$30 off During Our Annual Pro Sale. View Details »

Kuma

 Kuma

Takafumi Ikeda

March 26, 2020
Tweet

More Decks by Takafumi Ikeda

Other Decks in Technology

Transcript

  1. Kuma
    ৮ͬͯΈͨ
    Takafumi Ikeda
    Solution Engineer, Kong

    View Slide

  2. @ikeike443
    Takafumi Ikeda
    Solutions Engineer

    View Slide

  3. View Slide

  4. Kuma ͱ͸

    View Slide

  5. ● ϢχόʔαϧίϯτϩʔϧϓϨʔϯ
    ● ܰྔͳσʔλϓϨʔϯ: Envoyϕʔε, L4/L7
    ● DPΠϯδΣΫγϣϯ: ίʔυมߋͳ͠Ͱk8s,
    VMʹDP஫ೖ
    ● ๛෋ͳػೳ: mTLS, Traffic Segmentation, Traffic
    Routing, Traffic Metrics, Traffic Logs, Health-
    checking, etc
    ● ϚϧνϓϥοτϑΥʔϜ: k8s, VM, ϕΞϝλϧ
    ● ήʔτ΢ΣΠ࿈ܞ: KongΛ࢝Ίͱ͢ΔAPI
    Gateway/IngressʹରԠ

    View Slide

  6. Kuma.io/install

    View Slide

  7. ./conf/kuma-cp.conf
    ./bin/kuma-dp
    ./bin/kuma-cp
    ./bin/kumactl
    Kuma Files
    ./bin/kuma-tcp-echo
    ./kuma-prometheus-sd
    ./bin/envoy
    ./README

    View Slide

  8. Kuma.io
    In Kubernetes In Universal

    View Slide

  9. CPΠϯετʔϧ͓ΑͼDPΠϯδΣΫγϣϯ

    View Slide

  10. backend-api
    elasticsearch
    redis
    frontend-app
    αϯϓϧΞϓϦέʔγϣϯ

    View Slide

  11. View Slide

  12. View Slide

  13. View Slide

  14. View Slide

  15. View Slide

  16. Mutual TLSͷઃఆ

    View Slide

  17. Kuma.io
    backend-api
    elasticsearch
    redis
    frontend-app
    mTLS
    mTLS
    mTLS

    View Slide

  18. INSERT AN IMAGE FOR ALL THE AREA
    mTLS
    18
    $ cat <apiVersion: kuma.io/v1alpha1
    kind: Mesh
    metadata:
    name: default
    spec:
    mtls:
    ca:
    builtin: {}
    enabled: true
    EOF

    View Slide

  19. Traffic Permissionsͷઃఆ

    View Slide

  20. INSERT AN IMAGE FOR ALL THE AREA
    Traffic-permission
    20
    $ cat <apiVersion: kuma.io/v1alpha1
    kind: TrafficPermission
    mesh: default
    metadata:
    namespace: kuma-demo
    name: frontend-to-backend
    spec:
    sources:
    - match:
    service: frontend.kuma-demo.svc:80
    destinations:
    - match:
    service: backend.kuma-demo.svc:3001
    EOF

    View Slide

  21. Kong Integration

    View Slide

  22. Kuma.io
    API Server
    kuma-system
    kuma-demo
    kuma-injector
    Search Back-end Reviews-Redis
    Envoy Sidecar
    Proxy
    Envoy Sidecar
    Proxy
    Envoy Sidecar
    Proxy
    labels: kuma.io/sidecar-injection: enabled
    Ingress/GW
    Envoy Sidecar
    Proxy
    Front-end
    Envoy Sidecar
    Proxy
    Kong Integration (Gateway Mode)

    View Slide

  23. Traffic Routing/Canary - New in 0.3.2

    View Slide

  24. Kuma.io
    backend-api v0
    frontend-app
    backend-api v1
    backend-api v2
    Weight: 80
    Weight: 0
    Weight: 20

    View Slide

  25. ·ͱΊ
    ● Kuma͸Πϯετʔϧ͕؆୯Ͱѻ͍΍͍͢
    ● k8sωΠςΟϒαϙʔτʹՃ͑ͯVM, ϕΞϝλϧ΋ಉ͡Α͏ʹαʔϏεϝογϡΛద༻Ͱ͖Δ
    ● ͔ͳΓए͍ϓϩδΣΫτ͕ͩɺ։ൃ΋ΞΫςΟϒʹߦΘΕ͍ͯͯ੒௕͕ظ଴Ͱ͖Δ
    ● ϓϩμΫγϣϯࣄྫ͸·ͩ΄ͱΜͲͳ͍ɺ͜Ε͔ΒͷϓϩδΣΫτ

    View Slide

  26. Slack: https://chat.kuma.io
    μ΢ϯϩʔυ: kuma.io/install
    ΫΠοΫσϞ: https://github.com/Kong/kuma-demo
    ϦϯΫू

    View Slide