Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Kuma
Search
Takafumi Ikeda
March 26, 2020
Technology
2
3.2k
Kuma
https://k8sjp.connpass.com/event/170099/
Takafumi Ikeda
March 26, 2020
Tweet
Share
More Decks by Takafumi Ikeda
See All by Takafumi Ikeda
APIゲートウェイとサービスメッシュ
ikeike443
0
190
はじめてのKong Konnect
ikeike443
0
130
10分で分るGitHub Actions
ikeike443
3
1.7k
GitHub Actionsはどのような未来を描くのか
ikeike443
3
2.5k
GitHubber@日本
ikeike443
6
11k
GitHub Business Seminar
ikeike443
1
120
How we ship GitHub with GitHub -- ChatOps
ikeike443
0
260
効果的にGitHubを使うために
ikeike443
10
3.7k
How People Build Software
ikeike443
0
190
Other Decks in Technology
See All in Technology
【OpsJAWS】EC2 のセキュリティの運用と監視について考えてみた件
hssh2_bin
4
600
5分で理解するWebAssemblyのWebの外の話 PHPはマイコンの夢を見るか?
usuyuki
3
200
自己完結な開発者組織を支える プラットフォーム作り
recruitengineers
PRO
2
230
Feature Flag Deep Dive
biwashi
20
5.1k
プロデザ! BY リクルートvol.17_『じゃらんnet』公式アプリの高速リニューアル事例を大公開
recruitengineers
PRO
5
110
履歴データテーブルとの向き合い方_PHPerKaigi2024
gennei
25
6.7k
小さく始めるAnsible
stopendy
0
210
20240314-AboutStorageAntivirusMeasures
takano0131
1
100
AWS IAM の結果整合性を避けるためセッションポリシーを用いてポリシーの動作確認を行う、を解説する
yukihirochiba
0
380
スプリント内で試験を完了させるには?アジャイル・スクラム開発に参加したQAエンジニアの悩みと対策
cybozuinsideout
PRO
1
120
サイボウズのQAエンジニア育成
cybozuinsideout
PRO
3
560
皆がすなるカオスエンジアリングといふものを、ネットワークオペレーションでもしてみむとてするなり
tjmtrhs
0
130
Featured
See All Featured
Learning to Love Humans: Emotional Interface Design
aarron
266
39k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
chriscoyier
501
140k
Rebuilding a faster, lazier Slack
samanthasiow
72
8.1k
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
panda_program
56
13k
StorybookのUI Testing Handbookを読んだ
zakiyama
10
4.4k
Put a Button on it: Removing Barriers to Going Fast.
kastner
58
3k
Art, The Web, and Tiny UX
lynnandtonic
288
19k
Designing for Performance
lara
601
67k
ピンチをチャンスに:未来をつくるプロダクトロードマップ #pmconf2020
aki_iinuma
67
38k
How to name files
jennybc
62
91k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
rmw
24
2.2k
Designing with Data
zakiwarfel
94
4.8k
Transcript
Kuma ৮ͬͯΈͨ Takafumi Ikeda Solution Engineer, Kong
@ikeike443 Takafumi Ikeda Solutions Engineer
None
Kuma ͱ
• ϢχόʔαϧίϯτϩʔϧϓϨʔϯ • ܰྔͳσʔλϓϨʔϯ: Envoyϕʔε, L4/L7 • DPΠϯδΣΫγϣϯ: ίʔυมߋͳ͠Ͱk8s, VMʹDPೖ
• ๛ͳػೳ: mTLS, Traffic Segmentation, Traffic Routing, Traffic Metrics, Traffic Logs, Health- checking, etc • ϚϧνϓϥοτϑΥʔϜ: k8s, VM, ϕΞϝλϧ • ήʔτΣΠ࿈ܞ: KongΛ࢝Ίͱ͢ΔAPI Gateway/IngressʹରԠ
Kuma.io/install
./conf/kuma-cp.conf ./bin/kuma-dp ./bin/kuma-cp ./bin/kumactl Kuma Files ./bin/kuma-tcp-echo ./kuma-prometheus-sd ./bin/envoy ./README
Kuma.io In Kubernetes In Universal
CPΠϯετʔϧ͓ΑͼDPΠϯδΣΫγϣϯ
backend-api elasticsearch redis frontend-app αϯϓϧΞϓϦέʔγϣϯ
None
None
None
None
None
Mutual TLSͷઃఆ
Kuma.io backend-api elasticsearch redis frontend-app mTLS mTLS mTLS
INSERT AN IMAGE FOR ALL THE AREA mTLS 18 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: Mesh metadata: name: default spec: mtls: ca: builtin: {} enabled: true EOF
Traffic Permissionsͷઃఆ
INSERT AN IMAGE FOR ALL THE AREA Traffic-permission 20 $
cat <<EOF | kubectl apply -f - apiVersion: kuma.io/v1alpha1 kind: TrafficPermission mesh: default metadata: namespace: kuma-demo name: frontend-to-backend spec: sources: - match: service: frontend.kuma-demo.svc:80 destinations: - match: service: backend.kuma-demo.svc:3001 EOF
Kong Integration
Kuma.io API Server kuma-system kuma-demo kuma-injector Search Back-end Reviews-Redis Envoy
Sidecar Proxy Envoy Sidecar Proxy Envoy Sidecar Proxy labels: kuma.io/sidecar-injection: enabled Ingress/GW Envoy Sidecar Proxy Front-end Envoy Sidecar Proxy Kong Integration (Gateway Mode)
Traffic Routing/Canary - New in 0.3.2
Kuma.io backend-api v0 frontend-app backend-api v1 backend-api v2 Weight: 80
Weight: 0 Weight: 20
·ͱΊ • KumaΠϯετʔϧ͕؆୯Ͱѻ͍͍͢ • k8sωΠςΟϒαϙʔτʹՃ͑ͯVM, ϕΞϝλϧಉ͡Α͏ʹαʔϏεϝογϡΛద༻Ͱ͖Δ • ͔ͳΓए͍ϓϩδΣΫτ͕ͩɺ։ൃΞΫςΟϒʹߦΘΕ͍͕ͯͯظͰ͖Δ • ϓϩμΫγϣϯࣄྫ·ͩ΄ͱΜͲͳ͍ɺ͜Ε͔ΒͷϓϩδΣΫτ
Slack: https://chat.kuma.io μϯϩʔυ: kuma.io/install ΫΠοΫσϞ: https://github.com/Kong/kuma-demo ϦϯΫू