TLSͷઃఆ
Kuma.io backend-api elasticsearch redis frontend-app mTLS mTLS mTLS
INSERT AN IMAGE FOR ALL THE AREA mTLS 18 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: Mesh metadata: name: default spec: mtls: ca: builtin: {} enabled: true EOF
Traffic Permissionsͷઃఆ
INSERT AN IMAGE FOR ALL THE AREA Traffic-permission 20 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: TrafficPermission mesh: default metadata: namespace: kuma-demo name: frontend-to-backend spec: sources: - match: service: frontend.kuma-demo.svc:80 destinations: - match: service: backend.kuma-demo.svc:3001 EOF
Kong Integration
Kuma.io API Server kuma-system kuma-demo kuma-injector Search Back-end Reviews-Redis Envoy
Sidecar Proxy Envoy Sidecar Proxy Envoy Sidecar Proxy labels: kuma.io/sidecar-injection: enabled Ingress/GW Envoy Sidecar Proxy Front-end Envoy Sidecar Proxy Kong Integration (Gateway Mode)
Traffic Routing/Canary - New in 0.3.2
Kuma.io backend-api v0 frontend-app backend-api v1 backend-api v2 Weight: 80
Weight: 0 Weight: 20
·ͱΊ • KumaΠϯετʔϧ͕؆୯Ͱѻ͍͍͢ • k8sωΠςΟϒαϙʔτʹՃ͑ͯVM, ϕΞϝλϧಉ͡Α͏ʹαʔϏεϝογϡΛద༻Ͱ͖Δ • ͔ͳΓए͍ϓϩδΣΫτ͕ͩɺ։ൃΞΫςΟϒʹߦΘΕ͍͕ͯͯظͰ͖Δ • ϓϩμΫγϣϯࣄྫ·ͩ΄ͱΜͲͳ͍ɺ͜Ε͔ΒͷϓϩδΣΫτ
Slack: https://chat.kuma.io μϯϩʔυ: kuma.io/install ΫΠοΫσϞ: https://github.com/Kong/kuma-demo ϦϯΫू