Kuma

https://k8sjp.connpass.com/event/170099/

Transcript

1. Kuma
   ৮ͬͯΈͨ
   Takafumi Ikeda
   Solution Engineer, Kong
   

   View Slide

2. @ikeike443
   Takafumi Ikeda
   Solutions Engineer
   

   View Slide

3. View Slide

4. Kuma ͱ͸
   

   View Slide

5. ● ϢχόʔαϧίϯτϩʔϧϓϨʔϯ
   ● ܰྔͳσʔλϓϨʔϯ: Envoyϕʔε, L4/L7
   ● DPΠϯδΣΫγϣϯ: ίʔυมߋͳ͠Ͱk8s,
   VMʹDP஫ೖ
   ● ๛෋ͳػೳ: mTLS, Traffic Segmentation, Traffic
   Routing, Traffic Metrics, Traffic Logs, Health-
   checking, etc
   ● ϚϧνϓϥοτϑΥʔϜ: k8s, VM, ϕΞϝλϧ
   ● ήʔτ΢ΣΠ࿈ܞ: KongΛ࢝Ίͱ͢ΔAPI
   Gateway/IngressʹରԠ
   

   View Slide

6. Kuma.io/install
   

   View Slide

7. ./conf/kuma-cp.conf
   ./bin/kuma-dp
   ./bin/kuma-cp
   ./bin/kumactl
   Kuma Files
   ./bin/kuma-tcp-echo
   ./kuma-prometheus-sd
   ./bin/envoy
   ./README
   

   View Slide

8. Kuma.io
   In Kubernetes In Universal
   

   View Slide

9. CPΠϯετʔϧ͓ΑͼDPΠϯδΣΫγϣϯ
   

   View Slide

10. backend-api
    elasticsearch
    redis
    frontend-app
    αϯϓϧΞϓϦέʔγϣϯ
    

    View Slide

11. View Slide

12. View Slide

13. View Slide

14. View Slide

15. View Slide

16. Mutual TLSͷઃఆ
    

    View Slide

17. Kuma.io
    backend-api
    elasticsearch
    redis
    frontend-app
    mTLS
    mTLS
    mTLS
    

    View Slide

18. INSERT AN IMAGE FOR ALL THE AREA
    mTLS
    18
    $ cat <apiVersion: kuma.io/v1alpha1
    kind: Mesh
    metadata:
    name: default
    spec:
    mtls:
    ca:
    builtin: {}
    enabled: true
    EOF
    

    View Slide

19. Traffic Permissionsͷઃఆ
    

    View Slide

20. INSERT AN IMAGE FOR ALL THE AREA
    Traffic-permission
    20
    $ cat <apiVersion: kuma.io/v1alpha1
    kind: TrafficPermission
    mesh: default
    metadata:
    namespace: kuma-demo
    name: frontend-to-backend
    spec:
    sources:
    - match:
    service: frontend.kuma-demo.svc:80
    destinations:
    - match:
    service: backend.kuma-demo.svc:3001
    EOF
    

    View Slide

21. Kong Integration
    

    View Slide

22. Kuma.io
    API Server
    kuma-system
    kuma-demo
    kuma-injector
    Search Back-end Reviews-Redis
    Envoy Sidecar
    Proxy
    Envoy Sidecar
    Proxy
    Envoy Sidecar
    Proxy
    labels: kuma.io/sidecar-injection: enabled
    Ingress/GW
    Envoy Sidecar
    Proxy
    Front-end
    Envoy Sidecar
    Proxy
    Kong Integration (Gateway Mode)
    

    View Slide

23. Traffic Routing/Canary - New in 0.3.2
    

    View Slide

24. Kuma.io
    backend-api v0
    frontend-app
    backend-api v1
    backend-api v2
    Weight: 80
    Weight: 0
    Weight: 20
    

    View Slide

25. ·ͱΊ
    ● Kuma͸Πϯετʔϧ͕؆୯Ͱѻ͍΍͍͢
    ● k8sωΠςΟϒαϙʔτʹՃ͑ͯVM, ϕΞϝλϧ΋ಉ͡Α͏ʹαʔϏεϝογϡΛద༻Ͱ͖Δ
    ● ͔ͳΓए͍ϓϩδΣΫτ͕ͩɺ։ൃ΋ΞΫςΟϒʹߦΘΕ͍ͯͯ੒௕͕ظ଴Ͱ͖Δ
    ● ϓϩμΫγϣϯࣄྫ͸·ͩ΄ͱΜͲͳ͍ɺ͜Ε͔ΒͷϓϩδΣΫτ
    

    View Slide

26. Slack: https://chat.kuma.io
    μ΢ϯϩʔυ: kuma.io/install
    ΫΠοΫσϞ: https://github.com/Kong/kuma-demo
    ϦϯΫू
    

    View Slide