Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Kuma
Search
Takafumi Ikeda
March 26, 2020
Technology
2
3.5k
Kuma
https://k8sjp.connpass.com/event/170099/
Takafumi Ikeda
March 26, 2020
Tweet
Share
More Decks by Takafumi Ikeda
See All by Takafumi Ikeda
APIゲートウェイとサービスメッシュ
ikeike443
0
390
はじめてのKong Konnect
ikeike443
0
190
10分で分るGitHub Actions
ikeike443
3
2.1k
GitHub Actionsはどのような未来を描くのか
ikeike443
3
2.8k
GitHubber@日本
ikeike443
6
12k
GitHub Business Seminar
ikeike443
1
140
How we ship GitHub with GitHub -- ChatOps
ikeike443
0
340
効果的にGitHubを使うために
ikeike443
10
4k
How People Build Software
ikeike443
0
240
Other Decks in Technology
See All in Technology
Azure Well-Architected Framework入門
tomokusaba
1
300
許しとアジャイル
jnuank
1
120
リーダーになったら未来を語れるようになろう/Speak the Future
sanogemaru
0
280
E2Eテスト設計_自動化のリアル___Playwrightでの実践とMCPの試み__AIによるテスト観点作成_.pdf
findy_eventslides
0
120
生成AIを活用したZennの取り組み事例
ryosukeigarashi
0
200
Shirankedo NOCで見えてきたeduroam/OpenRoaming運用ノウハウと課題 - BAKUCHIKU BANBAN #2
marokiki
0
140
英語は話せません!それでも海外チームと信頼関係を作るため、対話を重ねた2ヶ月間のまなび
niioka_97
0
120
BtoBプロダクト開発の深層
16bitidol
0
310
成長自己責任時代のあるきかた/How to navigate the era of personal responsibility for growth
kwappa
3
270
LLM時代にデータエンジニアの役割はどう変わるか?
ikkimiyazaki
0
130
PLaMo2シリーズのvLLM実装 / PFN LLM セミナー
pfn
PRO
2
980
SOC2取得の全体像
shonansurvivors
1
380
Featured
See All Featured
Distributed Sagas: A Protocol for Coordinating Microservices
caitiem20
333
22k
Visualization
eitanlees
148
16k
The Cost Of JavaScript in 2023
addyosmani
53
9k
Why Our Code Smells
bkeepers
PRO
339
57k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
46
7.6k
Documentation Writing (for coders)
carmenintech
75
5k
Fantastic passwords and where to find them - at NoRuKo
philnash
52
3.4k
We Have a Design System, Now What?
morganepeng
53
7.8k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
jcasabona
33
2.5k
Optimising Largest Contentful Paint
csswizardry
37
3.4k
For a Future-Friendly Web
brad_frost
180
9.9k
Gamification - CAS2011
davidbonilla
81
5.5k
Transcript
Kuma ৮ͬͯΈͨ Takafumi Ikeda Solution Engineer, Kong
@ikeike443 Takafumi Ikeda Solutions Engineer
None
Kuma ͱ
• ϢχόʔαϧίϯτϩʔϧϓϨʔϯ • ܰྔͳσʔλϓϨʔϯ: Envoyϕʔε, L4/L7 • DPΠϯδΣΫγϣϯ: ίʔυมߋͳ͠Ͱk8s, VMʹDPೖ
• ๛ͳػೳ: mTLS, Traffic Segmentation, Traffic Routing, Traffic Metrics, Traffic Logs, Health- checking, etc • ϚϧνϓϥοτϑΥʔϜ: k8s, VM, ϕΞϝλϧ • ήʔτΣΠ࿈ܞ: KongΛ࢝Ίͱ͢ΔAPI Gateway/IngressʹରԠ
Kuma.io/install
./conf/kuma-cp.conf ./bin/kuma-dp ./bin/kuma-cp ./bin/kumactl Kuma Files ./bin/kuma-tcp-echo ./kuma-prometheus-sd ./bin/envoy ./README
Kuma.io In Kubernetes In Universal
CPΠϯετʔϧ͓ΑͼDPΠϯδΣΫγϣϯ
backend-api elasticsearch redis frontend-app αϯϓϧΞϓϦέʔγϣϯ
None
None
None
None
None
Mutual TLSͷઃఆ
Kuma.io backend-api elasticsearch redis frontend-app mTLS mTLS mTLS
INSERT AN IMAGE FOR ALL THE AREA mTLS 18 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: Mesh metadata: name: default spec: mtls: ca: builtin: {} enabled: true EOF
Traffic Permissionsͷઃఆ
INSERT AN IMAGE FOR ALL THE AREA Traffic-permission 20 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: TrafficPermission mesh: default metadata: namespace: kuma-demo name: frontend-to-backend spec: sources: - match: service: frontend.kuma-demo.svc:80 destinations: - match: service: backend.kuma-demo.svc:3001 EOF
Kong Integration
Kuma.io API Server kuma-system kuma-demo kuma-injector Search Back-end Reviews-Redis Envoy
Sidecar Proxy Envoy Sidecar Proxy Envoy Sidecar Proxy labels: kuma.io/sidecar-injection: enabled Ingress/GW Envoy Sidecar Proxy Front-end Envoy Sidecar Proxy Kong Integration (Gateway Mode)
Traffic Routing/Canary - New in 0.3.2
Kuma.io backend-api v0 frontend-app backend-api v1 backend-api v2 Weight: 80
Weight: 0 Weight: 20
·ͱΊ • KumaΠϯετʔϧ͕؆୯Ͱѻ͍͍͢ • k8sωΠςΟϒαϙʔτʹՃ͑ͯVM, ϕΞϝλϧಉ͡Α͏ʹαʔϏεϝογϡΛద༻Ͱ͖Δ • ͔ͳΓए͍ϓϩδΣΫτ͕ͩɺ։ൃΞΫςΟϒʹߦΘΕ͍͕ͯͯظͰ͖Δ • ϓϩμΫγϣϯࣄྫ·ͩ΄ͱΜͲͳ͍ɺ͜Ε͔ΒͷϓϩδΣΫτ
Slack: https://chat.kuma.io μϯϩʔυ: kuma.io/install ΫΠοΫσϞ: https://github.com/Kong/kuma-demo ϦϯΫू