Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Kuma
Search
Takafumi Ikeda
March 26, 2020
Technology
2
3.4k
Kuma
https://k8sjp.connpass.com/event/170099/
Takafumi Ikeda
March 26, 2020
Tweet
Share
More Decks by Takafumi Ikeda
See All by Takafumi Ikeda
APIゲートウェイとサービスメッシュ
ikeike443
0
310
はじめてのKong Konnect
ikeike443
0
180
10分で分るGitHub Actions
ikeike443
3
1.9k
GitHub Actionsはどのような未来を描くのか
ikeike443
3
2.7k
GitHubber@日本
ikeike443
6
12k
GitHub Business Seminar
ikeike443
1
130
How we ship GitHub with GitHub -- ChatOps
ikeike443
0
310
効果的にGitHubを使うために
ikeike443
10
3.9k
How People Build Software
ikeike443
0
230
Other Decks in Technology
See All in Technology
Cloudflareで実現する AIエージェント ワークフロー基盤
kmd09
0
280
2025年のARグラスの潮流
kotauchisunsun
0
790
30分でわかる「リスクから学ぶKubernetesコンテナセキュリティ」/30min-k8s-container-sec
mochizuki875
3
440
comilioとCloudflare、そして未来へと向けて
oliver_diary
6
440
機械学習を「社会実装」するということ 2025年版 / Social Implementation of Machine Learning 2025 Version
moepy_stats
4
900
Oracle Base Database Service:サービス概要のご紹介
oracle4engineer
PRO
1
16k
Oracle Exadata Database Service(Dedicated Infrastructure):サービス概要のご紹介
oracle4engineer
PRO
0
12k
チームが毎日小さな変化と適応を続けたら1年間でスケール可能なアジャイルチームができた話 / Building a Scalable Agile Team
kakehashi
2
230
東京Ruby会議12 Ruby と Rust と私 / Tokyo RubyKaigi 12 Ruby, Rust and me
eagletmt
3
860
Amazon Route 53, 待ちに待った TLSAレコードのサポート開始
kenichinakamura
0
150
月間60万ユーザーを抱える 個人開発サービス「Walica」の 技術スタック変遷
miyachin
1
130
PaaSの歴史と、 アプリケーションプラットフォームのこれから
jacopen
7
1.4k
Featured
See All Featured
RailsConf 2023
tenderlove
29
970
Mobile First: as difficult as doing things right
swwweet
222
9k
Fantastic passwords and where to find them - at NoRuKo
philnash
50
2.9k
Documentation Writing (for coders)
carmenintech
67
4.5k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
44
7k
Understanding Cognitive Biases in Performance Measurement
bluesmoon
27
1.5k
A better future with KSS
kneath
238
17k
Sharpening the Axe: The Primacy of Toolmaking
bcantrill
38
1.9k
Bash Introduction
62gerente
610
210k
Embracing the Ebb and Flow
colly
84
4.5k
jQuery: Nuts, Bolts and Bling
dougneiner
62
7.6k
Product Roadmaps are Hard
iamctodd
PRO
50
11k
Transcript
Kuma ৮ͬͯΈͨ Takafumi Ikeda Solution Engineer, Kong
@ikeike443 Takafumi Ikeda Solutions Engineer
None
Kuma ͱ
• ϢχόʔαϧίϯτϩʔϧϓϨʔϯ • ܰྔͳσʔλϓϨʔϯ: Envoyϕʔε, L4/L7 • DPΠϯδΣΫγϣϯ: ίʔυมߋͳ͠Ͱk8s, VMʹDPೖ
• ๛ͳػೳ: mTLS, Traffic Segmentation, Traffic Routing, Traffic Metrics, Traffic Logs, Health- checking, etc • ϚϧνϓϥοτϑΥʔϜ: k8s, VM, ϕΞϝλϧ • ήʔτΣΠ࿈ܞ: KongΛ࢝Ίͱ͢ΔAPI Gateway/IngressʹରԠ
Kuma.io/install
./conf/kuma-cp.conf ./bin/kuma-dp ./bin/kuma-cp ./bin/kumactl Kuma Files ./bin/kuma-tcp-echo ./kuma-prometheus-sd ./bin/envoy ./README
Kuma.io In Kubernetes In Universal
CPΠϯετʔϧ͓ΑͼDPΠϯδΣΫγϣϯ
backend-api elasticsearch redis frontend-app αϯϓϧΞϓϦέʔγϣϯ
None
None
None
None
None
Mutual TLSͷઃఆ
Kuma.io backend-api elasticsearch redis frontend-app mTLS mTLS mTLS
INSERT AN IMAGE FOR ALL THE AREA mTLS 18 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: Mesh metadata: name: default spec: mtls: ca: builtin: {} enabled: true EOF
Traffic Permissionsͷઃఆ
INSERT AN IMAGE FOR ALL THE AREA Traffic-permission 20 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: TrafficPermission mesh: default metadata: namespace: kuma-demo name: frontend-to-backend spec: sources: - match: service: frontend.kuma-demo.svc:80 destinations: - match: service: backend.kuma-demo.svc:3001 EOF
Kong Integration
Kuma.io API Server kuma-system kuma-demo kuma-injector Search Back-end Reviews-Redis Envoy
Sidecar Proxy Envoy Sidecar Proxy Envoy Sidecar Proxy labels: kuma.io/sidecar-injection: enabled Ingress/GW Envoy Sidecar Proxy Front-end Envoy Sidecar Proxy Kong Integration (Gateway Mode)
Traffic Routing/Canary - New in 0.3.2
Kuma.io backend-api v0 frontend-app backend-api v1 backend-api v2 Weight: 80
Weight: 0 Weight: 20
·ͱΊ • KumaΠϯετʔϧ͕؆୯Ͱѻ͍͍͢ • k8sωΠςΟϒαϙʔτʹՃ͑ͯVM, ϕΞϝλϧಉ͡Α͏ʹαʔϏεϝογϡΛద༻Ͱ͖Δ • ͔ͳΓए͍ϓϩδΣΫτ͕ͩɺ։ൃΞΫςΟϒʹߦΘΕ͍͕ͯͯظͰ͖Δ • ϓϩμΫγϣϯࣄྫ·ͩ΄ͱΜͲͳ͍ɺ͜Ε͔ΒͷϓϩδΣΫτ
Slack: https://chat.kuma.io μϯϩʔυ: kuma.io/install ΫΠοΫσϞ: https://github.com/Kong/kuma-demo ϦϯΫू